Privacy Policy

Last updated: September 2025

1) Information We Collect

• Email Opt‑In (Samples): when you request our free sample pack, we collect your email address via our processor Formspree, together with your explicit consent and basic metadata (submission time and page source).
• Purchases & Subscriptions: when you buy or subscribe, our payment provider Lemon Squeezy collects name, email, billing address, and payment details. We do not store payment card data on our servers.
• Analytics & Marketing Tags: we use Google Analytics 4, Meta (Facebook) Pixel, and Pinterest Tag to measure usage and run campaigns. These tools may process IP address, device information, and browsing events (e.g., page views, add to cart, subscription intent).
• Technical Data & Cookies: we use cookies and similar technologies to ensure the site functions, analyze performance, and support marketing.

2) How We Use Information

• Deliver the free samples you requested and send updates if you opted in.
• Process orders, manage subscriptions, and provide customer support.
• Improve website performance, content, and campaigns.
• Comply with legal obligations (e.g., taxation, accounting, fraud prevention).

3) Legal Bases (GDPR)

• Consent for email marketing and for analytics/marketing cookies in the EEA.
• Contract to process purchases and deliver digital goods you requested.
• Legitimate interests to maintain site security and measure basic performance (outside EEA consent requirements).

4) Sharing & Processors

We do not sell personal data. We share limited data with trusted processors to operate the Service:

• Formspree — email form submissions (sample opt‑in).
• Lemon Squeezy — checkout, payments, subscriptions.
• Google Analytics 4 — site analytics (pseudonymous usage data).
• Meta (Facebook) Pixel — marketing & conversion tracking.
• Pinterest Tag — marketing & conversion tracking.
• Google Fonts — web font delivery (may set cookies on Google domains).

Note: Our Etsy shop, Redbubble shop, and art.ecoartlab.shop operate on separate domains/platforms with their own privacy practices.

5) Cookies & Consent GDPR

We use cookies for functionality, analytics, and marketing. If you are in the EU/EEA, we display a cookie banner to obtain consent before loading analytics/marketing tags. You can withdraw consent at any time.

Manage Cookies / Withdraw Consent

6) Data Retention

• Emails (opt‑in): kept until you unsubscribe or request deletion.
• Order records: retained for the period required by tax/accounting laws.
• Analytics data: retained according to the provider’s default settings or as configured to minimize retention.

7) International Transfers

Our processors may store or process data outside your country. When transferring personal data internationally, we rely on lawful transfer mechanisms (e.g., Standard Contractual Clauses) provided by those processors.

8) Your Rights

Depending on your location, you may have rights to access, correct, delete, or port your data, and to withdraw consent or object to processing. To exercise these rights, contact us at support@ecoartlab.store.

9) Children

Our services are not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect children’s data.

10) Changes to this Policy

We may update this Policy from time to time. We will post the new version on this page and update the “Last updated” date above.