PRIVACY POLICY

We Care About Your Privacy.

This Privacy Policy describes how we process your personal data at Love x Cross Studio. This Privacy Policy applies to any Love x Cross Studio’s service, event, website, or another digital or non-digital service, and any hard copy (paper) form ,which provides a link to or refers to this Privacy Policy. We collect and use personal data only as needed to deliver our site (“Website”) and products, and services, email communications, and to communicate with you about the same, or as you have requested (collectively, our “Services”).

This Privacy Policy is to let you know how and why we collect, use, and disclose your personal data when you use our Website and Services. It also describes your rights, or otherwise, to take control in relation to this data. In some circumstances, such as for certain events, we may provide additional information regarding our data practices.

For those who reside in California, Virginia, Colorado, Connecticut, and Utah. Please click here to see more information regarding your Personal Data.

For those who reside in the United Kingdom, Switzerland, or the European Economic Area, please see the end of this Policy for additional information regarding our practices.

Owner and Data Controller

Love x Cross Studio
4250 Aurora Avenue N, Seattle, WA 98103
hello@lovexcrossstudio.com

1. INFORMATION LOVE X CROSS STUDIO COLLECTS ABOUT YOU

Personal data is information, or a combination of pieces of information, that could reasonably allow you to be identified. As described in more detail below, we collect personal data about you from a variety of sources, including data we collect from you directly, data we collect about you from other sources such as social media, and data we collect automatically from you.

1.1 TYPES OF PERSONAL DATA COLLECTED.

Among the types of Personal Data that the Website and Services collect, by itself or through third parties, there are:

Trackers; Usage Data; device information; session statistics; outbound clicks; site search; form interactions; video engagement; location; browser information; scroll-to-page interactions; first name; last name; email address; phone number; billing address; shipping address; payment info; purchase history.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to collection. Personal data may be freely provided by the User, or, in case of Usage information, collected automatically when using this Website and Services. Unless specified otherwise, all personal data requested by this Website and Services may be mandatory and failure to provide this information may make it impossible for this Website to provide its services. In cases where this Website specifically states that some information is not mandatory, Users are free not to communicate this personal information without consequences to the availability or the functioning of the Website or Services.

1.2 Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner. Any use of Cookies – or of other tracking tools — by this Website or by the owners of third-party services used by this Website serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy, if available.

1.3 Users are responsible for any third-party Personal Data obtained, published, or shared through this Website and Services and confirm that they have the third party's consent to provide the Data to the Owner.

2. HOW DOES LOVE X CROSS STUDIO PROCESS PERSONAL INFORMATION ABOUT YOU

2.1 MODE AND PLACE OF PROCESSING THE DATA.

We take appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of Personal Data. This is carried out using computers and/or IT-enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition, in some cases, the Personal Data may be accessible to certain types of persons in charge, involved with the operation of this Website and Services (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from us at any time.

2.2 LEGAL BASIS OF PROCESSING.

We may process Personal Data relating to Users if one of the following applies: Users have given their consent for one or more specific purposes, need to respond to. Note: Under some legislations, we may be allowed to process Personal Data until the User objects to such processing (“opt-out”), without having to rely on consent or any other of the following legal bases. This, however, does not apply, whenever the processing of Personal information is subject to European data protection law; the provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof; processing is necessary for compliance with a legal obligation to which Love x Cross Studio is subject; processing is related to a task that is carried out in the public interest or in the exercise of official authority vested by us; processing is necessary for the purposes of the legitimate interests pursued by us or by a third party.

In any case, we will gladly help to clarify the specific legal basis that applies to the processing, and in particular, whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

2.3 PLACE.

Personal Data is processed in the United States. Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can check the section containing details about the processing of Personal Data.

If broader protection standards are applicable, Users are also entitled to learn about the legal basis of Data transfers to a country outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by us to safeguard their Data.

If any such transfer takes place, Users can find out more by checking the relevant sections of this document or inquiring with us using the information provided in the contact section.

