Privacy Policy — Collective Journey Art

Last updated: October 30, 2026

Collective Journey Art operates this store and website, including all related information, content, features, tools, offerings, and services (the "Services").

Our online store is powered by Shopify, which enables us to provide these Services to you.

This Privacy Policy explains how we collect, use, process, share, and protect your personal information when you visit our website, make a purchase, participate in our programs, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of information described here.

Personal Information We Collect or Process

When we use the term "personal information," we mean information that identifies or can reasonably be linked to you or another person.

Personal information does not include information collected anonymously or de-identified so that it cannot reasonably identify or be linked to an individual.

Depending on how you interact with our Services, your location, and applicable law, we may collect or process the following categories of personal information:

• Contact Information: Name, billing and shipping addresses, email address, telephone number, and other contact details provided during purchases or communications.

• Financial and Payment Information: Payment methods, transaction details, payment confirmations, billing information, and other information necessary to process purchases. Complete payment card information may be collected and processed by Shopify or authorized payment service providers rather than directly by Collective Journey Art.

• Account Information: Usernames, passwords where applicable, account preferences, settings, and information used to establish or maintain customer accounts.

• Transaction Information: Offerings viewed, added to a cart or wishlist, purchased, returned, or cancelled, together with relevant purchase and transaction history.

• Communications: Information provided when contacting Customer Care, submitting inquiries, requesting assistance, or otherwise communicating with us.

• Device Information: Device type, browser, network connection, IP address, and other identifiers associated with accessing our website.

• Usage Information: Information concerning how and when you interact with our website, including browsing activity and use of website features.

• Program-Specific Information: Information required to support services such as subscriptions, digital gift cards, customer reviews, wholesale applications, and applicable age-verification procedures.

• Marketing Preferences: Email and SMS subscription preferences, consent records, opt-out requests, and information relevant to managing marketing communications.

We collect and process information only as reasonably necessary for the purposes described in this Privacy Policy or as otherwise permitted or required by applicable law.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you: When you create an account, place an order, participate in a program, submit information, communicate with us, or otherwise use our Services.

• Automatically through our Services: Including information from your device, browser, cookies, and similar technologies when interacting with our website.

• From our service providers: Including providers supporting payment processing, subscriptions, communications, analytics, customer service, shipping, and other operational functions.

• From business partners or other third parties: Where information is provided to us for legitimate operational purposes and in accordance with applicable law.

How We Use Your Personal Information

Depending on your interactions with our Services, we may use personal information for the following purposes.

Providing, Tailoring & Improving Our Services

We use personal information to:

• Process payments and fulfill orders.

• Arrange shipping and delivery.

• Manage customer accounts and purchase histories.

• Process returns, refunds, and other transactions.

• Remember preferences and offerings of interest.

• Provide relevant product recommendations.

• Support customer reviews and feedback.

• Manage subscriptions and related services.

• Improve website functionality and the customer experience.

Marketing & Advertising

We may use personal information for marketing and promotional purposes, including sending communications by email, SMS, or other permitted channels.

We may also use browsing and purchase activity to deliver relevant advertisements through our website and third-party advertising services, subject to applicable privacy and consent requirements.

Customers may manage marketing preferences and exercise applicable opt-out rights as described in this Privacy Policy.

Security & Fraud Prevention

We use personal information to authenticate accounts, protect transactions, detect suspicious activity, investigate potential fraud, maintain website security, and prevent unlawful or unauthorized use of our Services.

Customers are responsible for keeping their account credentials secure and should notify us if they believe their information has been accessed without authorization.

Customer Care & Communications

We use personal information to respond to inquiries, provide order assistance, maintain customer relationships, resolve concerns, and communicate information relevant to purchases or services.

Legal & Regulatory Requirements

We may process personal information where necessary to comply with applicable laws, respond to lawful requests, maintain required business records, investigate disputes, protect our legal interests, or enforce our published policies.

