Privacy policy

Privacy Policy
Last updated: October 18, 2026

Casa Santosha Art is my online store, including all related content, features, products, and services (the “Services”). The store is powered by Shopify. This Privacy Policy explains how I collect, use, and share your personal information when you visit, shop, or communicate with me. If there is a conflict between my Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to your personal information.

By using the Services, you acknowledge that you have read and understand this Privacy Policy.

Personal Information I Collect
“Personal information” means information that identifies, or can reasonably be linked to, you or another person. It does not include anonymous or de-identified information. Depending on how you use the Services and where you live, I may collect:

  • Contact details: name, billing and shipping address, phone number, and email.
  • Payment information: card details, transaction details, and payment confirmation, processed through Shopify and my payment providers.
  • Account information: username, password, preferences, and settings.
  • Transaction information: items you view, add to your cart or wishlist, purchase, return, or cancel.
  • Communications: anything you include when you contact me, such as a support request.
  • Device information: your device, browser, network connection, IP address, and similar identifiers.
  • Usage information: how and when you interact with the Services.

Where It Comes From

  • Directly from you, when you create an account, shop, or contact me.
  • Automatically, through cookies and similar technologies when you use the Services.
  • From service providers who help me run the store and process information on my behalf.
  • From partners or other third parties.

How I Use Your Information

  • To run the store: process payments, fulfill and ship orders, handle returns and replacements, manage your account, enable reviews, and recommend products you might like.
  • Marketing: send promotional emails, texts, or mail, and show ads based on your activity on the Services.
  • Security and fraud prevention: protect your account and keep shopping safe. If you create an account, please keep your login details private.
  • Customer support: respond to you and keep our communication going.
  • Legal reasons: comply with the law, respond to valid legal requests, and enforce my policies.

How I Share Your Information
I may share personal information:

  • With Shopify and service providers who help run the store (payment processing, analytics, customer support, cloud storage, printing, fulfillment, and shipping).
  • With marketing partners to show you ads. For example, Shopify supports personalized advertising with third-party services based on your activity across different stores. These partners use your information under their own privacy notices. Depending on where you live, you may have the right to opt out of this. You can opt out here.
  • When you ask me to, such as to ship your order or when you use social media features or login integrations.
  • In connection with a business transaction such as a sale of the business, to comply with legal obligations, to enforce my policies, or to protect my rights and the rights of others.

Relationship with Shopify
The Services are hosted by Shopify, which collects and processes information about your use of the Services to provide and improve them. Information you submit is shared with Shopify and with third parties that may be located in other countries. I also use certain Shopify features that combine information from your interactions with my store, other merchants, and Shopify. For those features, Shopify is responsible for processing your information and for responding to your requests about it. To learn more, see the Shopify Consumer Privacy Policy. Depending on where you live, you can exercise certain rights through the Shopify Privacy Portal.

Third-Party Websites
The Services may link to websites or platforms run by others. I’m not responsible for their privacy or security practices, so please review their policies. Anything you share publicly, including on social media, may be visible to others. Linking to a site does not mean I endorse it.

Children’s Data
The Services are not intended for children, and I do not knowingly collect personal information from anyone under the age of majority where they live. If you are a parent or guardian and believe your child has given me personal information, contact me and I’ll delete it. I have no actual knowledge of “sharing” or “selling” (as defined by law) the personal information of anyone under 16.

Security and Retention
No security measures are perfect, and information sent to me may not be secure in transit. Please avoid sending sensitive information through unsecure channels. I keep personal information only as long as needed to maintain your account, provide the Services, meet legal obligations, resolve disputes, and enforce my policies.

Your Rights and Choices
Depending on where you live, you may have some or all of these rights. They are not absolute, and in some cases I may decline a request as permitted by law.

  • Access: request access to the personal information I hold about you.
  • Delete: request that I delete your personal information.
  • Correct: request that I correct inaccurate information.
  • Portability: request a copy of your information or ask that it be transferred to a third party.
  • Opt out of sale, sharing, or targeted advertising: you can opt out here. If you visit with the Global Privacy Control signal turned on, I will treat that as an opt-out request for that device and browser, and for your Shopify account if it can be linked. Learn more at https://globalprivacycontrol.org/. I do not recognize other “Do Not Track” signals.
  • Email preferences: you can unsubscribe from promotional emails anytime using the link in the email. I may still send emails about your orders or account.

You can exercise these rights through the Services or by contacting me below. To learn about rights related to data processed by Shopify, visit https://privacy.shopify.com/en.

I will never treat you differently for exercising your rights. I may need to verify your identity before processing a request. You can also name an authorized agent to make requests for you; I’ll need proof they are authorized, and I may ask you to verify your identity directly. I’ll respond in a timely manner as required by law.

Complaints
If you have a complaint about how your personal information is handled, please contact me. Depending on where you live, you may be able to appeal my decision or file a complaint with your local data protection authority.

International Transfers
Your personal information may be transferred, stored, and processed outside your country. If it is transferred out of the European Economic Area or the United Kingdom, I rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses, unless the destination country is recognized as providing adequate protection.

Changes to This Policy
I may update this Privacy Policy from time to time to reflect changes in my practices or for legal or regulatory reasons. I’ll post the updated version here and change the “Last updated” date.

Contact
If you have questions about this Privacy Policy or want to exercise your rights, email me at jennifer@casasantosha.art, or write to Casa Santosha Art, 116 Gardenridge Dr, Seguin TX 78155, United States.