3. HOW LONG DOES LOVE X CROSS STUDIO RETAIN INFORMATION ABOUT YOU

3.1 . We store your Personal Data for as long as needed, or permitted, based on the reason why we obtained it (consistent with applicable law). This means we might retain your personal data even after you stop purchasing services from us.

When deciding how long to keep your information, we consider:

  • How long we have had a relationship with you or provided a Love x Cross Studio Service to you

  • Whether we are subject to any legal obligations (e.g., any laws that require us to keep transaction records for a certain period of time before we can delete them).

  • Whether we have taken any legal positions (e.g., in connection with any statutes of limitation).

3.2 We will retain your Personal Data for as long as is necessary to provide the relevant services, maintain business records to satisfy tax, legal, and other regulatory requirements, and protect and defend against potential legal claims. We may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, we may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority. When we no longer need to use your Personal Data and there is no need for us to keep it to comply with our legal or regulatory obligations, we will either remove it from our systems or depersonalize it so that we can’t identify you. For all purposes, your depersonalized Personal Data will be stored for a max of up to 14 months. Once this time period has expired, Google Analytics 4 will automatically delete your data and we will delete your data from Squarespace by contacting privacy@squarespace.com

3.3 Therefore, the right of access, the right to erasure, the right to rectification, and the right to data portability cannot be enforced after the expiration of the retention period.

3.4 This Website does not support “Do Not Track” requests. To determine whether any of the third-party services it uses honor the “Do Not Track” requests, please read their privacy policies.

4. HOW LOVE X CROSS STUDIO COLLECTS INFORMATION ABOUT YOU

Love x Crosss Studio believes in both minimizing the data we collect and limiting its use and purpose to only that (i) for which we have been given permission, (ii) as necessary to deliver the Website and Services you purchase or interact with, or (iii) as we might be required or permitted for legal compliance or other lawful purposes:

The Personal Data concerning the User is collected to allow us to provide our Website and Services, comply with our legal obligations, respond to enforcement requests, protect its rights and interests (or those of our Users or third parties), detect any malicious or fraudulent activity, as well as the following: Platform services, Hosting, and Analytics; Handling Payments; User Generated Content and Contacting the User; Marketing communications and Sending Messages; Infrastructure Monitoring; Tag Management; Interaction with Social Networks and Platforms; Handling Activities related to Productivity; and Selling Goods and Services Online.

For specific information about Personal Data used for each purpose, please read below.

4.1 PLATFORM SERVICES, HOSTING & ANALYTICS.

These services have the purpose of hosting and running key components of this Website, therefore allowing the provision of this Website from within a unified platform. Such platforms provide a wide range of tools to us – e.g. analytics, user registration, commenting, database management, e-commerce, and payment processing – that imply the collection and handling of Personal Data.

Some of these services work through geographically distributed servers, making it difficult to determine the actual location where the Personal Data is stored. Both Squarespace and Google Analytics 4 analyze the data in a de-personalized form.

Squarespace

(Squarespace, Inc). Squarespace is a platform provided by Squarespace, Inc. that allows us to build, run, and host this Website. Squarespace is highly customizable and can host websites from simple blogs to complex e-commerce platforms.

Personal Data processed: billing address; device information; email address; first name; last name; payment info; phone number; scroll-to-page interactions; shipping address; IP Address; operating system, browser and browser version, device identifier, location, clicks, searches, timestamps, scrolling.

Place of processing: United States –Privacy Policy
Category of personal information collected according to the CCPA: identifiers; commercial information; internet information.
This processing constitutes: A sale according to the CCPA, CPA, CTDPA

We also use Google Analytics 4 to collect and analyze usage information to understand how our customers use this Website, improve the Website's performance, understand user preferences, and optimize our marketing efforts.

Google Analytics 4

(Google LLC). Google Analytics 4 is a web analysis service provided by Google LLC (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities, and to share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network. In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server. Users can learn more by consulting Google’s official documentation.

