What we collect, why, and what you can do about it.

The studio takes a deliberately small-footprint approach to data. We collect what we need to respond to your inquiry, complete a transaction, and ship a work. We do not sell or share personal data with third parties for advertising purposes.

From the inquiry form, we record the information you provide: your name, email, optionally your phone and company, the role you describe, the work or space you’re interested in, your budget range and timeline, and the message you write to us.

From a purchase or lease, we additionally store a shipping address, the last four digits of the card or bank account used, the transaction reference, and your order history. Full card numbers, security codes, and routing numbers are sent directly to our payment processor and never touch our servers.

From your browser, the site receives standard information such as IP address, browser type, and referring page. This is used for security (rate-limiting the inquiry form against abuse), basic aggregate analytics, and to keep the dashboard session active. We do not use third-party advertising trackers.

The site uses first-party cookies and browser local storage to keep your shopping cart between page loads, remember favorited works on this device, and maintain your dashboard session if you sign in. None of this is shared with third parties.

Payments are processed by LeanPivot Payments, a third-party payment service. Card and bank details are submitted directly to LeanPivot and tokenized by them; the studio receives only the last four digits, the brand of the instrument, and a transaction reference. Refer to your card issuer or bank for the terms governing your payment instrument.

If you opt in to studio notes, your email is stored for that purpose alone. We send occasional notes on new work, exhibitions, and openings. Every email contains a one-click unsubscribe link. The studio does not share or sell newsletter addresses.

Inquiry messages are retained for as long as is reasonable for the conversation — generally until your inquiry is resolved or you ask us to delete it. Transaction and provenance records are retained for seven years for tax and chain-of-custody purposes. Newsletter records are retained until you unsubscribe.

You may at any time:

• Request a copy of the personal data we hold about you
• Ask us to correct inaccurate information
• Ask us to delete your information, except where retention is required by law (e.g., tax records)
• Withdraw consent for the newsletter

Requests: info@artbybrandonaday.com.

California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know what categories of personal information we collect, the purposes for which it is used, and the right to delete personal information. The studio does not sell personal information.

The studio is based in the United States, and any information you provide is stored and processed in the United States. By submitting an inquiry or acquiring a work from outside the United States, you consent to your information being transferred to and processed in the United States.

The site is not directed at children under the age of thirteen. The studio does not knowingly collect personal information from anyone under thirteen. If you believe a child has provided us with personal information, contact us and we will delete it.

Data in transit is encrypted with TLS. Stored data is held on infrastructure with reasonable access controls. No internet service is perfectly secure; the studio takes reasonable technical and organizational measures to protect against unauthorized access.

The studio may revise this policy. The current version is always posted at /privacy. Material changes will be noted with a revised “last updated” date above.

Privacy questions or requests can be sent to info@artbybrandonaday.com.