Privacy Policy

Information collected

Placing an order provides the store with a name, shipping address, email address, phone number, and the details of what was purchased. Payment details are a separate matter: card and account numbers are entered on PayPal‘s systems, and the store receives only a confirmation of payment — see the Payment Policy. Beyond orders, the site records basic technical data such as browser type and pages visited, gathered through cookies described in the Cookie Policy. The store has no customer accounts, so there are no stored passwords or login profiles to worry about.

Use of information

Order data serves exactly the purposes an order implies — producing the print, shipping it, sending the confirmation and tracking emails, handling any support or return that follows, and meeting tax and accounting obligations. Aggregate site statistics guide decisions like which artwork to keep. Marketing email goes only to addresses that joined the newsletter deliberately, and every such message carries a working unsubscribe link.

Sharing

Three categories of recipient receive personal data, each getting only what its role requires. The payment processor, PayPal, handles the transaction. The production partner receives the name, shipping address, and order contents needed to print and dispatch the canvas. The delivery carrier receives the name and address needed to deliver it. Beyond those three, data leaves the store only if the law compels it. We don’t sell your personal information, and we don’t rent or trade it with marketers either.

Retention

Order records are retained for as long as tax and accounting law requires business records to be kept, after which they are removed. Support correspondence is kept while the matter it concerns is open and for a reasonable period afterward. Newsletter addresses are kept until the subscriber unsubscribes.

Rights over personal data

Anyone whose data the store holds can request a copy of it, have inaccuracies corrected, or have it deleted. Requests go to ⟨EMAIL — SET BEFORE GO-LIVE⟩ and receive a response within 45 days. Deletion is honored in full except where a record must legally survive — a completed order’s tax record, for instance, cannot be erased before the retention law says so, and the response will say exactly which pieces remain and why.

California privacy rights

California residents have specific rights under the CCPA: the right to know what personal information has been collected and how it is used and shared, the right to request its deletion, and the right not to be treated differently for exercising either. Because the store does not sell personal information, there is no sale to opt out of. CCPA requests follow the same channel — ⟨EMAIL — SET BEFORE GO-LIVE⟩, answered within 45 days as the statute allows — with identity verified against the email address on the order to keep data out of the wrong hands.

Children

The store sells home decor to adults and is not directed at children under 13. No personal information is knowingly collected from children; a parent who believes a child has submitted data can have it removed through the request channel above.

Security

The site runs over an encrypted HTTPS connection throughout, payment credentials stay on the processor’s infrastructure, and order data is accessible only to the people who need it to run the store. No online system can be described as beyond risk, which is precisely why the store keeps the amount of data it holds small in the first place.

Contact

Privacy matters, including all requests described above, reach the store at ⟨EMAIL — SET BEFORE GO-LIVE⟩, by phone at ⟨PHONE — SET BEFORE GO-LIVE⟩, or by mail at ⟨LEGAL BUSINESS NAME — SET BEFORE GO-LIVE⟩, ⟨BUSINESS ADDRESS — SET BEFORE GO-LIVE⟩.