Personal Data processed: browser information; device information; session statistics; Trackers; Usage Data; outbound clicks; site search; form interactions; video engagement; location. Place of processing: United States –Privacy Policy – Opt Out
Category of personal information collected according to the CCPA: internet information.
This processing constitutes: A sale according to the CCPA, VCDPA, CPA, CTDPA

4.2 HANDLING PAYMENTS.

When you use our Website and Services, we collect personal and financial data from you to improve our checkout experience and customer service along with fulfilling your order. Unless otherwise specified, this Website processes any payments by credit card, bank transfer, or other means via external payment service providers. In general and unless otherwise stated, Users are requested to provide their payment details and personal information directly to such payment service providers. This Website isn't involved in the collection and processing of such information: instead, it will only receive a notification from the relevant payment service provider as to whether payment has been successfully completed.

Stripe

(Stripe, Inc.) Stripe is a payment service provided by Stripe, Inc.

Personal Data processed: billing address; email address; first name; last name; payment info; purchase history; phone number

Place of processing: United States – Privacy Policy
Category of personal information collected according to the CCPA: identifiers; commercial information.

4.3 FOR USER-GENERATED CONTENT AND CONTACTING THE USER.

When you submit information to this website via the Commissions Form, Contact Form, or Newsletter Form, we collect the Personal Data requested in the webform in order to track and respond to your submissions. We share this information with Squarespace. Inc, our online store hosting provider, so that they can provide website service and store functionality to us. We do not have to publish any of your content. If the law requires us to take down, remove, or edit your Personal Data, we will comply to the required extent.

By filling in the contact form with their Personal Data, the User authorizes this Website to use these details to reply to requests for information, quotes, or any other kind of request as indicated by the form’s header.

Personal Data processed: email address; first name; last name; phone number
Category of personal information collected according to the CCPA: identifiers. This processing constitutes: A sale according to the CCPA, VCDPA, CPA, CTDPA

4.4 MARKETING COMMUNICATIONS AND SENDING MESSAGES:

With your consent, we may send you promotional emails using Flodesk about new and upcoming artwork, special offers, or upcoming events. You can unsubscribe from these communications at any time. This type of service makes it possible to manage a database of email contacts, phone contacts, or any other contact information to communicate with the User. These services may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message

FloDesk

(FloDesk, Inc.) FloDesk is an email address management and message-sending service.

Personal Data processed: email address; first name; last name; Usage Data
Place of processing: United States – Privacy Policy
Category of personal information collected according to the CCPA: identifiers; internet information

This processing constitutes: A sale according to the CCPA, VCDPA, CPA, and CTDPA; A sharing according to the CCPA; A targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA

4.5INFRASTRUCTURE MONITORING.

This type of service allows this Website to monitor the use and behavior of its components so its performance, operation, maintenance, and troubleshooting can be improved. Which Personal Data are processed depends on the characteristics and mode of implementation of these services, whose function is to filter the activities of this Website.

Sentry

(Functional Software, Inc.) Sentry is a monitoring service provided by Functional Software, Inc.

Personal Data processed: various types of personal information as specified in the privacy policy of the service. Place of processing: United States – Privacy Policy
Category of personal information collected according to the CCPA: identifiers.

4.6 TAG MANAGEMENT.

This type of service helps us to manage the tags or scripts needed on this Website in a centralized fashion. This results in the Users' Data flowing through these services, potentially resulting in the retention of this Data.

Google Tag Manager

(Google LLC). Google Tag Manager is a tag management service provided by Google LLC.
Personal Data processed: Usage Data;
Place of processing: United States – Privacy Policy
Category of personal information collected according to the CCPA: internet information.

4.7 INTERACTION WITH SOCIAL NETWORKS AND PLATFORMS.

This type of service allows interaction with social networks or other external platforms directly from the pages of this Website. The interaction and information obtained through this Website are always subject to the User’s privacy settings for each social network. This type of service might still collect traffic data for the pages where the service is installed, even when Users do not use it. It is recommended to log out from the respective services in order to make sure that the processed data on this Website isn’t being connected back to the User’s profile.

Pinterest “Pin it” button and social widgets

(Pinterest, Inc.). The Pinterest “Pin it” button and social widgets are services that allow interaction with the Pinterest platform provided by Pinterest Inc.

