Privacy Policy

Information you provide directly. When you make a purchase or sign up for updates, we may collect:

• Full name
• Email address
• Shipping address
• Phone number
• Order details (items purchased, order value, order history)
• Any message content you send us via a contact form or email

We collect this information directly from you, primarily at checkout, in order to fulfil and ship your order.

Information collected automatically. Like most websites, we may automatically collect certain technical information when you visit the Site, including your IP address, browser type, device type, pages viewed, referring URLs and timestamps. This is typically collected through cookies or similar tracking technologies.

Information from third parties. We do not buy or receive personal information about you from data brokers. However, our payment and fulfilment partners (described below) may share limited transaction-related information back with us, such as payment confirmation status or shipping tracking updates.

We use the information we collect to:

• Process and fulfil your art print orders
• Communicate with you about your order (confirmations, shipping updates, issues)
• Respond to customer service enquiries
• Send you updates or promotional emails, if you have opted in (you can unsubscribe at any time)
• Maintain records for accounting, tax and legal compliance
• Improve the Site, our product offerings and the overall customer experience
• Detect, prevent and address fraud, abuse or security issues

We do not sell your personal information. We share information only as necessary to operate our business, specifically with:

Payment processors. We use Stripe and/or PayPal to process payments, depending on which checkout option you choose. When you pay, your payment details (such as card number) are submitted directly to these processors. We do not see or store your full payment card information ourselves. Stripe and PayPal each act as independent data controllers for the payment information they process, governed by their own privacy policies: Stripe Privacy Policy (opens in a new tab) and PayPal Privacy Statement (opens in a new tab).

Print and fulfilment partner. To fulfil your order, we share your name, shipping address, phone number and email address (where required for delivery) with our print-on-demand and shipping fulfilment provider, so that your art print can be produced and shipped directly to you.

Legal and safety reasons. We may disclose information if required to do so by law, or if we believe in good faith that disclosure is necessary to comply with a legal obligation, protect our rights or property, or protect the safety of our users or the public.

Business transfers. If we undergo a business transition such as a merger, acquisition or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

We retain personal information for as long as necessary to fulfil the purposes outlined in this policy, including order fulfilment, customer support, accounting and legal or tax record-keeping, after which it is deleted or anonymised, unless a longer retention period is required by law.

Depending on where you live, you may have certain rights regarding your personal information.

If you are in the European Economic Area or the UK (GDPR), you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (the “right to be forgotten”)
• Object to or restrict certain processing
• Request a portable copy of your data
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with your local data protection authority

Our legal bases for processing your information include performance of a contract (fulfilling your order), our legitimate business interests, and your consent (for example, for marketing emails).

If you are a California resident (CCPA/CPRA), you have the right to:

• Know what personal information we collect, use and disclose
• Request deletion of your personal information
• Correct inaccurate personal information
• Opt out of the “sale” or “sharing” of personal information (note: we do not sell personal information)
• Not be discriminated against for exercising your privacy rights

How to exercise your rights. To exercise any of these rights, contact us at support@shutabug.com. We may need to verify your identity before fulfilling certain requests.

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Because our visitors and customers are located worldwide, your information may be transferred to, stored and processed in a country other than the one in which you live, including the United States and other countries where our service providers (such as Stripe, PayPal and Prodigi) operate. Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect information transferred internationally.

The Site is not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational or regulatory reasons. We will post the updated policy on this page with a revised “Last updated” date. We encourage you to review this policy periodically.