Privacy Policy

1. Introduction

ArtByME ("I," "me," or "my") is the online art studio of Margaret Edmondson, operating at artbyme.studio. This Privacy Policy explains how I collect, use, and protect your personal information when you visit my website, make a purchase, sign up for my newsletter, or interact with me in any way.

By using my website, you agree to the practices described in this policy.

2. Information I Collect

Information you provide directly:

• Name, email address, phone number (when you place an order, request a commission, or contact me)
• Shipping and billing address (when you make a purchase)
• Payment information (processed securely by Stripe, I never store your card details)
• Commission request details (descriptions, preferences, reference images)
• Account login credentials (email and password, or Google sign-in)
• Newsletter subscription email address

Information collected automatically:

• Browser type, device information, and operating system
• IP address and general geographic location
• Pages visited, time spent on site, and referring URLs
• Cookies and similar tracking technologies (see Section 6)

3. How I Use Your Information

I use the information I collect to:

• Process and fulfill your orders, including shipping and delivery
• Communicate with you about your orders, commissions, and account
• Send you marketing emails about new artwork, collections, classes, and promotions (with your consent)
• Improve my website, products, and customer experience
• Prevent fraud and maintain site security
• Comply with legal obligations

Important: I use your personal information for my own internal marketing purposes only. I may email you about new artwork, upcoming classes, special offers, or studio updates. You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any email.

4. Information Sharing

I do not sell, rent, or share your personal information with third parties for their marketing purposes.

I share information only with the following service providers who help me operate my business:

• Stripe, payment processing
• Lumaprints / Printful, print fulfillment and shipping for canvas prints
• USPS / UPS / FedEx, shipping carriers for original artwork
• Resend, transactional and marketing email delivery
• Supabase, secure data hosting
• Vercel, website hosting
• Meta (Facebook/Instagram), advertising analytics via the Conversions API (hashed, non-identifiable data only)

These providers are contractually obligated to use your information only to perform services on my behalf and to protect your data.

5. Data Retention

I retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, including to complete transactions, comply with legal obligations (such as tax records), resolve disputes, and enforce my agreements. Order records are retained for a minimum of 7 years for tax and legal compliance.

6. Cookies and Tracking

I use cookies and similar technologies to maintain your session, remember your cart, and understand how visitors use my site. I may also use the Meta Pixel for advertising measurement and optimization.

You can control cookies through your browser settings. Disabling cookies may affect site functionality, such as your shopping cart.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal information I hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications
• Request a copy of your data in a portable format

To exercise any of these rights, use my contact form. I will respond to your request within 30 days.

8. Data Security

I take reasonable measures to protect your personal information, including encryption in transit (TLS/SSL), secure payment processing through Stripe (PCI-DSS compliant), and access controls on my databases. However, no method of transmission over the internet is 100% secure, and I cannot guarantee absolute security.

9. Children's Privacy

My website is not directed to children under 13. I do not knowingly collect personal information from children. If you believe a child has provided me with personal information, please contact me and I will delete it promptly.

10. Changes to This Policy

I may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Your continued use of my website after changes are posted constitutes your acceptance of the revised policy.

11. Contact Me

If you have questions about this Privacy Policy or how I handle your data, please contact me:

ArtByME, Margaret Edmondson
Contact form: artbyme.studio/contact
Website: artbyme.studio