Privacy Policy

We collect information that you provide directly to us, information collected automatically through your use of the site, and information we receive from third parties.

Information You Provide Directly

• Identity and contact data — name, email address, phone number, billing and shipping address.
• Transaction data — the work(s) you inquire about or acquire, edition number, purchase price, payment method (processed by Shopify Payments, our third-party payment processor; see Section 3), and order history.
• Correspondence — inquiries, provenance questions, or other communications you send us via email, contact forms, or phone.
• Account data — if you create an account, your login credentials and saved preferences.

Information Collected Automatically

• Device and usage data — IP address, browser type, operating system, referring URLs, pages viewed, and time spent on the site.
• Cookies and similar technologies — see Section 4 below.

Information from Third Parties

• Our payment processor (Shopify Payments) shares limited transaction confirmation data with us (such as payment status), but we do not receive or store full payment card numbers.
• Shipping and logistics partners provide delivery status and tracking information.
• Analytics providers (see Section 4) provide aggregated usage data.

We use the information we collect to:

• Process and fulfill acquisitions, including authentication, certificate issuance, and shipping;
• Communicate with you about your inquiry, order status, or account, including by phone or text message where you have provided a phone number;
• Verify authenticity and prevent fraud in connection with limited-edition sales;
• Improve and maintain the security and performance of our site;
• Send you marketing communications, where you have consented to receive them, and which you may opt out of at any time (see Section 6);
• Comply with legal, tax, and regulatory obligations.

If you provide a phone number, we may use it to contact you about your order — for example, delivery or completion updates. We do not send marketing text messages unless you separately opt in, and you may opt out of any text communication at any time by replying STOP or contacting us.

Legal Basis for Processing (EEA / UK Visitors)

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR): performance of a contract (to fulfill your acquisition), your consent (for marketing communications), our legitimate interests (to secure and improve our site and prevent fraud), and compliance with legal obligations (such as tax recordkeeping).

We do not sell your personal information. We share information only as necessary with:

• Service providers who perform functions on our behalf, including payment processing (Shopify Payments), shipping and logistics (our Shopify-integrated shipping partners), website hosting and platform services (Shopify), and email communications (Shopify Email and associated domains);
• Professional advisors, including our accountants, insurers, and legal counsel, where necessary;
• Authorities, where required to comply with a legal obligation, protect our rights, or respond to a valid legal request;
• A successor entity, in the event of a merger, acquisition, or sale of assets, subject to the same protections described in this policy.

We use cookies and similar technologies to operate our site and understand how it is used:

• Essential cookies — required for core site functionality (e.g., maintaining your session, cart, or inquiry form).
• Analytics cookies — help us understand aggregate visitor behavior, primarily through Google Analytics and other standard analytics integrations commonly used on Shopify-based websites.
• Marketing cookies — used only with your consent, to measure and, where applicable, personalize communications.

You can control cookies through your browser settings. Disabling certain cookies may affect site functionality. Where required by law, we will request your consent before setting non-essential cookies via a cookie banner. We also honor the Global Privacy Control (GPC) signal, where enabled in your browser, as a valid opt-out of the sale or sharing of personal information under applicable state law.

We retain personal data for as long as necessary to fulfill the purposes described in this policy, including maintaining accurate provenance and ownership records tied to each numbered edition, complying with tax and legal recordkeeping requirements, and resolving disputes. Transaction and provenance records tied to a specific artwork may be retained indefinitely, as they form part of the permanent authenticity record for that piece.

If You Are in the EEA or UK (GDPR)

You have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data (subject to our recordkeeping obligations described in Section 5); restrict or object to certain processing; receive a copy of your data in a portable format; and withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with your local data protection supervisory authority.

If You Are a California Resident (CCPA / CPRA)

You have the right to: know what personal information we have collected, used, and disclosed about you; request deletion of your personal information; correct inaccurate personal information; opt out of the "sale" or "sharing" of personal information (we do not sell personal information); limit the use of sensitive personal information; and not be discriminated against for exercising these rights. You may designate an authorized agent to make a request on your behalf.

Elle Pea is a small business. Where these rights exceed what is legally required of a business of our size, we extend them voluntarily as a matter of good practice.

Other U.S. State Residents

As of 2026, over twenty U.S. states have enacted comprehensive consumer privacy laws, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, with additional states' laws taking effect on an ongoing basis. If you reside in one of these states, you may have rights similar to those described above — including access, correction, deletion, portability, and opt-out of certain processing — as provided under the applicable law of your state.

Exercising Your Rights

To exercise any of the rights above, please visit our Inquire page for current contact details. We will respond within the timeframe required by applicable law. We may need to verify your identity before fulfilling certain requests.

We use commercially reasonable administrative, technical, and physical safeguards designed to protect your personal information, including encrypted transmission (TLS/SSL) and restricted internal access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Elle Pea is based in Long Beach, Los Angeles County, California, United States of America. If you access our site from outside this jurisdiction, your information may be transferred to, stored, and processed in a country with different data protection laws. Where required, we rely on appropriate safeguards — such as Standard Contractual Clauses — for international transfers of personal data.

Our site and offerings are intended for adults. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have inadvertently collected such information, we will take steps to delete it.

Our site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any third-party site you visit.

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page reflects the most recent revision. Material changes will be communicated through a notice on our site or, where appropriate, by email.

Elle Pea
Long Beach, Los Angeles County, California, United States of America
For current contact details, please visit our Inquire page at ellepea.art.