Privacy Policy

This policy explains what personal information Aubrey Cobbett Studio LLC (“we,” “us”) collects when you visit aubreycobbett.com, place an order, or sign up for our newsletter, and how that information is used, shared, and protected. By using this site, you agree to the practices described below.

Information we collect

Order information. When you place an order, we collect your name, email address, phone number, and shipping address. Payment card details are entered directly with our payment processor and are never stored on our servers. We retain only the last four digits and card type for your order history.

Account information. If you create an account, we store your name, email, password (encrypted, never stored in plain text), saved addresses, and order history so you can track and reorder.

Collectors Circle information. If you subscribe to our Collectors Circle, we store your first name and email address. You may optionally provide your birthday month to receive a birthday gift; this is entirely voluntary.

Contact form information. If you reach out through our contact form, we collect your name, email, message, and any files you choose to attach. Attachments are sent directly to us by email and are not stored in our database.

Automatically collected information. Like most websites, our server logs basic technical data (IP address, browser type, pages visited) for security and performance purposes. We use a session cookie to keep track of your shopping cart and, if you’re logged in, your account session. Our security and payment services may also set strictly necessary cookies. No advertising or cross-site tracking cookies are set.

How we use your information

• To process, fulfill, and ship your order
• To send order confirmations, shipping updates, and delivery notifications
• To respond to questions submitted through our contact form
• To send newsletter emails, welcome and birthday offers, and (if you leave items in your cart) a reminder, only if you’ve opted in
• To detect and prevent fraud, abuse, and unauthorized access
• To understand how visitors use our site, in aggregate, so we can improve it

We do not sell or rent your personal information to third parties, and we do not use it for third-party advertising.

Cookies & analytics

We use an HTTP-only session cookie to maintain your shopping cart and, if applicable, your logged-in session. Our security and payment services may also set strictly necessary cookies to protect the site and prevent fraud. These cookies are required for the site to function and are not used to track you across other websites or for advertising.

We use a privacy-focused website analytics tool to understand overall traffic patterns (e.g. which pages are popular). It does not use tracking cookies, does not collect personally identifiable information, and does not share data with advertising networks.

How we share your information

We work with a small number of trusted service providers to operate the store, each of whom only receives the information necessary to perform their function and is bound by their own privacy and security obligations:

• A payment processor, to securely handle card transactions
• A cloud hosting and storage provider, to run the site and store product images
• An email service provider, to deliver order confirmations, shipping updates, and (if opted in) newsletter emails
• Print fulfillment partners, who receive your name, shipping address, and order details needed to produce and ship your artwork
• A shipping and label-generation service, to create shipping labels and provide tracking
• A website analytics provider, as described above

We may also disclose information when required by law, to protect our legal rights, or in connection with a business transfer such as a merger or acquisition.

Data retention

We retain order records for as long as necessary to fulfill your order, provide customer support, and meet our tax and legal recordkeeping obligations. If you request deletion of your account, we will remove personal information that isn’t required for these purposes.

Your rights & choices

You may request access to, correction of, or deletion of your personal information at any time. Depending on where you live, you may have additional rights under laws such as the GDPR (EU/UK) or state privacy laws (e.g. CCPA), including the right to know what information we hold about you and to request its deletion.

To unsubscribe from marketing emails, use the “unsubscribe” link included in every newsletter email; it takes effect immediately. You can also manage your details from your account settings.

For any privacy-related request, please contact us. We’ll respond as promptly as we can.

Children’s privacy

Our site is intended for a general audience and is not directed at children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will remove it.

Data security

We use industry-standard safeguards, including encrypted connections and encrypted password storage, to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and to limit access to only what each service needs to do its job.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or for legal reasons. The “last updated” date at the top of this page reflects the most recent revision. Significant changes will be noted here.

Questions about this policy? Please contact us and we’ll be happy to help.