Privacy Policy

This Privacy Policy explains how Frame Design GEM Gallery (“we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit gem4art.com(the “Site”), contact us, subscribe to our newsletter, or place an order. By using the Site you agree to this Policy.

Information we collect

Information you provide

• Contact form: your name, email address, phone number (optional), inquiry type, and the content of your message.
• Newsletter sign-up: your name and email address.
• Orders / checkout: your name, email address, phone number, and — for shipped orders — your shipping address. Card payments are processed by Stripe; we do not receive or store your full card number.
• Custom framing requests: any project details you choose to share.
• Administrative accounts: if you are an authorized staff member, your login email is used to gate access to internal tools.

Information collected automatically

• Usage analytics: we use Vercel Analytics, which measures aggregate page views and performance without cookies and without building a profile of you.
• Server logs: our hosting provider records standard request data (IP address, browser type, timestamps) for security, rate-limiting, and debugging.

How we use your information

• To respond to your inquiries and provide customer service.
• To process, fulfill, and follow up on your orders, including sending order confirmations and fulfillment updates.
• To send our newsletter and gallery news, where you have signed up. You can unsubscribe at any time using the link in any newsletter email.
• To operate, secure, and improve the Site, including preventing spam and abuse.
• To comply with legal, tax, and accounting obligations.

How we share your information

We do not sell your personal information. We share it only with service providers who process it on our behalf, and only as needed:

• Stripe — payment processing.
• Supabase — database and authentication hosting.
• Vercel — website hosting and privacy-friendly analytics.
• Resend — transactional email delivery (order confirmations, alerts).
• n8n (self-hosted) and Constant Contact — newsletter and marketing email workflows.
• Google — Search Console (aggregate search performance only).

We may also disclose information if required by law, to enforce our terms, or to protect the rights, property, or safety of our customers or the public.

Data retention

We keep order records for as long as needed for warranty, accounting, and legal purposes. Contact-form messages and newsletter subscriptions are kept until they are no longer needed or you ask us to delete them. You can request deletion using the contact details below.

Your California privacy rights

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:

• Know what personal information we have collected about you and how we use and share it.
• Request deletion of your personal information, subject to legal exceptions.
• Request correction of inaccurate personal information.
• Not receive discriminatory treatment for exercising these rights.

We do not sell or share your personal information as those terms are defined under California law, and we do not use it for cross-context behavioral advertising.

To make a request, email us at gem4art@sbcglobal.net with “Privacy Request” in the subject line. We will verify your request by the email address or order details on file before responding, and we will respond within the timeframes required by law. You may use an authorized agent to submit a request on your behalf.

Cookies

The Site does not set first-party advertising or tracking cookies. Stripe may set cookies on its own checkout pages to process your payment and prevent fraud; those are governed by Stripe’s Privacy Policy.

Security

We use HTTPS, access controls, row-level database security, and reputable processors. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the authorities of a breach where the law requires it.

Children’s privacy

The Site is intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, a notice on the Site.

Contact us