BÁRBARA GOY
Commission a mural

Privacy Policy

Last updated: 31 August 2026

BÁRBARA GOY is responsible for this store and website, including all related information, content, features, tools, products and services, with the aim of offering you, our customer, a personalised shopping experience (the “Services”). This Privacy Policy describes how we collect, use and share your personal information when you visit, use or make a purchase or other transaction through the Services, or when you communicate with us in any other way. In the event of a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail with regard to the collection, processing and sharing of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how your information is collected, used and shared, as described here.

Personal information we collect or process

When we use the term “personal information”, we mean information that identifies or can be associated with you or another person. Personal information does not include data collected anonymously or data that has been dissociated from the identity of its subject so that it can neither identify nor be associated with you. We may collect or process the following categories of personal information, including inferences drawn from that information, depending on how you interact with the Services, where you live and as permitted or required by applicable law:

  • Contact information, including your name, address, billing address, shipping address, telephone number and e-mail address.
  • Financial information, including credit card, debit card and financial account numbers, payment card details, bank account data, transaction information, payment method, receipts and other payment-related information.
  • Account information, including your username, password, security questions, preferences and settings.
  • Transaction information, including the items you view, add to your basket, add to your wishlist, buy, return, exchange or cancel, as well as your past transactions.
  • Communications with us, including the information you provide when you contact us, such as when you reach our customer service.
  • Device information, including information about your device, browser or network connection, your IP address and other unique identifiers.
  • Usage information, including information about how you interact with the Services, such as how and when you access or browse them.

Sources of personal information

We may collect personal information in the following ways:

  • Directly from you, including when you create an account, visit or use the Services, communicate with us or otherwise provide your personal information.
  • Automatically, through the Services, including from your device when you use our products or services or visit our sites, and through cookies or similar technologies.
  • From our service providers, including when we engage them to enable certain technologies and when they collect or process your personal information on our behalf.
  • From our partners or third parties.

How we use your personal information

Depending on how you interact with us or which Services you use, we may use your personal information for the following purposes:

  • Providing, personalising and improving the Services. We use your personal information to provide the Services to you, which includes performing our contract with you, processing your payments and orders, remembering your preferences and the items you are interested in, sending notifications relating to your account, processing purchases, returns, exchanges or other transactions, creating, maintaining and managing your account, arranging the shipping of orders, facilitating returns and exchanges, allowing you to post reviews, and delivering a personalised shopping experience such as recommending products related to your purchases.
  • Marketing and advertising. We use your personal information for marketing and promotional purposes, such as sending promotional, advertising and marketing communications by e-mail, text message or post, and displaying online advertising for products or services, both on our Services and on other sites, including on the basis of items you have already bought, added to your basket or other activity on the Services.
  • Security and fraud prevention. We use your personal information to authenticate your account, ensure a secure shopping and payment experience, detect, investigate or take action on possible fraudulent, illegal, unsafe or malicious activity, protect public safety and keep our services secure. If you choose to use the Services and create an account, you are responsible for keeping your access credentials safe. For your own security, avoid sharing your username, password or any access information with others.
  • Communicating with you. We use your personal information to provide customer service, respond to your requests, deliver efficient services and maintain our business relationship with you.
  • Legal reasons. We use your personal information to comply with applicable law or to respond to valid legal process, including requests from law enforcement or government bodies, to investigate or take part in potential or actual civil proceedings or other legal disputes, and to enforce or investigate possible breaches of our terms or policies.

How we share your personal information

In certain circumstances we may share your personal information with third parties for legitimate purposes, as set out in this Privacy Policy. Those circumstances include:

  • With our technology providers, manufacturers and other partners who perform services on our behalf (such as store hosting, IT management, payment processing, data analytics, customer service, cloud storage, order fulfilment and shipping).
  • With business and marketing partners, to provide marketing and advertising services to you — for example, to enable personalised advertising based on your online activity. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you live, you may have the right to ask us not to share your information in order to display personalised advertising and marketing based on your online activity across different sites and merchants.
  • When you authorise, request or consent to us sharing certain information with third parties, for example to ship products or when you use social media widgets or login integrations.
  • With our affiliates or other companies within the same corporate group.
  • In connection with business transactions such as mergers or insolvency, to comply with applicable legal obligations (including responding to subpoenas, search warrants and similar requests), to enforce the applicable terms of service or policies, and to protect or defend the Services, our rights and the rights of our users or third parties.

