Privacy Policy

Changes to this policy

We may update this privacy policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised policy on this page and update the "last updated" date above.

What we collect

We collect contact details (such as your name, email address, and phone number), order information (such as billing and shipping addresses, and the products you purchase), and any messages you send us for support. We do not collect or store account information, usernames, or passwords, because this site does not use customer accounts.

Usage data and cookies

Your cart and your chosen theme and currency are stored in your own browser (in localStorage) and never reach our servers. If configured, we use Google Analytics 4 and Microsoft Clarity to understand how visitors use the site; Clarity may record session replays and heatmaps of on-site behaviour. These tools only run when they have been configured for the site, and you can control cookies through your browser settings.

Information from third parties

We work with a small number of service providers who process data on our behalf: Stripe for payments, Vercel for hosting, Neon for our database, and Brevo for transactional and marketing email. When you pay, your card details are entered directly on Stripe's own hosted checkout page and never reach our servers. If you choose to pay with PayPal instead, PayPal processes that payment on its own platform and handles your data under its own privacy policy.

How we use it

We use your information to fulfil orders, send transactional emails (such as order and shipping confirmations), prevent fraud, respond to support requests, and improve our products and service. If you sign up for our newsletter, we may also send you marketing email; every marketing email includes a way to opt out.

How we disclose it

We share information with the vendors named above (Stripe, PayPal, Vercel, Neon, and Brevo) so they can provide the services we use them for, as required to comply with the law, respond to legal process, or protect our rights, and in connection with a business transfer such as a merger, acquisition, or sale of assets.

Third-party links

Our site may contain links to third-party websites or services that we do not own or control. We are not responsible for the privacy practices of these third parties, and we encourage you to read their privacy policies before providing them with information.

Children's data

Our site is not intended for children, and we do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us so we can delete it.

Security and retention

We take reasonable measures to protect your personal information from loss, theft, misuse, and unauthorized access. No card data is stored by us — it is handled entirely by Stripe. We retain personal information only for as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law.

Your rights

• Right to access the personal information we hold about you
• Right to delete your personal information
• Right to correct inaccurate or incomplete personal information
• Right to have your personal information transferred (data portability)
• Right to restrict or object to how we use your personal information
• Right to withdraw consent, where we rely on consent to process your information
• Right to appeal a decision we make regarding a request you submit
• Right to manage your communication preferences, including opting out of marketing email

Complaints

If you have a complaint about how we handle your personal information, please contact us using the details below so we can try to resolve it. You may also have the right to lodge a complaint with your local data protection authority.

International transfers

We are registered in Chile and your personal information is handled in accordance with Chile's Ley N° 19.628 sobre Protección de la Vida Privada. The vendors named above (Stripe, PayPal, Vercel, Neon, and Brevo) may process your personal information outside Chile. Where personal information about users located in Europe or the United Kingdom is transferred this way, we rely on recognised safeguards, such as Standard Contractual Clauses, put in place by those providers for that purpose.

Contact

If you have questions about this privacy policy or how we handle your personal information, contact us at support@toomanyhumans.art.