Privacy policy

Last updated: August 17, 2025

MyArt operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). MyArt is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

MyArt is operated by Ex Libris Creators Inc.
Registered address: 8 The Green, Ste A, Dover, DE 19901, USA
Contact: support@myart-shop.com | +1 (202) 964 62 34

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

• Contact details including your name, address, billing address, shipping address, phone number, and email address.
• Payment information (e.g., tokenized payment identifiers and limited card details) processed via our payment providers. We do not receive or store full payment card numbers or security codes; such data is processed directly by PCI DSS Level 1–certified providers (e.g., Shopify Payments). We retain transaction metadata (e.g., amount, time, method) for accounting, fraud prevention, and compliance.
  
• Account information including your username, password, security questions, preferences and settings.
• Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel and your past transactions.
• Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
• Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
• Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
• Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
• From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
• From our partners or other third parties.

How We Use Your Personal Information

We process your personal information only where we have a lawful basis under applicable data-protection laws. Depending on how you interact with the Services, we rely on the following bases and purposes:

• Provide, tailor, and improve the Services (contract; legitimate interests). We process your information to perform our contract with you (for example, processing payments, fulfilling orders, arranging shipping, managing your account) and to pursue our legitimate interests in operating, improving, and personalizing the Services (such as remembering your preferences and recommending products)

• Marketing and advertising (consent where required; legitimate interests). Where required by law (including for the use of cookies or similar technologies in the EEA/UK), we obtain your consent before sending marketing communications or delivering targeted/interest-based advertising. In other cases, we rely on our legitimate interests to market our products and services. You may withdraw your consent at any time and opt out of marketing as described in the Your Rights and Choices section (e.g., unsubscribe links in emails, replying STOP to SMS, or updating cookie preferences)

• Security and fraud prevention (legitimate interests; legal obligations). We process information to authenticate accounts, provide a secure shopping and payment experience, detect and prevent fraud, abuse, or illegal activity, and comply with our legal obligations

• Communications and support (contract; legitimate interests). We communicate with you about your orders and account and respond to inquiries as necessary to perform our contract and to pursue our legitimate interests in providing customer support

• Legal and compliance (legal obligations; legitimate interests). We process information to comply with applicable laws and respond to lawful requests, and to establish, exercise, or defend legal claims

• Vital interests (vital interests). In rare cases, we may process information to protect you or others from serious harm

US state privacy laws. Where US state laws apply (e.g., California, Colorado, Connecticut, Utah, Virginia), we may process personal information for “targeted advertising” (also called “cross-context behavioral advertising”) and may “sell” or “share” identifiers as those terms are defined by law. You can opt out at any time via Your Privacy Choices (Do Not Sell or Share My Personal Information) and through our cookie preferences tool

Legitimate interests balancing. When we rely on legitimate interests, we consider and balance those interests against your rights and freedoms and implement safeguards appropriate to the processing

Cookies and Similar Technologies

We and our service providers use cookies, web beacons, pixels, SDKs, local storage and similar technologies (“cookies”) to operate and secure the Services, remember your preferences, analyze how the Services are used, and personalize content and advertising.

Categories.

• Strictly necessary (site functionality, checkout, fraud prevention);
• Performance/analytics (traffic measurement, error diagnostics);
• Functional (remembering preferences);
• Advertising/targeting (ad delivery, frequency capping, measuring and improving ads).

Who sets them. Cookies may be set by us (first-party) or by our partners (third-party). Our key partners include Shopify and selected analytics/advertising providers. Partners may act as our processors or, for their own services, as independent controllers. See our Cookie Policy for details.

Retention. Cookies persist for different periods: session-only or persistent (e.g., 24 hours, 30 days, 13 months). We retain analytics identifiers only as long as needed for the purposes described or as required by law.

Your choices.
• EEA/UK/CH: We obtain your consent before placing non-essential cookies. You can grant/withdraw consent at any time via Cookie Preferences. Non-essential scripts remain blocked until consent is given.
• US (including California): You may opt out of the sale or sharing of your personal information and of targeted advertising via Do Not Sell or Share My Personal Information or Privacy Preferences. We honour Global Privacy Control (GPC) signals where required.
 • You may also control cookies through your browser settings; disabling certain cookies may affect site functionality.

