Skip to content
Get started

Purchase privacy notice

Version 2026-11-01.2

This page explains which personal data we process when you buy the Exhibify VR one-time license, what for, for how long and what your rights are. It complements the license terms.

1. Controller

  • ITGALLERY SOLUTIONS SLU, owner of Exhibify VR, tax ID (NIF) B76238153, with registered address at Calle Horno de Cal 4, Portal B, 35019 Las Palmas de Gran Canaria (Spain).
  • Contact: hello@exhibify.net.

2. What data we process

  • From the purchase form: first name, last name, email, language, exhibition name and the billing details (name or company name, whether you buy as a business or professional, tax ID, country, province or region and postcode).
  • From the boxes: that you accept the terms and whether you want to receive marketing emails, with the version of the text and the date.
  • From the payment: what Stripe returns to us: the payment ID, the amount charged and the billing address you enter there. Card details are handled by Stripe; we never see them.
  • From the account: the exhibition, the artworks, images and texts you upload and the dates of your license.
  • Technical data: the IP address, to limit repeated attempts and protect the form. Technical logs are deleted after 90 days at most.

The fields marked as required on the form are needed for the purchase: without them we cannot create the account or issue the invoice.

3. What we use them for and on what legal basis

  • Handling the purchase, creating your account and your exhibition and providing the service. Legal basis: the license contract.
  • Charging, issuing the invoice and meeting our tax and accounting obligations. Legal basis: compliance with legal obligations.
  • Answering your questions and sending service emails, such as the one to choose your password. Legal basis: the license contract.
  • Protecting the form and the service against abuse, for example by limiting repeated attempts. Legal basis: our legitimate interest in keeping the service secure.
  • Sending marketing emails, only if you tick the box (section 4). Legal basis: your consent.

4. The marketing emails box

  • It is optional: not ticking it changes nothing about the purchase.
  • If you tick it, we will email you Exhibify VR news and offers.
  • You can unsubscribe whenever you want, by writing to hello@exhibify.net or with the unsubscribe link in each email.
  • We keep the fact that you ticked it, the version of the text and the date, to be able to prove your consent.

5. How long we keep them

  • Requests that are never paid are deleted after 7 days.
  • Account data, while the license lasts and then until we delete the account. You can ask us to at any time.
  • The published exhibition stays visible after the license is deactivated, until it is deleted manually.
  • Invoice and payment data, for as long as tax and commercial law requires: six years for invoices and accounting records.
  • Marketing data, until you unsubscribe.

6. Who else processes the data

  • As processors, only for what we ask them to do:
    • Stripe: card payments;
    • Amazon Web Services: hosting and sending emails;
    • Holded: invoicing.
  • The tax authorities and other authorities, when the law requires it.
  • The Exhibify platform (vr.exhibify.net), where the account and the exhibition are created, belongs to ITGALLERY SOLUTIONS SLU: it is not a third party.
  • Amazon Web Services processes the data in Ireland. Stripe may process it outside the European Economic Area, for example in the United States, with the safeguards provided by the GDPR: the EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses.

7. Your rights

  • You can ask us to access, rectify or erase your data, object to its processing, restrict the processing and receive it to take it to another service (portability).
  • You can withdraw your consent to marketing emails at any time. This does not affect what was done before.
  • For any of this, write to us at hello@exhibify.net from the account email.
  • If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

8. What the purchase page stores in your browser

  • The purchase pages use no third-party cookies and no analytics tools.
  • While you buy, the form is stored in your browser (sessionStorage) so you do not lose what you typed if you come back from the payment page. The tax ID is only stored when you go on to pay. Everything is deleted when the purchase is finished or when you close the tab.