Privacy Policy

When you buy something, we collect what we need to complete and deliver the order:

**We never see or store your card number, expiry date or security code.** Those go directly from your browser into Stripe. We receive only a token and the last four digits, which is enough to identify a payment and issue a refund and nothing else.

We do not collect government identification, and we do not ask for your date of birth.

We use your information only to:

The marketing box at checkout is unticked by default and always will be. We only email you about new drops if you actively tick it or join a waitlist.

You can stop at any time by using the unsubscribe link in any marketing email, or by emailing info@artpicscards.com and asking. We will action it promptly and it costs you nothing.

Transactional messages are different: order confirmations, receipts and shipping notices are part of completing your purchase, and you receive them whether or not you opted into marketing.

We do not sell your personal information, and we do not share it for anyone else's advertising. We share only what a service needs to do its job:

If you tick "save these details on this device", your name, address, phone and email are stored **in your own browser**, on your device only. They are not sent to us or to anyone else, and clicking "forget them" at checkout erases them immediately.

Stripe sets cookies necessary to process payment and to detect fraud. Those are required for checkout to function.

We keep order records for as long as we need them for tax, accounting and legal purposes - generally seven years, which is the ordinary US record-keeping expectation.

Marketing subscriptions are kept until you unsubscribe. Waitlist entries are kept until the drop has happened or you ask us to remove you.

Payment data never touches our servers. Order data is held in an access-controlled database, and administrative screens are restricted to our staff.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach ever affects your personal information, we will notify you as the law requires.

Wherever you live, you can email info@artpicscards.com and ask us what we hold about you, ask us to correct it, or ask us to delete it. We will respond within 30 days. We may need to keep records of a completed sale for tax purposes even after a deletion request, and we will tell you if that applies.

**If you are in California**, you have the right to know what personal information we collect, to have it deleted, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA/CPRA.

**If you are in the EU or UK**, you have rights of access, rectification, erasure, restriction, portability and objection. Our lawful bases are performance of a contract (completing your order), consent (marketing), and legitimate interests (fraud prevention and running the site). You may complain to your local supervisory authority.

Your information is processed in the United States. If you order from outside the US, you are asking us to transfer it there in order to fulfil your order.

This site is not for children. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

If we change this policy we will update the date at the top. Material changes will be made clear on this page.

Questions, requests, or anything you are unhappy with: info@artpicscards.com, or write to us at 55 West 14th Street, Office 5B, New York, NY 10011, United States.