Privacy Policy

Who we are

Pandora Art Box LLC is based in Miami, Florida. For privacy questions or requests, email [email protected]. Our correspondence address is 1000 Brickell Ave, Suite 715, Miami, FL 33131. This is not a public gallery or an authorized return address.

Information you provide

The contact form asks for your name, email address, painting of interest, inquiry topic, optional delivery country and message. An offer also includes the selected painting and your offer amount in USD; a message is optional for offers. We use these details to respond, review offers, discuss delivery and manage correspondence. If you email us directly, we receive your email address, message and any attachments you choose to send.

Please do not send payment-card details or unnecessary sensitive information. This website does not collect payment-card details or provide a checkout, customer account or newsletter signup.

Form delivery and email

Your on-site submission is processed by our Cloudflare Pages Functions backend and sent to Pandora Art Box using AgentMail, our email service provider. AgentMail processes and stores the email for delivery and correspondence. We attempt to send a fixed receipt to your email address after accepting your inquiry. A receipt is not acceptance of an offer, a reservation or a marketing subscription. We reply by email within 2 business days.

If delivery or the receipt cannot be confirmed, the form tells you. Please keep the request reference when contacting us about an uncertain submission. Entered details remain in the page; we do not save them to browser storage. Direct email and phone are available as alternatives.

Technical information and safeguards

Cloudflare hosts this website and processes technical request information, including IP addresses and browser information. Cloudflare Turnstile checks for automated abuse, and the server verifies the result before sending mail. Turnstile may process device and browser signals; Cloudflare processing is governed by its applicable privacy policy and service terms.

Cloudflare D1 stores request references, hashed message fingerprints, keyed hashes of network and email addresses, delivery status, provider message identifiers and timestamps to limit abuse and duplicate emails. It does not store message text, names or raw email/IP addresses in this database. These safeguards persist across server restarts. Records older than 30 days are removed during subsequent submission processing; if there are no submissions, cleanup waits until processing resumes. Email copies are retained separately under our correspondence policy.

We do not add analytics, advertising trackers, marketing cookies, local storage or session storage. Cloudflare may use necessary security technologies. Credentials stay on the server. No method of transmission or storage is completely secure.

Sharing and retention

We use inquiry information for the conversation and any resulting sale, not to enroll you in marketing. Information is shared with our email provider for delivery and correspondence, and may be disclosed where necessary to meet legal obligations or address a dispute. An authenticity concern may be reviewed with the artist using the information relevant to the concern.

Our retention policy is to keep inquiries that do not result in a purchase for up to 12 months after the last correspondence, then delete them unless an unresolved dispute or legal reason requires longer retention. Purchase records are retained separately as needed for accounting and legal obligations. This policy is handled through manual review, not an automatic deletion system.

Your choices and requests

Email [email protected] to request access to, correction of or deletion of information you provided. We may need to verify your identity. Information needed for a legal obligation or unresolved dispute may need to be retained. This request route does not limit privacy rights available under applicable law.

This policy describes the current website and associated correspondence. If the website's data practices change, we will update this policy to describe them.