Privacy policy

This Privacy Policy describes how Creations of Christ LLC ("we," "us," or "our") collects, uses, and discloses your personal information when you visit or make a purchase from creationsofchrist.com (the "Site") or otherwise communicate with us (collectively, the "Services"). By using our Services, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please discontinue use of our Services.

We are headquartered in Utah, United States. This policy is designed to comply with applicable U.S. federal and state privacy laws, including the Utah Consumer Privacy Act (UCPA), the California Consumer Privacy Act (CCPA/CPRA), the Children's Online Privacy Protection Act (COPPA), and the CAN-SPAM Act, as well as the European Union's General Data Protection Regulation (GDPR) for visitors from the EU/EEA.

Note: This Privacy Policy governs data collected by Creations of Christ LLC directly. Our third-party print production and fulfillment partners operate under their own privacy policies and process only the data necessary to fulfill and ship your order.

---

1. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for legal or operational reasons. We will post the updated policy on the Site and update the "Last updated" date above. Continued use of our Services after changes are posted constitutes your acceptance of the revised policy. We recommend checking this page periodically.

---

2. Information We Collect

A. Information You Provide Directly

When you interact with our Services, you may provide:

• Contact information: Name, email address, phone number, and mailing/billing/shipping address

• Order information: Items purchased, billing and shipping details, and payment confirmation

• Account information: Username, password, and security questions (if you create an account)

• Communications: Messages, questions, or feedback you send us via email or our contact form

• Return requests: Information submitted when initiating a return or reporting a damaged item

B. Information Collected Automatically (Cookies & Tracking)

When you browse our Site, we and our third-party service providers automatically collect:

• Device and browser information: IP address, browser type, operating system, device identifiers

• Usage data: Pages visited, links clicked, referring URLs, time spent on pages, and actions taken on the Site

• Transaction data: Cart contents, purchase history, and abandoned cart information

• Cookies and similar technologies: See Section 5 below for details

C. Information from Third Parties

We may receive information about you from:

• Shopify: Our e-commerce platform, which powers our store and may collect browsing, transaction, and device data. See Shopify's Privacy Policy and Cookie Policy.

• Payment processors: Including Shopify Payments, which processes payment card and transaction data. We do not store your full payment card details.

• Marketing and analytics providers: Such as Meta (Facebook/Instagram) Pixel and Google Analytics, which may collect data on how you interact with our Site and advertisements.

• Shipping carriers: FedEx, UPS, and USPS, which receive your shipping details to deliver orders.

---

3. How We Use Your Information

We use the personal information we collect to:

• Fulfill orders: Process payments, arrange printing and fulfillment through our third-party production partners, ship orders, and send order and tracking confirmations

• Manage your account: Create and maintain your account, authenticate your identity, and manage preferences

• Provide customer support: Respond to questions, process returns and refund requests, and resolve issues

• Send marketing communications: With your consent, send promotional emails about new artwork, offers, and events. You may opt out at any time (see Section 8)

• Analyze and improve our Site: Understand how visitors use our Site, identify technical issues, and improve content and functionality

• Prevent fraud and abuse: Detect and investigate suspicious transactions or unauthorized use of the Site

• Comply with legal obligations: Retain records as required by applicable law and respond to lawful requests from authorities

We process your data on the following legal bases (where applicable):

• Performance of a contract (to fulfill your order)

• Legitimate interests (fraud prevention, analytics, business improvement)

• Legal obligation (tax records, regulatory compliance)

• Consent (email marketing)

---

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share data only as necessary to operate our business:

Our print production and fulfillment partners are contractually prohibited from using your information for any purpose other than producing and shipping your order.

