Privacy Policy
Last updated: July 6, 2026
This policy explains how Art of Sundays collects, uses, and protects your personal information when you visit our store and place an order.
Who we are
Art of Sundays Prints LLC, a New York limited liability company trading as Art of Sundays, runs the store at artofsundays.co. We are the "data controller" responsible for your personal information under this policy.
We sell art prints to five markets: the United States, Australia, the United Kingdom, the European Union, and Canada. This policy applies to all of them, with region-specific rights set out in the "Your rights" section below. Where we are legally required to appoint a representative under Article 27 of the EU or UK GDPR, their contact details will be made available here and on request.
For any privacy question or request, contact us at support@artofsundays.co. We aim to respond within 2 business days.
Information we collect
Information you give us
- Order and contact details - your name, email address, shipping address, and billing address.
- Order history - the products you buy, sizes, and any order notes.
- Messages - anything you send us by email or a contact form.
Information we collect automatically
- Device and usage data - IP address, browser and device type, pages viewed, and referring links.
- Cookies and similar technologies - see "Cookies and your choices" below.
What we do not collect
We do not receive or store your full payment card details. Payments are processed by Shopify; your card information goes directly to the payment processor, not to us.
How we use your information
We use your personal information to:
- process and fulfil your orders, including printing and shipping;
- send you order confirmations, shipping updates, and receipts;
- respond to your questions and provide customer support;
- detect and prevent fraud, and keep the store secure;
- understand how the store is used, where you have allowed analytics;
- meet our legal, tax, and accounting obligations.
Where the GDPR or UK GDPR applies, our legal bases are: performance of your contract (fulfilling orders), consent (non-essential cookies and any marketing), legitimate interests (security, fraud prevention, improving the store), and legal obligation (tax and record-keeping).
Marketing
We do not currently send marketing emails. If we introduce them, we will only email you if you have opted in, and every marketing email will include an unsubscribe link. Opting out never affects the service emails we send about your orders.
Who we share it with
We do not sell your personal information for money. We share it only with the service providers we rely on to run the store and fulfil your orders. Each acts as our processor under a data-processing agreement and may only use your data on our instructions.
| Provider | What they do | Data they handle and where |
|---|---|---|
| Shopify | Store platform and payment processing | Name, contact and address details, order and payment data. US and global; Shopify DPA plus standard contractual clauses. |
| Prodigi (Prodigi Group) | Print production and shipping | Recipient name, delivery address, contact details, order and product details, artwork files. UK, EEA, US, and Australia; EU SCCs plus UK IDTA. Prodigi uses local print labs as its own sub-processors. |
| Cloudflare | Website hosting, content delivery, security, and print-file storage | IP address and request data; stored print files for orders. Global edge network; Cloudflare DPA plus SCCs. |
| Resend | Transactional email delivery (order and shipping notifications) | Name and email address. US; DPA plus SCCs. |
We may also disclose personal information where required by law, to enforce our terms, or in connection with a business sale or reorganisation. If we add an analytics or advertising provider, we will name it here.
Relationship with Shopify
Our store is hosted by Shopify. For most of what we do, Shopify processes your information on our behalf as described above. Shopify also provides certain enhanced platform features for which it is responsible for the processing of your personal information in its own right, including responding to requests to exercise your rights over that use. To learn more, see the Shopify Consumer Privacy Policy; depending on where you live, you can exercise certain rights over data Shopify processes at the Shopify Privacy Portal.
International data transfers
Because we ship to five markets and use global providers, your information may be processed outside your home country - including in the United States, the United Kingdom, the EEA, and Australia. Where information leaves the UK, EU, or another region with transfer rules, we rely on approved safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, so your information keeps an equivalent level of protection.
Cookies and your choices
We use cookies and similar technologies. You control the non-essential ones through our consent banner, and you can change your choice at any time using the "Your Privacy Choices" link in the footer, which reopens the same panel.
| Category | What it does | Set without consent? |
|---|---|---|
| Strictly necessary | Required for the store to work, including your cart and checkout. | Yes, always on |
| Preferences | Remembers choices you make, such as your region. | Only with consent |
| Analytics | Helps us understand which pages and products people use, so we can improve the store. | Only with consent |
| Marketing | Lets us and our advertising partners show more relevant ads and measure how they perform. | Only with consent |
| Sale or sharing of personal information | Controls whether your personal information may be shared with partners in ways that count as a sale or sharing under privacy law. | Only with consent |
EU, UK, and Canada: non-essential cookies stay off until you accept them. Accepting and rejecting are equally easy, and you can withdraw consent at any time.
United States: we honor the Global Privacy Control (GPC) browser signal as a valid opt-out of the sale or sharing of personal information. You can also opt out at any time through the "Your Privacy Choices" link in the footer, which includes the sale or sharing setting.
Your rights
Your rights depend on where you live. In every case, you can exercise them by emailing support@artofsundays.co. We may need to verify your identity before acting on a request, and you may use an authorised agent where the law allows. We will not treat you differently for exercising a privacy right, and depending on where you live you may appeal a decision we make by replying to our response.
| Region | Your rights include |
|---|---|
| EU / EEA, UK, Quebec | Access, correction, deletion, portability, restriction, objection, and the right to withdraw consent. You may also complain to your data protection authority. |
| US states | Know what we collect, request deletion or correction, and opt out of the sale or sharing of personal information (including via GPC). |
| Canada (federal) | Access and correction of your personal information, and withdrawal of consent. |
| Australia | Access and correction of your personal information, and to raise a privacy concern with us or the OAIC. |
How long we keep it
We keep order and transaction records for as long as needed to provide the service and to meet our legal, tax, and accounting obligations - typically 7 years for tax and accounting records. We keep other information only as long as we need it for the purposes in this policy, then delete or anonymise it.
Australia - collection notice
For visitors in Australia: we collect the personal information described in "Information we collect" to process orders, provide support, and run the store, as set out in this policy. Some of it is disclosed to overseas providers (see "Who we share it with" and "International data transfers"), including in the United States, the United Kingdom, and the EEA. If you do not provide the information needed to complete an order, we may not be able to fulfil it.
Children
Our store is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us their information, contact us and we will delete it. We do not have actual knowledge that we sell or share the personal information of anyone under 16.
Security
We use reputable providers and reasonable technical and organisational measures to protect your information. No method of transmission or storage is completely secure, but we work to keep your data safe and to address any incident promptly.
Changes to this policy
We may update this policy from time to time. When we do, we will change the "Last updated" date at the top, and for significant changes we will take reasonable steps to let you know.
Contact
Art of Sundays Prints LLC, trading as Art of Sundays. Privacy requests and questions: support@artofsundays.co. We aim to reply within 2 business days.