Privacy Policy

Effective October 1, 2026. This Privacy Policy forms part of, and is incorporated into, our Terms & Conditions.

Effective Date: October 1, 2026

1. Scope; Who We Are

This Privacy Policy describes how F.J. Hakimian, Inc., 145 East 57th Street, 2nd Floor, New York, NY 10022, USA (“F.J. Hakimian”, “we”, “us”) collects, uses, discloses, and protects personal information when you visit www.fjhakimian.com, contact us, visit our gallery, or purchase from us, wherever in the world you are located. For individuals in the European Economic Area, the United Kingdom, and Switzerland, F.J. Hakimian, Inc. is the data controller. This Policy does not cover third-party websites we link to, and it does not cover our employees’ and job applicants’ personal data, which is addressed in separate internal notices.

2. Information We Collect

Order and client information (collected from you): name, billing and shipping addresses, email, phone number, order history, and communications with us. Payment card details are collected and processed directly by our third-party payment processor; we do not store full card numbers on our systems.

Device and usage information (collected automatically): IP address, browser type and version, time zone, pages and products viewed, search terms, referring pages, and interaction data, collected via cookies, log files, pixels, and similar technologies.

Search information: the words you type into the site search, including any description you write in your own words and the earlier lines of the same search conversation, together with the number of results returned. We retain this to understand what visitors are looking for and where our catalogue descriptions fall short. It is stored without your IP address; where you are signed in, it is stored against your account.

Marketing information: your subscription preferences and interactions with our emails and advertisements.

Gallery visit information: appointment details and, where signage indicates, CCTV footage at our premises.

3. How We Use Information; Legal Bases

We use personal information to: fulfill and deliver orders, arrange shipping, and process payments (performance of a contract); respond to inquiries and provide client service (contract / legitimate interests); maintain business records and comply with tax, accounting, customs, sanctions-screening, and other legal obligations (legal obligation); operate, secure, and improve the Site (legitimate interests); send marketing communications where you have subscribed or where otherwise permitted, which you can opt out of at any time (consent / legitimate interests); and prevent fraud and protect our legal rights (legitimate interests). The legal bases in parentheses apply where GDPR, UK GDPR, or similar laws govern.

4. How We Share Information

We share personal information only with: our service providers acting on our instructions — website hosting (Digital Ocean), payment processing (our third-party payment processor), email and marketing platforms (Mailchimp), shipping, logistics and customs brokers, and IT and professional advisers; our analytics provider (Google Analytics) as described in Section 6; authorities, courts, and regulators where required by law, including customs and sanctions authorities in connection with international shipments; and a successor entity in connection with a merger, acquisition, or sale of assets, with notice where required by law. We do not sell personal information for money.

Artificial intelligence providers. Where you describe what you are looking for in your own words, that text and the earlier lines of the same search conversation are sent to Anthropic PBC, a United States provider, which interprets them and returns search criteria. Only the text you type is sent: not your name, email address, account, location, or browsing history. Under the commercial terms applicable to our account, Anthropic does not use this text to train its models. The provider does not select which pieces are shown to you; it returns criteria, and our own catalogue answers the search. If you dictate a search using the microphone, the audio is transcribed by your browser, and in Chrome and Edge that audio is sent to Google for that purpose; this occurs only when you activate the microphone. You may use the site without either feature by using the filters provided alongside the search.

5. International Transfers

We are headquartered in New York and our systems are hosted in the United States; if you are located outside the United States, your information will be transferred to and processed in the United States. Our team is based in New York; on occasion, staff travelling outside the United States may access client information remotely through our secured systems, and such access is limited to what is needed to serve you. Where information about individuals in the EEA, UK, or Switzerland is transferred to countries not recognized as providing adequate protection, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum or IDTA).

6. Cookies, Analytics, and Advertising

We use cookies and similar technologies, and we set the following:

The first two are necessary for the Site to work and cannot be switched off. You can change your mind about the rest at any time using Cookie settings, which appears in the footer of every page.

Where you are. Visitors in the European Union, the United Kingdom, Iceland, Liechtenstein, Norway and Switzerland are asked before any non-essential cookie is set. Visitors in the United States are not asked, because no US law requires it, and can switch them off with the same link. We determine your location from the country of your IP address using a database supplied by DB-IP (IP Geolocation by DB-IP, licensed under CC BY 4.0). The address itself is not stored for this purpose.

Your other options. You can control cookies through your browser settings; opt out of Google Analytics at tools.google.com/dlpage/gaoptout; manage advertising preferences with Google directly; and use the Digital Advertising Alliance opt-out at optout.aboutads.info. Where required by applicable U.S. state law, we treat the sharing of identifiers with advertising partners for cross-context behavioral advertising as a disclosure you may opt out of, including via the Global Privacy Control browser signal, which we honor where legally required.

7. Retention

We retain personal information only as long as needed for the purposes described above: transaction and invoicing records for as long as required by tax, accounting, customs, and legal-hold obligations (typically up to seven (7) years); client and order-history records while the client relationship remains active and for a reasonable period thereafter; marketing data until you unsubscribe or it becomes inactive; server logs for approximately thirty (30) days; and search records for up to four hundred (400) days, after which they are deleted automatically. We then delete or anonymize the information.

8. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, to withdraw consent, and to opt out of targeted advertising. Individuals in the EEA, UK, and Switzerland have the rights provided by the GDPR and UK GDPR, and may lodge a complaint with their local supervisory authority. California residents and residents of other U.S. states with comprehensive privacy laws have the rights provided by those laws to the extent they apply to us. To exercise any right, contact us using the details in Section 12; we will verify your identity and respond within the time required by applicable law. You may authorize an agent to act for you where the law allows. We will not discriminate against you for exercising your rights.

9. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, or misuse, consistent with our obligations under applicable law, including the New York SHIELD Act. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

The Site is not directed to children, and we do not knowingly collect personal information from anyone under sixteen (16). If you believe a child has provided us personal information, contact us and we will delete it.

11. Changes

We may update this Policy from time to time. The current version, with its effective date, will always be posted on this page, and we will provide additional notice of material changes where required by law.

12. Contact

F.J. Hakimian, Inc., Attn: Privacy, 145 East 57th Street, 2nd Floor, New York, NY 10022, USA; Tel: 212.371.6900; Email: fjh@fjhakimian.com.