We may also disclose your information if we believe in good faith that doing so is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

---

5. Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to operate our Site, personalize your experience, and deliver relevant advertising. Types of cookies we use:

• Essential cookies: Required for the Site to function (e.g., shopping cart, login sessions)

• Analytics cookies: Collect anonymized data about Site usage (e.g., Google Analytics)

• Marketing/advertising cookies: Track visits and conversions across sites to serve relevant ads (e.g., Meta Pixel)

• Preference cookies: Remember your settings and preferences

Most browsers allow you to control or disable cookies through their settings. Disabling essential cookies may affect the functionality of the Site. For more information on Shopify's use of cookies, see Shopify's Cookie Policy.

To opt out of Google Analytics tracking, visit tools.google.com/dlpage/gaoptout. To manage Meta ad preferences, visit your Facebook ad settings.

---

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Specifically:

• Order and transaction records: Retained for a minimum of 7 years to comply with U.S. tax and accounting obligations

• Account information: Retained until you request deletion, subject to legal obligations

• Marketing preferences and email lists: Retained until you opt out or request deletion

• Analytics data: Typically retained in anonymized or aggregated form for up to 26 months

You may request deletion of your data at any time (see Section 8). Certain data may be retained even after a deletion request where required by law.

---

7. Security

We implement commercially reasonable technical and organizational measures to protect your personal information, including SSL/TLS encryption for data in transit, access controls, and secure data storage through our platform providers (Shopify). However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use strong, unique passwords and protect your account credentials.

If you believe your information has been compromised, please contact us immediately at hello@creationsofchrist.com.

---

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you

• Correction: Request that we correct inaccurate or incomplete information

• Deletion: Request that we delete your personal information, subject to legal retention requirements

• Portability: Request a machine-readable copy of the data you have provided to us

• Opt-out of marketing: Unsubscribe from promotional emails at any time by clicking the "unsubscribe" link in any email, or by contacting us directly

• Opt-out of targeted advertising: You may opt out of interest-based advertising through your browser settings, the NAI opt-out tool, or DAA's opt-out tool

To exercise any of these rights, please contact us at hello@creationsofchrist.com. We will respond within 45 days. We may need to verify your identity before processing your request.

We will not discriminate against you for exercising any of your privacy rights.

---

9. California Residents — CCPA/CPRA Notice

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you, the sources, business purposes, and categories of third parties with whom we share it.

• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.

• Right to Correct: You may request correction of inaccurate personal information.

• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising as those terms are defined under CPRA.

• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond what is necessary to provide the Services.

To submit a request, email hello@creationsofchrist.com with the subject line "California Privacy Request." We will respond within 45 days (extendable to 90 days with notice).

---

10. European Residents — GDPR Notice

If you are located in the European Union, European Economic Area, or United Kingdom, you have rights under the General Data Protection Regulation (GDPR) or equivalent legislation, including the right to access, rectify, erase, restrict processing of, and object to the processing of your personal data. You also have the right to lodge a complaint with your local data protection authority.

Where we transfer personal data outside the EU/EEA (e.g., to the United States), we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent recognized transfer mechanisms.

To exercise your GDPR rights, contact us at hello@creationsofchrist.com.

---

11. Utah Residents — UCPA Notice

We are headquartered in Utah and our practices are designed to align with the Utah Consumer Privacy Act (UCPA). Utah residents may have the right to access, delete, and obtain a portable copy of personal data we process about them, and the right to opt out of the sale of personal data or targeted advertising. We do not sell personal data. To submit a request, contact us at hello@creationsofchrist.com.

---

12. Children's Privacy

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at hello@creationsofchrist.com and we will delete it promptly.

---

13. Third-Party Links

Our Site may contain links to third-party websites, including social media platforms and partner sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before submitting any personal information.

---

14. User-Generated Content

If you submit a product review or other public content on our Site, that content may be visible to other visitors. Do not include sensitive personal information in public submissions.

---

15. Contact Us

For questions, concerns, or to exercise your privacy rights, please contact:

Creations of Christ LLC Email: hello@creationsofchrist.com 

We aim to respond to all privacy inquiries within 5 business days.

---

This Privacy Policy does not constitute legal advice. If you have specific compliance concerns, we recommend consulting a licensed attorney familiar with U.S. e-commerce and data privacy law.