Additional Services & Information Processing

Certain Collective Journey Art services require additional information to operate.

Subscribe & Save Rewards

When you enroll in our Subscribe & Save Rewards Program, we may process information relating to your selected offerings, delivery schedule, subscription history, payment arrangements, loyalty progression, and account preferences.

This information supports recurring orders, scheduled payments, subscription changes, customer communications, and the administration of program rewards.

Digital Gift Cards

When you purchase or send a digital gift card, we may process purchaser information, recipient contact details, optional personal messages, and information necessary to issue, deliver, redeem, and manage the gift card.

Gift card transaction and balance information may also be maintained for customer support, accounting, and fraud prevention.

Customer Reviews

When you submit a customer review, we may process your rating, written feedback, photographs, and related purchase information.

Reviews submitted for public display may appear on our website or connected review platforms, subject to the permissions and information provided when submitting the review.

Wholesale Accounts

Wholesale applicants may provide business contact information, resale documentation, business descriptions, and other information relevant to account verification and approval.

We use this information to review applications, establish eligible accounts, manage wholesale transactions, and maintain business communications.

Age-Restricted Offerings

For purchases subject to age restrictions, we may process information necessary to confirm eligibility and comply with applicable legal requirements.

Age verification may involve authorized third-party service providers where appropriate.

The specific information processed depends on the verification method and applicable requirements.

Third-Party Service Providers

We use authorized service providers for functions such as subscriptions, customer reviews, wholesale account management, payment processing, communications, order fulfillment, and website operations.

These providers may process information needed to perform their services, subject to their applicable contractual and legal obligations.

Legal Bases for Processing — Where Applicable

Where European Union or United Kingdom data protection laws apply, we process personal information using one or more applicable legal bases, depending on the purpose and circumstances.

These may include:

• Performance of a Contract: Processing information necessary to fulfill purchases, maintain accounts, manage subscriptions, and provide requested services.

• Legal Obligations: Processing information required for tax, accounting, regulatory compliance, and other legal responsibilities.

• Legitimate Interests: Processing information necessary to maintain and improve our Services, support customers, protect our business, and prevent fraud, where those interests are not overridden by applicable individual rights.

• Consent: Processing information for purposes requiring consent, including certain marketing communications and non-essential tracking technologies.

Where we rely on consent, you may withdraw it in accordance with applicable law.

Where we rely on legitimate interests, these interests relate to the reasonable operation, security, and improvement of our Services and the protection of our customers and business.

How We Disclose Personal Information

In certain circumstances, we may disclose personal information to third parties for legitimate purposes consistent with this Privacy Policy.

These circumstances may include:

• Shopify and Service Providers: Including providers supporting website operations, payment processing, data analytics, customer support, cloud storage, fulfillment, shipping, subscriptions, and communications.

• Business and Marketing Partners: Where necessary to provide marketing services and personalized advertising. Depending on your location, you may have the right to opt out of information sharing used for targeted advertising.

• Customer-Directed Disclosures: Where you request, direct, or consent to sharing information with another party, including delivery services, social media integrations, or connected applications.

• Affiliates and Related Entities: Where applicable and reasonably necessary for legitimate business operations.

• Legal and Business Purposes: Including compliance with lawful requests, investigations, legal proceedings, fraud prevention, enforcement of policies, or business transactions such as a merger or reorganization.

Third-party service providers may maintain their own privacy notices and obligations.

Depending on where you reside, you may have the right to direct us not to share information for certain targeted advertising activities.

To exercise applicable rights, visit our Do Not Sell or Share My Personal Information page.

Relationship With Shopify

Our Services are hosted by Shopify, which collects and processes personal information about your access to and use of our website in order to provide and improve its services.

Information submitted through our website may be transmitted to Shopify and other service providers, including providers operating in countries other than your country of residence.

Where enabled, certain Shopify enhanced services may use information from interactions with our store and other Shopify merchants to support commerce-related features, security, personalization, advertising, and service improvements.

