Privacy Policy

Scope

This policy applies to information collected through our Services. It does not apply to third-party websites, platforms, or services that may be linked from our site (including social networks, payment providers, and shipping carriers).

Information we collect

We collect information you provide, information collected automatically, and (in some cases) information from third parties.

1) Information you provide

• Contact information: name, email address, phone number (if provided).
• Account information: username, password (stored in hashed form), preferences.
• Order information: items purchased, shipping destination (if applicable), order history.
• Communications: messages you send us, support requests, survey responses.
• User content (optional): reviews, comments, favorites/wishlists (if enabled).

2) Information collected automatically

• Device & usage data: IP address, browser type, device identifiers, pages viewed, referring/exit pages, timestamps.
• Approximate location: derived from IP address (not precise geolocation).
• Cookies & similar technologies: described in the Cookies & tracking section.

3) Information from third parties

• Payment processors: confirmation of payment and limited transaction details.
• Shipping/fulfillment providers: shipping updates and delivery status (where applicable).
• Analytics providers: aggregated reporting and measurement.

How we use information

• Provide and operate the Services: enable browsing, account features, carts, and checkout.
• Process orders: confirm purchases, deliver digital goods, ship physical items, and handle returns/refunds (if applicable).
• Customer support: respond to inquiries and troubleshoot issues.
• Communications: send transactional messages (receipts, order updates) and (with your choice) marketing emails.
• Personalization: remember preferences and recommend content or artworks (where enabled).
• Analytics & improvements: understand site usage, improve functionality and performance.
• Security & fraud prevention: protect accounts, prevent abuse, and secure transactions.
• Legal compliance: comply with laws, enforce policies, and resolve disputes.

How we share information

We do not sell your personal information in the traditional sense. We may share information as follows:

• Service providers: hosting, analytics, email delivery, customer support, and fraud prevention vendors.
• Payment processors: to complete transactions (see Payments).
• Shipping/fulfillment partners: to package and deliver physical items (where applicable).
• Compliance and protection: when required by law or to protect rights, safety, and security.
• Business transfers: in connection with a merger, acquisition, or sale of assets (with appropriate protections).

Cookies & tracking

We use cookies and similar technologies (such as pixels and local storage) to operate our Services, remember preferences, analyze traffic, and (if enabled) measure marketing performance.

Embedded content & third-party links

Our pages may include embedded content (e.g., videos, images, social posts). Embedded content may collect data as if you visited the third party directly. We are not responsible for third-party privacy practices.

Payments

We use third-party payment processors (e.g., Stripe, PayPal, or similar) to handle payments. Payment processors may collect and store payment information according to their own policies.

• We generally do not store full payment card numbers on our servers.
• We may store limited details needed for records and support (e.g., order ID, amount, payment status, and processor reference IDs).

Email marketing

If you subscribe to our newsletter, we may send updates about new works, exhibitions, and gallery news. You can opt out at any time by using the “unsubscribe” link in our emails or by contacting us at peace@alilsunshine.com.

Data retention

We retain personal information only as long as reasonably necessary for the purposes described in this policy, including order fulfillment, recordkeeping, dispute resolution, security, and legal compliance. Retention periods vary based on the type of data and our legal obligations.

Your choices & rights

Additional disclosures (where applicable)

• Do Not Track: Some browsers offer “Do Not Track” signals. There is no consistent industry standard; we may not respond to all such signals.
• California (CCPA/CPRA): You may have rights to know, delete, correct, and opt out of certain “sharing” for targeted advertising. We do not knowingly sell personal information. To submit a request, contact us at peace@alilsunshine.com.
• EEA/UK (GDPR): Where GDPR applies, our legal bases may include performance of a contract (orders), legitimate interests (security/analytics), consent (certain cookies/marketing), and legal obligations. You may have rights to access, rectify, erase, restrict, object, and data portability.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect your information. However, no system is completely secure. Please use strong passwords and keep login credentials confidential.

International visitors

If you access our Services from outside the country where we operate, your information may be processed in other locations. We take steps designed to protect your information consistent with this policy and applicable law.

Children’s privacy

Our Services are not intended for children under 13 (or the minimum age required by local law), and we do not knowingly collect personal information from children. If you believe a child has provided personal information, please contact us.

Changes to this Privacy Policy

We may update this policy from time to time. The “Last updated” date above indicates when changes take effect. If changes are material, we may provide additional notice on the site.