Privacy Policy

What We Collect

When you request a mural or commission, place an order, or contact us, we collect the information you provide directly: your name, email address, phone number (if given), shipping address, and any details about your project or order. We do not require you to create an account to buy a print, sticker, or original piece -- checkout is available as a guest.

The “stay in touch” form on the home, shop, and contact pages asks for your name and email address, and optionally what brought you here and anything you want to say. Only the name and email are required. Along with what you type, we record which page you sent it from and the two-letter country our content network reports. There is also an automated-submission check on every public form. When that check flags a submission as automated, blocked, or part of a security test, we keep the network address and browser identity of that submission for 400 days, and may report an abusive address to AbuseIPDB, a third-party abuse database. A submission the check does not flag still records a salted, one-way version of the network address rather than the address itself.

That form carries an optional, unticked checkbox asking whether we may email you occasionally about new work and prints. Sending the form is a request for a reply -- it is not, on its own, permission to market to you. We record your answer either way, and we only send that kind of email to people who ticked the box. You can change your mind at any time; see Your Choices below.

Some information is collected automatically when you browse the site, including your IP address, the approximate country and time zone it maps to, and basic browser and device details. We use this to estimate shipping and to keep the site working correctly -- see Location & Shipping Estimates below.

Accounts

Creating an account is optional. If you do create one, we store your name, email address, and sign-in credentials through Amazon Cognito, which manages authentication on our behalf -- we do not store your password ourselves. An account also lets you save favorites, keep a payment method on file for faster checkout (stored with Stripe, not with us), leave a product review, and open a support ticket. Anything you save to your account stays tied to it until you ask us to remove it or delete the account.

Payments

Checkout is handled by Stripe on Stripe’s own secure, hosted payment page. We never see or store your full card number -- Stripe processes and secures payment details on our behalf. We keep a record of your order (items, shipping address, and amount paid) so we can fulfill it and provide support.

Location & Shipping Estimates

So the shipping calculator can show rates and delivery estimates for the right country without asking you to fill in a form first, we send your IP address to ip-api.com, a third-party geolocation service. It returns an approximate country and time zone, and an indication of whether the address appears to belong to a proxy or VPN, which helps us catch a mismatch between your detected location and your real shipping destination. We use the result only to estimate shipping and to reduce fraud. We do not use it to build a profile of you or for marketing purposes. Checkout also runs the same automated-submission check described above: on a flagged checkout attempt we keep the network address tied to that attempt, never to the resulting order, for the same 400 days.

Customer Support Chat

The support chat on this site is answered by an AI assistant. To generate a reply, the messages in your chat session are sent to OpenAI, which processes them and returns a response. We keep the transcript so we can follow up on your question, and if the assistant cannot help, the conversation is escalated to Courtney by email. Please do not enter payment card numbers, passwords, or other sensitive details into the chat -- for anything involving payment, use checkout or email us directly.

How We Use Your Information

• To fulfill and ship orders, and to send order confirmations.
• To respond to mural, commission, and general inquiries submitted through the site.
• To provide customer support for an existing order (shipping issues, refund requests), including through the support chat.
• To show accurate shipping options and delivery estimates for your location.
• To operate your account, if you choose to create one -- sign-in, order history, favorites, and reviews you submit.
• To understand how the site is used, so we can improve it (basic, aggregated site analytics).

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

Who We Share Information With

Fulfilling an order may require sharing limited order details (name, shipping address, item) with our production partners -- currently Printful and Printify -- and with shipping carriers. Payment information is handled entirely by Stripe. We do not share more than each partner needs to complete their part of your order.

The full set of service providers that receive some of your information, and what each one receives, is:

• Stripe -- payment processing and any payment method you choose to save.
• Printful and Printify -- your name, shipping address, and the item ordered, so made-to-order products can be produced and shipped.
• Shipping carriers -- your name and shipping address for delivery and tracking.
• ip-api.com -- your IP address, to estimate your country and time zone for shipping.
• OpenAI -- the contents of your support chat messages, to generate a reply.
• AbuseIPDB -- the network address of a submission our automated-submission check flags as abusive, reported to this third-party abuse database.
• Amazon Web Services -- hosting, account sign-in (Cognito), and the email we send you about orders and support.
• Google -- the analytics data described under Cookies & Analytics below, handled under Google’s own privacy policy.
• Substack -- if you subscribe to Studio Notes, you are taken to Substack’s own site, where Substack, Inc. collects your email address and handles any subscription payment under their privacy policy. We do not collect or store your Studio Notes subscription on this site.

We may also disclose information where the law requires it. Beyond that, we do not sell or rent your information to anyone.

Cookies & Analytics

This site uses Google Analytics 4, a service of Google LLC, to understand which pages people visit and where visitors come from. When you load a page, Google’s analytics tag records the page you viewed, an approximate location derived from your IP address (city or country level, not a street address), basic device and browser details, and the site or search engine that referred you. It sets first-party cookies (one is named “_ga”) so that repeat visits from the same browser are counted once rather than as new visitors.

When you send one of our forms, the tag also records that a form was sent, which form it was, and the option you picked from its dropdown (for example “prints” or “a mural”). It never receives your name, email address, phone number, or anything you typed. We have turned Google Signals off for this property and set the retention of analytics event data to two months, the shortest period Google offers -- we are not building advertising profiles from this data. Google Analytics does not collect payment information, and the reports we review do not identify you personally. You can block it entirely; see Your Choices below.

Data Retention

We keep order records as long as reasonably needed for customer support, accounting, and legal requirements. Mural and commission inquiries are kept to manage the project pipeline and are not used for unrelated purposes. Support chat transcripts are kept so we can follow up on the conversation. Account information is kept while your account is open, and is removed when you ask us to close it, apart from the order records we are required to retain. Analytics event data -- the record of individual page views and form sends -- is deleted by Google two months after it is collected. The identifier Google uses to recognise a returning browser is kept for up to fourteen months, and that period starts again each time the same browser visits.

Your Choices

You can request a copy of the information we hold about you, ask us to correct it, or ask us to delete it, subject to what we are required to keep for orders already placed. If you have an account, you can update your profile and remove a saved payment method yourself from your account settings, and you can ask us to close the account entirely. Email us at courtney@courtneyedwardsart.com or use the contact page and we will respond as soon as we can.

If you ticked the box to hear about new work and later change your mind, tell us at the same address and we will stop -- you do not need to give a reason, and it does not affect anything else we hold for an order you have placed.

You can stop Google Analytics from recording your visits with the Google Analytics Opt-out Browser Add-on, or by using a browser or extension that blocks analytics scripts. The site works the same either way.

Changes to This Policy

If this policy changes in a meaningful way, we will update this page and revise the “Last updated” date above.

Website Maintenance

The Courtney Edwards Art website is maintained by KrisCodes2 LLC.