For processing undertaken independently by Shopify for its own purposes, Shopify is responsible for the applicable privacy obligations and for responding to relevant requests concerning that processing.

To learn more, please review the Shopify Consumer Privacy Policy.

Depending on your location, you may also exercise certain privacy rights through the Shopify Privacy Portal.

Cookies & Similar Technologies

Our website and authorized service providers may use cookies, pixels, and similar technologies for website functionality, security, analytics, personalization, and advertising.

Some technologies are necessary for the operation of our Services, while others may support optional analytics or marketing activities.

The use of these technologies is subject to applicable privacy laws and consent requirements.

Depending on your location and the privacy controls available through our website, you may be able to manage certain tracking preferences or exercise advertising-related opt-out rights.

For applicable advertising choices, visit our Do Not Sell or Share My Personal Information page.

Third-Party Websites & Links

Our Services may contain links to websites or online platforms operated by third parties.

If you access a website that is not controlled by Collective Journey Art, we encourage you to review its privacy practices and terms.

We do not control the privacy or security practices of unaffiliated third-party websites and cannot guarantee the accuracy, completeness, or reliability of information found on those platforms.

Information shared publicly or through third-party social media platforms may be visible to other users and subject to the privacy practices of those services.

The inclusion of third-party links does not necessarily constitute our endorsement of their content or practices.

Children's Data

Our Services are not intended for children, and we do not knowingly collect personal information from individuals under the age of majority in their jurisdiction.

If you are a parent or guardian and believe that a child has provided us with personal information, please contact us using the details below so we can review the request and take appropriate action.

As of the date of this Privacy Policy, we do not have actual knowledge that we sell or share, as those terms are defined under applicable law, personal information belonging to individuals under 16 years of age.

Security & Retention of Personal Information

We take reasonable measures to support the security of personal information processed through our Services.

However, no security system or transmission method can be guaranteed to be completely secure.

We recommend that customers avoid sending sensitive or confidential information through unsecured communication channels.

The length of time we retain personal information depends on factors including:

• Whether the information is necessary to maintain an account or provide a requested service.

• Whether transaction records must be retained for accounting, tax, or other legal obligations.

• Whether information is required to resolve disputes, investigate suspected fraud, or enforce applicable agreements.

• Whether communication and consent records are needed to manage customer preferences or demonstrate compliance with legal obligations.

Retention practices may vary depending on the category of information and the services involved.

Personal information may also be retained by authorized service providers according to their applicable obligations and retention policies.

Where required by law, we will provide additional information concerning applicable retention periods or the criteria used to determine them.

Your Rights & Choices

Depending on your location and applicable privacy laws, you may have some or all of the following rights regarding your personal information.

These rights are not absolute and may be subject to legal exceptions or limitations.

Right to Access or Know

You may have the right to request access to personal information we maintain about you and information concerning how that information is used or disclosed.

Right to Delete

You may have the right to request deletion of personal information we maintain about you, subject to applicable legal exceptions and retention obligations.

Right to Correct

You may have the right to request correction of inaccurate personal information.

Right to Data Portability

You may have the right to receive a copy of certain personal information or request that it be transferred in an available format, subject to applicable requirements.

Right to Opt Out of Sale, Sharing, or Targeted Advertising

Depending on your location, you may have the right to opt out of certain disclosures of personal information for targeted advertising or activities legally defined as a sale or sharing of personal information.

You may exercise applicable rights through our Do Not Sell or Share My Personal Information page.

Right to Limit Certain Uses of Sensitive Personal Information

Where applicable law provides this right, you may request limitations on certain uses or disclosures of sensitive personal information.

Global Privacy Control

If you visit our website with the Global Privacy Control preference signal enabled, we will treat that signal as an applicable opt-out request for the device and browser used, where required and supported by the relevant privacy systems.

Where the signal can be associated with an identifiable Shopify customer account, applicable opt-out preferences may also be applied to that account.

