Privacy Policy

We do not collect sensitive personal information as the California Consumer Privacy Act defines it: no government identifiers, no financial account credentials, no precise geolocation, no racial or ethnic origin, religious belief, health, sex life, sexual orientation, union membership, genetic or biometric data, and no contents of your mail, email or messages other than what you write to us directly. Nothing on this site profiles you in a way that produces a legal or similarly significant effect, and we do not make automated decisions about you.

Why we use it

To take and fulfill your order, arrange shipping, handle returns, answer what you ask us, send the journal if you asked for it, keep the site secure and working, comply with tax and record-keeping obligations, and, where you have allowed it, to understand how the site is used and to show you our pieces on other platforms.

For visitors in the EEA, the UK and Switzerland, the legal bases are: performance of a contract for anything to do with an order; consent for analytics cookies, advertising cookies and the journal newsletter, which you may withdraw at any time without affecting what came before; legal obligation for tax and accounting records; and our legitimate interest in keeping the site secure and defending legal claims.

Who else sees it

Service providers, each of which receives only what its job requires and is contractually barred from using it for anything else:

• Wix: hosting, the store database, hosted checkout, and the inbox behind the chat.
• Payment processors engaged through Wix's hosted checkout, including card, Apple Pay and Google Pay. Your card details go to them directly; we never hold them.
• Shipping carriers: name and delivery address, to get the piece to you.
• Ateliers and fulfillment partners, including D'Argenta: what a piece needs, and where it ships. For a commission or an engraving, that includes what you asked for.
• Google, Meta and Pinterest: only while you have advertising cookies switched on, and only the online identifiers and site activity described above. Pinterest additionally receives the collection or category page you are viewing and what you type into this site's search box; and add-to-cart, completed order, journal subscription and commission enquiry events sent directly from our server rather than from your browser. Where one of those involved an email address you gave us, Pinterest receives a one-way SHA-256 hash of it, never the address itself. All of it is switched off with the advertising control and covered by the opt-out below.

We also disclose personal information where the law requires it, to enforce our terms, or to a buyer as part of a merger, acquisition or sale of assets, in which case this policy continues to govern the information until you are told otherwise.

We do not sell personal information, and we have not in the twelve months before the date on this page. We do "share" it for cross-context behavioral advertising in the specific sense the CCPA gives that word, whenever advertising cookies are on, which is why the opt-out below exists.

We do not knowingly sell or share the personal information of anyone under 16.

How long we keep it

Order and transaction records: seven years from the order, to satisfy tax and accounting requirements. Commission, quote and chat correspondence: three years from our last exchange, because a commission conversation can restart years later. Journal subscribers: until you unsubscribe, plus a suppression record so we do not mail you again by accident. Analytics and advertising identifiers: for the periods set out in the Cookie Policy, after which they expire on their own.

Your rights in the United States

If you live in California, Colorado, Connecticut, Virginia, Texas, Oregon, Utah, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island (or another state that has since passed a comprehensive privacy law), you can ask us to:

• tell you what personal information we hold about you, where it came from, why we have it, and who we disclosed it to;
• give you a copy of it in a portable form;
• correct it, if it is wrong;
• delete it, subject to the records we are required to keep;
• stop sharing it for targeted advertising, and stop selling it, though as above, we do not sell it;
• leave you alone afterwards: we will not deny you service, charge you a different price, or give you a lesser experience for exercising any of this.

The opt-out. Use Cookie preferences or the Your Privacy Choices link in the footer of every page. It takes effect immediately, in this browser, without an account and without us needing to know who you are.

Global Privacy Control. If your browser or extension sends a GPC signal, we read it as a valid opt-out of sharing for advertising and apply it before any advertising tag runs. You do not need to do anything else.

Making a request. Write to curators@venustare.com with enough detail for us to find you, usually the email address you ordered under. We will confirm within 10 business days and answer within 45 days, extendable once by another 45 if we tell you why. We may need to verify that the account is yours before handing over or deleting anything, and we will only use what you send us for that purpose. An authorized agent may act for you with written permission we can check.

If we say no. You can appeal by replying to our decision with the word "appeal". A different person will look at it and answer within 45 days (60 in Colorado and Connecticut). If you are still unsatisfied, you may complain to your state attorney general, and California residents may also contact the California Privacy Protection Agency.

Your rights in the EEA, the UK and Switzerland

You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time, including consent to cookies, which the banner and the footer link let you withdraw in one click. You also have the right to lodge a complaint with your national supervisory authority, or with the Information Commissioner's Office in the United Kingdom.

Transfers. We operate from the United States, and our hosting, payment and advertising providers process data there. Where information moves out of the EEA, the UK or Switzerland, it does so under the European Commission's Standard Contractual Clauses (with the UK Addendum where the UK is involved), incorporated into our agreements with those providers, together with the technical and organizational measures those clauses require. You may ask us for a copy of the relevant safeguards.

Security and children

Traffic to this site is encrypted in transit, payment card data never touches our systems, and access to order records is limited to the people who need it. No system is perfect, and we will not pretend otherwise. If a breach affects you, we will tell you as the law requires.

This site is not directed to children under 13 and we do not knowingly collect their personal information. If you believe a child has given us something, write to us and we will delete it.

Changes

When this policy changes we update the date at the top. If the change is material (a new category of information, a new purpose, a new recipient), we will say so on the site, and where the law requires fresh consent we will ask for it rather than assume the old answer carries over.

Contact

curators@venustare.com reaches us for any privacy question or request.

Still to add: the postal address for privacy requests. California requires a business to offer at least two designated methods for submitting requests, and a mailing address is the conventional second one alongside email.