The proper wording is on the left. On the right, the same thing in plain words, the way we'd say it to you in person. If the two ever seem to disagree, the proper wording is the one that counts.
Us. Ask privacy@ anything.
Fold 01Collectif Créatif (Malak Krafess), 850 West Avenue, New York, NY 10250, United States, decides how your personal data is used. For anything about your data, write to privacy@collectifcreatif.co.
Only what we need to send, answer and remember your choices.
Fold 02When you order: your name, email, delivery address, phone number if you give it, and what you bought. Payment details go straight to Shopify and never reach us.
If you make an account: your email and sign-in details, the events you sign up for, and your orders and Collective choices.
If you draw a star for the star wall: your drawing and the name you sign it with. If you write to us or join the letter: your name, email and message.
We also remember a few preferences in your browser, like your currency. The cookies page lists every one.
To do what you asked us to. No ads, no profiling.
Fold 03To take, send and support your orders. The legal basis is our contract with you. We need your name, email and address to do this; without them we can't deliver.
To keep records the law asks for, such as tax and accounting records. The legal basis is a legal obligation.
To run your account and the events you've signed up for (our contract with you), and to answer your messages (our legitimate interest in helping you).
To send the letter, only if you've asked for it (your consent). You can unsubscribe from any email in one click.
To show your star on the public star wall, with the name you sign it with, once it's been checked (your consent, which you can withdraw by asking us to take it down).
To see how the site is used overall, through privacy-friendly analytics that don't use cookies or follow you around the web (our legitimate interest in running a site that works).
Shopify may check orders for signs of fraud. A person here always makes the final call on any order; we don't make decisions about you by automated means alone.
A handful of helpers. Never sold, never to advertisers.
Fold 04We use a few trusted services to run the shop. They only handle your data to do their job for us: Shopify (checkout, payments and orders), Supabase (accounts and our site database), Klaviyo (the letter), Resend (sending emails), Vercel (hosting and anonymous analytics), and the carriers who deliver your parcel.
We never sell your data, and we don't share it with advertisers.
Mostly in the US, with proper safeguards.
Fold 05We're based in the United States, and some of our services process data there or in other countries. Where the law requires it, we rely on safeguards such as standard contractual clauses for those transfers.
Not a day longer than we need.
Fold 06Order records: as long as tax and accounting law requires. Your account: until you delete it. The letter: until you unsubscribe. Messages: as long as we need to help you. Your star: until you or we take it down.
Ask, and it's done. You can always complain to a regulator.
Fold 07You can ask to see, correct, export or delete your data, object to how we use it, or withdraw consent at any time. Write to privacy@collectifcreatif.co and we'll reply within a month.
If you're in the EU or the UK and unhappy with our answer, you can complain to your local data protection authority. If you're in California, know that we don't sell or share your personal information.
Locked up properly. Grown-ups only.
Fold 08Everything travels over encrypted connections. Sign-in sessions use secure cookies that page scripts can't read, and payments are handled entirely by Shopify.
The site isn't meant for children under 16, and we don't knowingly collect their data.
We'll tell you.
Fold 09If we change how we use your data, we'll update this page and the date at the top. Big changes, we'll email you about.
Questions about this page? Write to privacy@collectifcreatif.co.
The other labels