Platform and service providers

This store runs on an e-commerce platform contracted by us, which hosts the Services and processes personal information on our behalf and on our instructions. The information you submit to the Services may be transmitted to that platform and to other service providers (for example payment providers, carriers and e-mail providers), including third parties that may be located in countries other than your country of residence, always for the purpose of operating and improving the Services for you. These providers act as processors: they may only handle your personal information for the purposes described in this Policy and to comply with legal obligations.

Third-party sites and links

The Services may contain links to websites or other online platforms operated by third parties. If you follow links to sites that are not affiliated with or controlled by us, we recommend that you review their privacy and security policies and their terms and conditions. We do not guarantee and are not responsible for the privacy or security practices of those sites, including the accuracy, completeness or reliability of the information they make available. Information you share in public or semi-public settings, such as third-party social networks, may also be visible to other users of the Services and/or of those platforms, without any restriction on use by us or by third parties. The inclusion of such links in the Services does not in itself imply any endorsement of the content of those platforms or of their owners and operators, unless expressly stated within the Services.

Children’s information

The Services are not intended for use by children and we do not knowingly collect any personal information from minors, as defined by the law applicable in your jurisdiction. If you are the parent or legal guardian of a child who has shared personal information with us, you may contact us through the channels below to request its deletion. As at the effective date of this Privacy Policy, we have no actual knowledge of “sharing” or “selling” (as defined by applicable law) personal information of people under 16.

Security and retention of your information

Although we take appropriate security measures to protect your personal information, no system is completely infallible. We therefore cannot guarantee “absolute security”. In addition, data transmitted to us may not be protected in transit. For that reason we recommend that you avoid sending sensitive or confidential information through insecure channels.

The period for which we retain your personal information may vary according to several factors, including the need to keep your account active, provide the Services, comply with legal obligations, resolve disputes or enforce applicable contracts and policies.

Your rights and choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. These rights are not absolute, may apply only in certain circumstances and, in some cases, we may refuse the request as permitted by law.

  • Right of access / right to know. You may have the right to request access to the personal information we hold about you.
  • Right to erasure. You may have the right to ask us to delete the personal information we hold about you.
  • Right to rectification. You may have the right to ask us to correct inaccurate personal information we hold about you.
  • Right to portability. You may have the right to receive a copy of your personal information and to ask for it to be transferred to a third party, in certain circumstances and subject to some exceptions.
  • Managing communication preferences. We may send you promotional e-mails, and you can opt out at any time using the unsubscribe option included in those e-mails. Even if you opt out of promotional communications, we may still send you non-promotional messages, such as notifications about your account or the orders you have placed.

You may exercise any of these rights directly within the Services, where available, or by contacting us using the details below.

We will not discriminate against you for exercising any of these rights. You may need to verify your identity before we process your requests, as permitted or required by applicable law. Under applicable law, you may appoint an authorised agent to make requests on your behalf. Before accepting such a request from an agent, we will require proof of authorisation to act on your behalf. We may also ask you to confirm your identity directly with us. We will respond to the request within the period required by applicable law.

Complaints

If you have a complaint about how we process your personal information, please contact us using the details below. Depending on where you live, you may have the right to challenge our decision by contacting us again through the same channels, or to lodge a complaint directly with your local data protection authority.

International transfers

Your personal information may be transferred, stored and processed outside the country in which you live.

If we transfer your personal information outside the European Economic Area or the United Kingdom, we will use recognised transfer mechanisms, such as the European Commission’s Standard Contractual Clauses or equivalent agreements issued by the competent United Kingdom authority, as applicable, except where the transfer is made to a country deemed to provide an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, either to reflect changes in our practices or for other operational, legal or regulatory reasons. We will post the revised version of this Privacy Policy on this site, update the “Last updated” date and provide notice as required by applicable law.

Contact

If you have any questions about our privacy practices or about this Privacy Policy, or if you wish to exercise any of your rights, please contact us on +55 21 98358-1860, by e-mail at adm@barbaragoy.art, or at BARBARA GOY EVENTOS LTDA, R. Sebastião Guimarães Correa, 273, São Paulo — SP, 04304-060, Brazil.

This translation is provided for your convenience. The Brazilian Portuguese version of this policy is the binding one; in case of any discrepancy, the Portuguese text prevails.