Personal Data processed: Trackers; Usage Data.
Place of processing: United States – Privacy Policy
Category of personal information collected according to the CCPA: internet information. This processing constitutes: a sale according to the CCPA, VCDPA, CPA, CTDPA

Instagram widget

(Meta Platforms, Inc.).Instagram is an image visualization service provided by Meta Platforms, Inc. that allows this Website to incorporate content of this kind on its pages.

Personal Data processed: Trackers; Usage Data.
Place of processing: United States –Privacy Policy
Category of personal information collected according to the CCPA: internet information. This processing constitutes: a sale according to the CCPA, VCDPA, CPA, CTDPA

4.7 HANDLING ACTIVITIES RELATED TO PRODUCTIVITY.

This type of service helps us to manage tasks, collaboration, and, in general, activities related to productivity. In using this type of service, the Data of Users will be processed and may be retained, depending on the purpose of the activity in question. These services may be integrated with a wide range of third-party services disclosed within this privacy policy to enable us to import or export Data needed for the relative activity.

Google Workspace

(Google LLC). Google Workspace is an integrated suite of cloud-based productivity, collaboration, and storage services provided by Google LLC. Gmail or other G Suite services are not scanned by Google for advertising purposes. In addition, Google does not collect or use data inside these services for advertising purposes in any other way.

Personal Data processed: email address; first name; last name; phone number; physical address. Place of processing: United States – Privacy Policy
Category of personal information collected according to the CCPA: identifiers.
This processing constitutes: a sale according to the CCPA, VCDPA, CPA, and CTDPA

4.8 SELLING GOODS AND SERVICES ONLINE.

This type of service helps us to sell goods, provide services, or monetize online content. To this end, the services listed below may for instance allow us to process payments, set up subscription models, track orders, and manage deliveries.

Shippo

(Popout, Inc. DBA Shippo) Shippo is a shipping management service provided by Shippo. This allows us to let Users track their orders, but also to organize returns and inventory.

Personal Data processed: billing address; device information; email address; first name; last name; phone number; shipping address; Trackers; Usage Data.

Place of processing: United States – Privacy Policy
Category of personal information collected according to the CCPA: identifiers; internet information.

4.9 DISPLAYING CONTENT FROM EXTERNAL PLATFORMS.

This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them. This type of service might still collect web traffic data for the pages where the service is installed, even when Users do not use it.

Google Fonts (Google LLC)

Google Fonts is a typeface visualization service provided by Google LLC that allows this Website to incorporate content of this kind on its pages.

Personal Data processed: Trackers and Usage Data.

Place of processing: United States –Privacy Policy

5. INFORMATION ON OPTING OUT OF INTERNET-BASED ADVERTISING

5.1 In addition to any opt-out feature provided by any of the services listed in this document, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section of the Cookie Policy.

5.2 COOKIES AND SIMILAR TECHNOLOGIES.

The Cookies and similar technologies on our digital platform can also read and collect data about your browsers as you visit and interact with those platforms: please read our Cookie Policy for more detailed information about what cookies are, what kinds are used on our sites, and what choices you have. As described further in our Cookie Policy, we use these technologies to enable you to use our Website and Services, learn how you and others interact with our Website and Services, personalize the content on our Website and Services, and deliver advertising based on your interests, including those inferred from your activities over time and across the Website and Services operated by us here.

6. HOW LOVE X CROSS STUDIO USES INFORMATION ABOUT YOU

Personal information is currently stored via Google (Google Workspace). We do not sell, lease, or rent personal information or customer lists to third-parties. Any personal information shared with third parties are for core business functions listed below.

6.1 USES.

We rely on the information you provide to us or that we collect or observe about your individual interactions with us for the following purposes:

  • We will retain your shipping address to ensure the products purchased will be shipped to the correct address by the shipping company you select at checkout or when you contact us for courier service.

  • We will retain your billing address to ensure accurate records of third-party payment processors of Stripe for any purchase to ensure applicable state and local tax to your purchase if purchased here in the United States or customs tax if purchased outside of the United States.