More information about this technology is available at Global Privacy Control.

Other than Global Privacy Control, we do not generally recognize other browser-based "Do Not Track" signals unless required by law.

Managing Marketing Communications

You may opt out of promotional emails at any time using the unsubscribe link included in our marketing communications.

Opting out of promotional communications does not prevent us from sending necessary transactional or service-related messages, including order confirmations, shipping notifications, and account updates.

SMS communications may be managed separately as described below.

Additional Rights for UK & EEA Residents

If you reside in the United Kingdom or European Economic Area, you may have additional rights under applicable data protection laws, including:

• The right to object to certain processing activities.

• The right to request restriction of processing in qualifying circumstances.

• The right to withdraw consent where consent is the legal basis for processing.

• The right to lodge a complaint with an appropriate data protection supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Exercising Your Rights

You may exercise applicable privacy rights through the controls provided on our website or by contacting us directly.

We may request reasonable information to verify your identity before processing certain requests, where permitted or required by law.

Where applicable, you may appoint an authorized agent to submit a request on your behalf. We may require appropriate authorization and identity verification.

We will not discriminate against customers for exercising privacy rights protected by applicable law.

We will respond to verified requests within the timeframes required by applicable law.

For information about rights relating to personal information processed independently by Shopify, visit the Shopify Privacy Portal.

Complaints

If you have concerns regarding how your personal information is collected, used, or processed, please contact us using the information provided below.

We will review your concerns and respond in accordance with applicable requirements.

Depending on your location, you may have the right to appeal a decision concerning a privacy request or submit a complaint to an appropriate data protection authority.

For European Economic Area residents, information about national supervisory authorities is available through the European Data Protection Board.

International Transfers

Personal information may be transferred, stored, or processed in countries other than the country in which you reside.

These countries may have data protection laws that differ from those in your jurisdiction.

Where applicable law requires safeguards for international transfers, we or our authorized service providers will rely on recognized transfer mechanisms.

For transfers subject to European Union or United Kingdom data protection requirements, these mechanisms may include applicable adequacy decisions, the European Commission's Standard Contractual Clauses, or relevant UK-approved contractual safeguards.

SMS Communications

If you choose to receive text messages from Collective Journey Art, we may collect and process your mobile phone number, SMS consent records, and related communication preferences.

Depending on the consent provided, SMS communications may include:

• Order updates and notifications.

• Customer support communications.

• Educational content and resources.

• Product availability notifications.

• Community announcements.

• Occasional marketing and promotional messages.

Consent to receive marketing SMS communications is not a condition of purchase.

Message frequency may vary. Message and data rates may apply.

You may opt out of SMS communications at any time by replying STOP to a message.

For assistance, reply HELP or contact Customer Care.

We do not sell, rent, or share mobile phone numbers, SMS consent records, or related mobile information with third parties or affiliates for their independent marketing or promotional purposes.

Authorized messaging service providers may process information necessary to deliver messages, maintain consent records, and operate the SMS program.

SMS information is handled in accordance with this Privacy Policy and applicable privacy laws.

For complete information, please review our SMS Terms & Conditions.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, information practices, operational requirements, or applicable laws.

When revisions are made, we will publish the updated policy on our website and revise the "Last updated" date.

Where required by applicable law, we will provide additional notice of material changes.

We encourage customers to review this page periodically.

Contact & Privacy Requests

For questions about our privacy practices, this Privacy Policy, or requests to exercise applicable privacy rights, please contact:

Collective Journey Art
Customer Care

Email: support@collectivejourneyart.com

Mailing Address:
431 Uren Street, Suite E
Nevada City, CA 95959
United States

Website: www.collectivejourneyart.com

For the purposes of applicable data protection laws, Collective Journey Art acts as the data controller for personal information where we determine the purposes and means of processing.

Shopify and other third-party service providers may have separate responsibilities for information they process independently, as described in their respective privacy policies.

We review privacy requests and respond within the timeframes required by applicable law.