More information. For a full, up-to-date list of cookies (name, provider, purpose, type, duration) and our latest scan date, please see our Cookie Policy or contact us at support@myart-shop.com

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

• With Shopify, vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
• With business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites. You can exercise your rights to opt-out of those uses here .
• When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
• With our affiliates or otherwise within our corporate group.
• In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

Disclosure to service providers and international transfers

We share personal information with Shopify, fulfillment partners and other third‑party service providers who perform services on our behalf (such as IT hosting, payment processing, data analytics, customer support, cloud storage, order manufacturing and international shipping). Because our products are manufactured and shipped by partners located in the People’s China, personal information necessary to fulfil your order (such as your name, shipping address, contact information and order details) will be transferred to and processed by our suppliers in China. We require all service providers and suppliers to process personal information only as instructed by us and to implement appropriate safeguards. Where personal information is transferred outside your country of residence, including to countries that may not offer an equivalent level of data protection, we implement appropriate transfer mechanisms such as standard contractual clauses or other recognised safeguards

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy . Depending on where you live, you may exercise certain rights with respect to your personal information here Shopify Privacy Portal Link.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Children's Data

The Services are not directed to or intended for use by children. We do not knowingly collect personal information from anyone under 13 years of age in the United States or under 16 years of age in the European Economic Area, United Kingdom or Switzerland. If you believe that a child under these age thresholds has provided us with personal information without parental consent, please contact us using the details in the “Contact” section and we will delete the information as required by law. We do not “sell” or “share” personal information of individuals we know to be under 16 years of age.

Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

• Right to Access / Know. You may have a right to request access to personal information that we hold about you.
• Right to Delete. You may have a right to request that we delete personal information we maintain about you.
• Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
• Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
• Right to Opt out of Sale or Sharing for Targeted Advertising. Depending on where you reside, you may have a right to opt out of the "sale" or "share" of your personal information or to opt out of the processing of your personal information for purposes considered to be "targeted advertising", as defined in applicable privacy laws. You can exercise your rights to opt-out of those uses here. Please note that if you visit our website with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt-out for the device and browser that you use to visit the website. If we are able to associate the device sending the signal to a Shopify account, we will apply the opt out request to the account as well. To learn more about Global Privacy Control, you can visit https://globalprivacycontrol.org/. Other than the Global Privacy Control, we do not recognize other "Do Not Track" signals that may be sent from your web browser or device.
• Managing Communication Preferences. We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, you can visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority. For the EEA, you can find a list of the responsible data protection supervisory authorities here.

International Transfers

Please note that we may transfer, store and process your personal information outside the country you live in.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.

Regional Disclosures & Supplements

If you reside in a jurisdiction listed below, please review the applicable regional notice for details about your rights and how we process personal information in your region:

• GDPR Compliance (EEA/UK/CH)
• PIPEDA Compliance (Canada)
• APA–NZPA Compliance (Australia & New Zealand)
• LGPD Compliance (Brazil)
• APPI Compliance (Japan)
• PDPA Compliance (Singapore/Malaysia)
• POPIA Compliance (South Africa)
• US Laws Compliance (United States)

Manage your choices anytime: use Cookie Settings to adjust or withdraw your consent to cookies and similar tracking on this site, and Do Not Sell or Share My Personal Information to opt out of the sale or sharing of your personal data for targeted advertising where applicable under U.S. law. We also honor Global Privacy Control (GPC) signals.

SMS Marketing

Program description. When you provide your mobile number and opt in, you agree to receive recurring text messages from MyArt about promotions, updates, and (if enabled) cart reminders. Message frequency varies. Message and data rates may apply. Messages may be sent using an automatic telephone dialing system or similar technology. Your consent is not a condition of purchase.

Data we collect for SMS. We collect your mobile number, consent status and timestamp, message-delivery and engagement metadata (e.g., delivery, clicks), and—where applicable—your country or location (to comply with regional quiet hours and routing). If cart reminders are enabled, we may also associate your number with your shopping activity via cookies or similar technologies.

How we use your SMS data. We use this information to deliver and personalize messages, run cart-reminder or service flows you’ve opted into, measure performance and prevent abuse, and maintain legal/carrier compliance (including audit logs of consent and opt-outs).

Sharing and transfers. We share your SMS data with service providers that process messages on our behalf (e.g., SMS platforms and mobile carriers) solely to provide the messaging service. We do not sell your mobile number, and we do not share your SMS opt-in or consent status with third parties for purposes unrelated to providing the service. Your information may be transferred to and processed in countries where our providers operate (including the United States). We take appropriate safeguards for such transfers.

Retention. We retain your mobile number and consent/opt-out records for as long as you subscribe to SMS or as needed to comply with law, resolve disputes, and enforce our agreements. If you opt out, we may retain limited records (e.g., opt-out status and timestamp) to honor your choice and for compliance.

Your choices. You can opt out at any time by replying STOP to any message or using the unsubscribe link (where available). For help, reply HELP or contact support@myart-shop.com. If messages are sent via a sender type that doesn’t support keyword replies (e.g., certain branded sender IDs in some countries), use the unsubscribe link in the message or contact us.

Contacts & more information. For questions about our SMS practices, contact support@myart-shop.com. Also see our Terms of Service.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call or email us at support@myart-shop.com or contact us at 8 The Green, Dover, DE, 19901, US For the purpose of applicable data protection laws, we are the data controller of your personal information.