  • We will retain your shopping history and use details of the products you have previously purchased to make suggestions to you for other products and services, which we believe you will also be interested in.

  • We will retain and evaluate information on your recent visits to our Website and how you move around different sections of our website for analytics purposes to understand how people use our Website and Services so that we can make it more intuitive.

  • We will keep a record of the products or services offered on our Website that you have clicked on and use that information to target advertising on this Website to you that is relevant to your interests, which we have identified based on the product links you have clicked.

  • We will send you marketing emails if you “opt-in” to receive marketing emails when registering on our Website, or if you have enquired about or purchased any of our goods or services from us and you have not opted out of receiving such marketing. 

  • We will get your express opt-in consent before we share your Personal Data with any third party for marketing purposes. We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.

  • We will keep a record of any content shared with us via the Commissions Form, Contact Form, or Newsletter Form, which includes messages sent to the elianachavarria_art Instagram profile, this is to ensure your requests are being met with the most optimal service and support.

  • Please note that, if you change your mind about being sent marketing emails you can “opt-out” at any time by clicking the “unsubscribe” link at the bottom of any marketing email. Once you “opt-out”, you will no longer receive any marketing emails from us. We will continue to communicate with you regarding your service billing and support via email and where we send push notifications from time to time in order to update you about any service updates, events, and promotions we may be running. If you no longer wish to receive these communications, please disable these in the settings on your device 

For other purposes that we tell you about specifically when you register or provide personal information to us:

  • Sharing with trusted third parties (including payment processors (Stripe), shipping services (Shippo, USPS, UPS, CrateFreighters), Squarespace Analytics, Google Analytics 4, Google Workspace, and Flodesk). These third parties (and any subcontractors they may be permitted to use) have agreed not to share, use or retain your personal information for any purpose other than as necessary for the provision of Services.

  • Communicating with you by third-party email delivery (Flodesk) regarding the products or services you may have signed up for or purchased from us

  • Complying with legal obligations and regulations to which Love x Cross Studio is subject and cooperate with regulators, other appropriate agencies or authorities, and law enforcement bodies, both within your jurisdiction and internationally.

If we collect information from you in connection with a co-branded offer, it will be clear at the point of collection who is collecting the information and whose privacy policy applies. In addition, it will describe any options you have regarding the use and/or sharing of your Personal Data with a co-branded partner, as well as how to exercise those options. Our Website and Services may contain links to other websites. This Privacy Policy only applies to lovexcrossstudio.com. We are not responsible for the privacy practices or the content of third-party sites. Please read the privacy policy of any website you visit.

6.2 SHARING WITH TRUSTED THIRD PARTIES.

We do not transfer your personal data to organizations that wish to use it for their own marketing promotions or other purposes. Your personal information will only be shared with other organizations where it is necessary to enable us to provide you with the services you have requested and with trusted third-party service providers as necessary for them to perform services on our behalf, such as:

  • Processing debit and credit cards through Stripe payments for purchased orders or services.

  • Performing analysis of our Services, customer demographics, and sentiment using Squarespace Analytics and Google Analytics 4.

  • Shipping your order with either USPS, UPS, or CratesFreighters, using the Shippo tool for label creation.

  • Communicating with you, such as by way of email or survey delivery via Flodesk to email you with special offers on products and services we think you might like.

These third parties (and any subcontractors they may be permitted to use) have agreed not to share, use or retain your personal information for any purpose other than as necessary for the provision of Services.

6.3 COMPLIANCE WITH LEGAL, REGULATORY, AND LAW ENFORCEMENT REQUESTS.

We may need to cooperate with government and law enforcement officials (both within your jurisdiction and internationally) and private parties to enforce, satisfy and comply with the law. We may disclose any information about you to the government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal processes, to protect our property and rights or the property and rights of a third party, to protect the safety of the public or any person, or to prevent or stop activity we consider to be illegal or unethical (checking and verifying your identity to protect against the risk of fraud, and to detect and prevent any money laundering or other financial crime).

