Privacy Policy
legal
Privacy Policy
Last updated: May 13, 2026 · Avant.Dev · Mexico City, Mexico · office@avant.dev
What we collect
- Contact inquiries: name, email, organisation, message
- Analytics: anonymous page views via Plausible, self-hosted (no cookies, no personal data; switch it off in the cookie notice at any time)
- Cookies: only essential ones — your session (login), language, currency and bag. No advertising or tracking cookies, so no consent is needed for them; the notice at the bottom tells you once
- Purchases: payment data processed by Stripe (we never store card data)
- Art sales above AML thresholds: identity documentation (LFPIORPI compliance)
Your rights
Under LFPDPPP (Mexico), UK GDPR, and EU GDPR you may request access, correction, deletion, portability, or object to processing of your data. Email office@avant.dev with the subject "DSAR Request".
Data retention
Inquiry data: 3 years · Sales records: 7 years (legal requirement) · Analytics: anonymous aggregates only, no retention concern.
Third parties
Stripe (payments) · Plausible (analytics, cookieless) · Cloudflare R2 (media storage) · MongoDB (database hosting) · Cal.com (call booking) · Artsy (gallery listings) · Email is sent from our own mail server, no-reply@avant.dev. We do not sell personal data. Ever.
Jurisdictions
Mexico (LFPDPPP) · United Kingdom (UK GDPR + MLR 2017) · European Union / Switzerland (GDPR) · United States (BSA awareness via Stripe)