Privacy Policy

Who we are and what this policy covers

Steel Pulse MStudio ("we", "us", "the studio") operates the gallery site at gallery.steelpulsemstudio.com, including its gallery, print-on-demand ordering, commission requests, client accounts, reviews and related features (the "Services").

This Privacy Policy explains how we collect, use and disclose your personal information when you visit or use the Services, place an order or request, or otherwise communicate with us. Our separate online store at steelpulsemstudio.com is run on a different platform and has its own privacy policy.

The Services are intended only for adults aged 18 and over. By using the Services, you acknowledge that you have read this Privacy Policy and understand how your information is handled as described here.

Personal information we collect

"Personal information" means information that identifies, or can reasonably be linked to, you or another person. Depending on how you use the Services, we may collect:

• Account information: your name, email address and sign-in details when you create an account or sign in (including with Google, if you choose that option). Passwords are handled by our hosting and authentication provider; we never see them.
• Order information: your name, email address, shipping address, the works, sizes, SKUs and quantities you order, shipping region, amounts due, order notes and order status.
• Commission requests: the project details, style, medium, budget, deadline and any reference images you upload, along with your name and email address.
• Reviews and likes: the star rating, review text and display name you submit, and the works you like.
• Payment information: we do not collect or store card or bank details. Payments are made outside the Services through payment links or invoices from our payment processor (Stripe). We receive confirmation of payment, the amount and the order number you paid against, but not your full card details.
• Communications: information you include when you contact us, for example about an order or a commission.
• Usage information: the pages you visit on the Services, the referring website (if your browser reports one) and the time of each visit. If you are signed in, this activity is linked to your account.
• Device information: our hosting and infrastructure providers automatically process technical information such as your IP address, browser type and device information to deliver and secure the Services.

Age verification

To enter the Services you are asked for your date of birth. This check runs in your browser: your date of birth is stored only on your own device (in your browser's local storage) so you are not asked again, and it is not sent to or stored by us. You can remove it at any time by clearing your browser's site data.

Cookies and local storage

The Services use your browser's storage for features that are needed for the site to work: remembering that you passed the age check and keeping you signed in. We do not use advertising cookies, third-party advertising trackers or cross-site tracking pixels.

How we use your personal information

• To provide the Services: to create and manage your account, process and fulfil print orders, calculate amounts due and shipping, respond to and quote commission requests, show your order and request status, and publish reviews you submit once approved.
• To communicate with you: to provide customer support, confirm orders and commissions, send invoices or payment links, and respond to your questions.
• To understand and improve the Services: to see which pages and works are viewed, liked and ordered so we can improve the site and our catalogue.
• For security and fraud prevention: to authenticate accounts, protect the Services, and detect or investigate fraudulent, illegal or abusive activity. Please keep your sign-in details private.
• For legal reasons: to comply with applicable law and valid legal process, and to enforce our terms and protect our rights and the rights of others.

We do not currently use your information to send marketing emails. If we introduce marketing in the future, we will only do so as permitted by law and will give you a way to opt out.

Reviews and public content

Reviews you submit are checked by the studio before they appear. Once approved, your review, star rating and display name are visible to anyone who visits the Services. Do not include personal information in a review that you do not want to be public. Contact us if you want a review removed.

How we disclose personal information

We do not sell your personal information, and we do not share it for targeted advertising. We disclose it only:

• With service providers: who run parts of the Services for us: Base44 (website hosting, database, file storage and sign-in) and its infrastructure providers, Stripe (payment processing for payment links and invoices), Google (if you choose to sign in with Google), and shipping carriers or print partners when needed to fulfil your order.
• When you ask us to: for example to ship an order to an address you provide.
• For legal reasons and business transfers: to comply with law or legal process, to protect the Services, our rights or the rights of others, or in connection with a merger, sale or similar business transaction.

Our service providers process your information under their own privacy policies and the agreements they have with us.

Images and files

Reference images you upload with a commission request are stored privately and are accessible only to you and the studio. Artwork images published on the gallery are public by design.

Third-party websites and links

The Services link to websites we do not operate, including payment pages hosted by Stripe. Those sites have their own privacy and security practices, and we are not responsible for them. Please review their policies before providing information.

Children's data

The Services are for adults only and are not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with personal information, contact us and we will delete it. We do not sell or share the personal information of anyone under 16.

Security and retention

We use reasonable safeguards, and access to orders, commission requests and analytics is restricted to the studio's administrators. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Avoid sending sensitive information through insecure channels.

We keep personal information for as long as needed to maintain your account, provide the Services, keep business and tax records, resolve disputes and comply with legal obligations, and then delete or de-identify it.

Your rights and choices

Depending on where you live, including California, you may have some or all of the following rights. These rights are not absolute and may be limited by law.

• Access / know: request the personal information we hold about you.
• Delete: request that we delete your personal information.
• Correct: request that we correct inaccurate personal information.
• Portability: request a copy of your personal information in a portable format.
• Opt out of sale or sharing: we do not sell your personal information or share it for targeted advertising.

If you live in the UK or European Economic Area, you may also have the right to object to or restrict processing, and to withdraw consent where we rely on it, without affecting processing that took place before you withdrew it.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request. You may use an authorised agent; we will ask for proof that they are acting for you. We will not discriminate against you for exercising your rights, and we will respond within the time required by law.

Complaints

If you have a complaint about how we handle your personal information, please contact us first. Depending on where you live, you may be able to appeal our decision or lodge a complaint with your local data protection authority.

International transfers

Our service providers may store and process your personal information in countries other than the one you live in, including the United States. Where personal information from the UK or European Economic Area is transferred, we rely on recognised transfer mechanisms such as Standard Contractual Clauses, unless the destination is recognised as providing adequate protection.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational or regulatory reasons. We will post the revised policy on this page, update the "Last updated" date, and give notice where required by law.

Contact

If you have questions about this Privacy Policy or our privacy practices, or want to exercise any of your rights, email us at customersupport@steelpulsemstudio.com or write to us at 1875 Mission St, Ste 103, San Francisco, CA 94103, US. For the purposes of applicable data protection laws, Steel Pulse MStudio is the data controller of your personal information.