6.4 INTERNATIONAL TRANSFERS.

Personal data is currently stored via Google (Google Workspace). Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

7. DATA SECURITY

We implement reasonable security measures to protect your Personal Data from unauthorized access, disclosure, alteration, or destruction. However, please note that no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. YOUR DATA PROTECTION RIGHTS

You have the following rights in relation to the Personal Data we hold about you. Please note that these rights are subject to certain exemptions which may be applicable to any request you make.

The right to be informed

In addition to the generally required disclosures outlined above, the GDPR further requires that you ensure that your privacy notices are concise, easy-to-understand, and easily accessible throughout our Website.

Your right to access

If you ask us, we’ll confirm whether we’re processing your Personal Data and, subject to any applicable exemptions, provide you with a copy of that personal information (along with certain other details) within the timescales or extended timescales provided for by the GDPR for complex requests, or where applicable, provide you with an explanation as to why we will not be complying with your request. If you require additional copies, we may need to charge a reasonable fee.

Your right to rectification

If the personal information we hold about you is inaccurate or incomplete, you’re entitled to have it rectified. If you are entitled to rectification and if we’ve shared your personal information with others, we’ll let them know about the rectification where possible and where this would not involve a disproportionate effort. If you ask us, where possible and lawful to do so, we’ll also tell you who we’ve shared your Personal Data with so that you can contact them directly.

Your right to erasure

You can ask us to delete or remove your Personal Data in some circumstances such as where we no longer need it or if you withdraw your consent (where applicable because that was the legal basis on which we were processing your personal information). If you are entitled to erasure and if we’ve shared your personal information with others, we’ll take reasonable steps to inform those others where possible and where this would not involve a disproportionate effort. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.

Your right to restrict processing

You can ask us to ‘block’ or suppress the processing of your Personal Data in certain circumstances such as where you contest the accuracy of that personal information or you object to us. If you are entitled to restriction and if we’ve shared your personal information with others, we’ll let them know about the restriction where it is possible for us to do so. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.

Your right to data portability

With effect from 25 May 2018, you have the right, in certain circumstances, to obtain Personal Data you’ve provided us with (in a structured, commonly used, and machine-readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.

Your right to object

You can ask us to stop processing your Personal Data, and we will do so if we are: relying on our own or someone else’s legitimate interests to process your personal information, except if we can demonstrate compelling legal grounds for the processing; or processing your personal information for direct marketing.

Your rights in relation to automated decision-making and profiling

You have the right not to be subject to a decision when it’s based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for entering into, or the performance of, a contract between you and us.

Your right to withdraw consent

If we rely on your consent (or explicit consent) as our legal basis for processing your Personal Data, you have the right to withdraw that consent at any time. 

If you wish to exercise any of the rights set out above, please Contact us.

You can also elect not to receive marketing communications by following the unsubscribe instructions in such communications.

You can instruct your browser to refuse cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Website and Services. Our partners may use cookies to provide us with information about your interactions with their products, but the use of those third-party cookies would be subject to the service provider’s policies. You can learn more about controlling cookies placed on your device as you visit our sites in our Cookie Policy.

You may ask us if you have questions about the Personal Data we hold on you. Under certain circumstances, subject to local law requirements, you may have rights under data protection laws applicable to your Personal Data. These may include a right to a copy of your Personal Data, to update it, erase it, restrict our use of it, or to transfer it to other organizations at your request subject to local law. You may also have the right to object to some processing and, where we have asked for your consent to process your data, to withdraw this consent. Please contact us at hello@lovexcrossstudio.com if you wish to exercise any of the rights that apply to you and your personal information. We will have your Personal Data deleted by contacting privacy@squarespace.com to submit your request.

If you wish to exercise any of the above rights, please contact us as set out at the end of this Privacy Policy. We will respond to such queries within 14 days and deal with requests we receive from you, in accordance with the provisions of the Data Protection Law. Occasionally it could take us longer if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. 

You will not have to pay a fee to access your Personal Data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded,  repetitive, or excessive. Alternatively, we could refuse to comply with your request in these circumstances. 

We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. 

