Privacy Policy

 

Privacy Policy

Last updated: October 23, 2025

We value your trust and are committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your information when you visit or make a purchase from our store. Our approach follows Shopify’s privacy framework and applicable laws (including GDPR and CCPA), with a user-first design that emphasizes clarity, control, and security.

1. Who We Are

Piexlculpt (“we”, “us”, “our”) offers handcrafted woodcarving and rattan products, including custom portrait woodcarvings. Our online store is powered by Shopify.

2. Data Controller & Shopify’s Role

For the purposes of most processing activities described in this Policy, we are the “data controller”—we decide how and why your personal information is processed. Shopify acts as a hosting and e-commerce service provider and generally processes buyer data on our behalf as a processor/service provider in many scenarios. Certain independent processing by Shopify (e.g., for fraud prevention or platform operations) is governed by Shopify’s own terms and privacy notices.

User-first clarity: If you have questions about your order, your account, or your uploaded images, contact us directly. For platform-level privacy practices (e.g., cookies set by Shopify), see Shopify’s notices.

3. Information We Collect

  • Identity & Contact Data: name, email, billing/shipping address, phone.
  • Order & Payment Data: order details, payment method/tokenization (processed via secure payment providers; we do not store full card numbers).
  • Custom Content: photos and messages you upload for custom woodcarving designs (see Section 6).
  • Account Data: username, password (hashed), order history, preferences (see Section 5).
  • Device & Usage Data: IP address, browser type, device identifiers, pages viewed, session information, cookies and similar technologies (see Section 7).
  • Communications: messages with our support team via email, WhatsApp, or forms.

4. How We Use Your Information

  • To accept, process, fulfill, and deliver orders; provide order updates and support.
  • To design, preview, and produce custom portrait woodcarvings strictly as authorized by you.
  • To manage your account, preferences, and subscriptions (including Shopify Email).
  • To operate, secure, troubleshoot, and improve our site and services.
  • To personalize content/ads and measure performance where you have consented.
  • To comply with legal duties, resolve disputes, and enforce terms.

Legal bases (GDPR/UK GDPR): contract performance, legitimate interests (e.g., fraud prevention, site security), consent (e.g., non-essential cookies/marketing), and legal obligations.

5. Account Registration & Account Data

You may create an account to streamline checkout and view order history. We collect and process your account credentials (passwords are stored using industry-standard hashing), profile details, and preferences. You can update or delete your account by contacting us (see Section 16).

6. Custom Portrait Uploads & Intellectual Property

  • Your Ownership: Photos and text you upload for custom portraits remain your intellectual property. You grant us a limited, revocable license to use the content solely to design, preview, produce, deliver, and support your custom order.
  • Design Stage Refund: During the design stage, you may cancel for a full refund. Once you approve the design and we begin hand-carving production, refunds are no longer available due to the personalized, manual craftsmanship involved.
  • No Secondary Use: We do not publish, advertise with, or publicly display your uploads without your explicit written consent.
  • Deletion: Unless you ask us to retain them longer (e.g., for reorders), we delete custom files within 30 days after confirmed delivery (see Section 9).

7. Cookies, Analytics & Advertising (Google Analytics, Meta Pixel, Shopify Email)

We use cookies and similar technologies to operate our store, analyze traffic, and improve marketing. This includes Google Analytics and the Meta Pixel. Non-essential cookies run only with your consent where required. You can manage cookie preferences via our cookie banner or your browser settings. You may also opt out of marketing emails at any time using the unsubscribe link.

  • Google Analytics: helps us understand site usage and improve experience.
  • Meta Pixel: enables ad performance measurement and, where applicable, remarketing.
  • Shopify Email: we may send store updates or offers; unsubscribe anytime.

Choices: use our Cookie Preferences, adjust your browser, or use platform controls (e.g., Google/Meta ad settings). California residents can also use the “Do Not Sell or Share My Personal Information” link (Section 10).

8. How We Share Information

  • Service Providers: Shopify (store hosting, checkout), payment processors (e.g., Shopify Payments/PayPal), shipping/fulfillment partners, communications tools (e.g., email, WhatsApp), analytics/advertising partners (as above). We require them to handle data securely and only for specified purposes.
  • Legal/Compliance: We may disclose information to comply with laws, enforce terms, or protect rights, safety, and security.
  • No Selling of Personal Information: We do not sell or rent your personal information. For CPRA purposes, some advertising/analytics may be considered “sharing”; see Section 10 for how to opt out.

9. Data Retention & Deletion

  • Orders: retained for records, tax, accounting, and customer service (typically 2–5 years, subject to local law).
  • Custom Uploads: deleted within 30 days after confirmed delivery, unless you request longer retention for reorders or dispute resolution.
  • Accounts: retained while active; delete on request unless we must keep certain records by law.
  • Marketing: retained until you unsubscribe or request deletion.

You can request deletion or access by contacting us (Section 16). We will verify your request consistent with applicable law.

10. Your Rights (GDPR/UK GDPR, CCPA/CPRA)

EU/UK: You may have the right to access, rectify, erase, restrict or object to processing, data portability, and withdraw consent at any time (without affecting prior lawful processing). You also have the right to lodge a complaint with your data protection authority.

California: You may have the right to know, delete, correct, and opt out of certain “sharing” or targeted advertising. We do not sell your personal information. To exercise rights or to opt out of “sharing”, use the link below or contact us:

Do Not Sell or Share My Personal Information (link placeholder)

11. International Data Transfers

We and our service providers (including Shopify) may process information in countries different from your own. Where required, we rely on appropriate safeguards (e.g., contractual protections) for such transfers.

12. Security

We use technical and organizational measures to protect personal information, including TLS/SSL encryption in transit, access controls, and secure payment processing via trusted providers. No method is 100% secure; we continually improve safeguards.

13. Minors

Our site is not directed to children under the age required by local law (e.g., 16 in the EU). We do not knowingly collect personal information from children. If you believe a child provided personal information, please contact us to remove it.

14. Privacy Notes About Refunds/Returns (Summary)

This section summarizes how privacy interacts with our product policies; see our full Refund & Return Policy for detailed terms.

  • Custom Woodcarving (Portraits): Full refund available during design stage. After you approve the preview and we begin hand-carving, refunds aren’t available due to personalization.
  • Regular Wood & Rattan Products: We will promptly work with you on remedies (refund or resend) for major issues such as severe damage, wrong item, or significant mismatch from description. Natural variations (color, grain, small marks typical of wood/rattan growth) are not defects.
  • Privacy Tie-in: When processing refunds/replacements, we access order and contact data solely to resolve your case. Custom images are not reused for marketing without consent and are deleted per Section 9.

15. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date shows the latest version. Material changes will be highlighted where appropriate.

16. Contact Us

If you have questions, requests, or complaints regarding this Policy or your personal information, contact us:

You can adjust your cookie preferences via our site’s cookie banner or your browser settings.