Age restrictions. Our Website and Services are available for those only over the age of 18. Our Website and Services are not targeted to, intended to be consumed by, or designed to entice individuals under the age of 18. We do not accept children as clients or knowingly collect data about them. If you know of or have reason to believe anyone under the age of 18 has provided us with any personal data, please contact us at hello@lovexcrossstudio.com

Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights. Unless permitted under applicable laws, we will not:

  • Deny you goods or services.

  • Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.

  • Provide you with a different level or quality of goods or services.

  • Suggests that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

9. HOW LOVE X CROSS STUDIO SECURES INFORMATION ABOUT YOU

We understand that your Personal Data is important and we are committed to treating it with the utmost care and security.

We protect your information using physical, technical, and administrative security measures to reduce the risks of loss, misuse, unauthorized access, disclosure, and alteration. As our Services are hosted by Squarespace, they also have a security team dedicated to keeping Personal Data safe. They maintain administrative, technical, and physical safeguards that are intended to appropriately protect against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing, of the personal information in our possession. They employ security measures such as using firewalls to protect against intruders, building redundancies throughout our network (so that if one server goes down, another can cover for it), and testing for and protecting against network vulnerabilities. Any credit card information or payment transactions are also encrypted using SSL technology.

In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.  They will only process your personal data on our instructions and they are subject to a duty of confidentiality. 

Please be aware, though, that no security measures are perfect or impenetrable. You remain responsible for protecting your Personal Data and for the security of the information you transmit to us over the Internet.

10. CHANGES TO LOVE X CROSS STUDIO’S PRIVACY POLICY

You may request a copy of this Policy from us using the contact details set out above. We may modify or update this Policy from time to time. If we change this Policy, we will notify you of the changes by updating this Policy on our website by referring to the “Last Modified” date at the bottom of this page. Where changes to this Policy notice will have a fundamental impact on the nature of the processing or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise your rights.

This Privacy Policy is also available orally upon request to ensure comprehension and to aid the visually impaired.

11.FURTHER INQUIRIES

If you have any questions about Love x Cross Studio’s privacy policy, or the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us either electronically or in writing.

Love x Cross Studio
4250 Aurora Avenue N., Seattle, WA 98103
hello@lovexcrossstudio.com

ADDITIONAL INFORMATION FOR EEA, UK, AND SWITZERLAND CUSTOMERS AND VISITORS TO LOVE X CROSS STUDIO’S WEBSITE

If you visit lovexcrossstudio.com, then the data controller will be Love x Cross Studio a US entity- your information is collected in your country and then transferred to the United States. 

If we transfer your data out of the European Economic Area (E.E.A.), we implement at least one of the two following safeguards:

  • We transfer your information to countries that have been recognized by the European Commission as providing an adequate level of data protection according to E.E.A. standards (see the full list of these countries).

  • We take steps to ensure that the recipient is bound by contractual obligations, including E.U. Standard Contractual Clauses together with additional safeguards to protect your personal data.

In certain situations, the courts, law enforcement agencies, regulatory agencies, or security authorities in those countries might be entitled to access your personal information.

On some occasions, Love x Cross Studio processes your data with your consent (e.g., when you agree that we may place cookies, or if you ask Love x Cross Studio to send you information about upcoming events).

On other occasions, Love x Cross Studio processes your data when we need to do this to fulfill a contract with you (e.g., for billing purposes) or when we are required to do this by law. If it is mandatory for you to provide data for these purposes, we will make this clear at the time and will also explain what will happen if you do not provide the data (e.g. we. are unable to fulfill your purchase).

Love x Cross Studio also processes your personal data when it is in our legitimate interest to do this and when these interests are not overridden by your data protection rights. For example, Love x Cross Studio has a legitimate interest in ensuring the security and integrity of our artwork, learning about the interests and preferences of our current and prospective collectors, developing new business opportunities, maintaining accurate business and provenance records, and ensuring that our  Website and Services operate effectively. When we process personal information to meet our legitimate interests, we put in place robust safeguards to ensure that your privacy is protected and to ensure that our legitimate interests are not overridden by your interests or fundamental rights and freedoms.

Last Modified: 27th of April, 2025