Introduction

Your privacy is important to us. This Privacy Policy explains how Harris La Cross, the operator of lacross.art, collects, uses, shares and protects personal information when you visit this website, contact us or purchase an artwork. For the purposes of applicable data-protection law, Harris La Cross is the controller of the personal information described in this policy.

Information we Collect

Depending on how you interact with the website, we may collect:

• Your name

• Email address

• Telephone number, when provided

• Billing and shipping addresses

• Order and transaction information

• Products, sizes and quantities purchased

• Messages submitted through the Contact page

• Website visits, viewed pages, referral sources and interactions

• Advertising and conversion information

• Technical information, such as IP address, approximate location, browser type, device type and operating system

• Cookie identifiers and information collected through similar technologies, where permitted
  
  

Payment information is entered and processed through Shopify’s secure checkout and its authorized payment providers. We do not directly receive or store your complete payment-card details.

How We Collect Information

We may collect information:

• Directly from you when you contact us, place an order or submit information through the website

• Automatically when you browse or interact with the website

• Through Google Analytics, Meta Pixel and similar technologies, subject to applicable consent requirements

• Through our Shopify-powered cart and checkout

• From service providers involved in processing, producing, fulfilling or delivering your order
  
  

How We Use Your Information

We may use personal information to:

• Process and manage purchases

• Produce, package and deliver physical prints

• Provide order confirmations, fulfilment updates and tracking information

• Respond to questions, requests or customer-service matters

• Handle damaged, defective, incorrect or missing orders

• Prevent fraud, misuse and security incidents

• Operate, maintain and improve the website

• Understand how visitors find and interact with the website

• Measure website traffic, advertising performance and conversions

• Evaluate the effectiveness of marketing campaigns

• Create or measure audiences for advertising where permitted

• Maintain business, tax and transaction records

• Establish, exercise or defend legal claims

• Comply with legal and regulatory obligations
  
  

We do not use personal information for unrelated purposes without an appropriate legal basis.

Legal Bases for Processing

Where the General Data Protection Regulation or similar legislation applies, we process personal information on one or more of the following grounds:

• Performance of a contract: To process, produce, fulfil and deliver your order

• Legal obligation: To maintain required transaction, accounting and tax records or respond to lawful requests

• Legitimate interests: To operate and protect the website, prevent fraud, provide customer support and improve our services

• Consent: For optional analytics, advertising technologies, marketing communications or another specific use where consent is required
  
  

Where processing is based on consent, you may withdraw that consent at any time without affecting processing that lawfully occurred before its withdrawal.

Service Providers and Data Sharing

We may share only the information reasonably necessary with trusted service providers, including:

• Framer, which provides website hosting, forms, website functionality and privacy-focused website analytics

• Shopify, which provides cart, checkout, order-management and payment functionality

• Printify, which coordinates print-on-demand production and fulfilment

• Our selected print provider, which produces and packages the ordered artwork

• Shipping and delivery companies, which require delivery and contact information to transport your order

• Payment providers, which securely process payments made through Shopify checkout

• Google, which provides Google Analytics and related measurement services

• Meta, which provides Meta Pixel, advertising measurement and audience services

• Technical and security providers, where reasonably necessary

• Professional advisers or public authorities, where legally required or reasonably necessary
  
  

These providers may process information under their own privacy policies and contractual data-protection obligations. We may also disclose information where necessary to comply with law, respond to lawful requests, protect our rights or investigate suspected fraud or security concerns.

Cookies, Analytics and Advertising Technologies

The website and its service providers use cookies or similar technologies that are necessary for functions such as website security, cart operation, checkout and remembering user preferences. The website uses the following optional technologies:

• Google Analytics, to understand how visitors find and interact with the website, measure traffic and evaluate website performance

• Meta Pixel, to measure advertising performance, understand actions taken after viewing or interacting with advertisements and help deliver more relevant advertising through Meta platforms
  
  

These services may collect information such as visited pages, interactions, referral sources, device and browser information, approximate location, IP address and identifiers stored through cookies or similar technologies.

Where consent is required by law, optional analytics and advertising technologies will not be used until you have made a choice through the website’s consent controls. You may accept or reject optional technologies and withdraw or change your consent at any time.

Framer’s built-in analytics may also provide general website-activity information without relying on traditional analytics cookies or persistent visitor identifiers.

You may additionally control or delete cookies through your browser settings. Disabling necessary cookies may prevent certain website, cart or checkout functions from operating correctly.

Advertising and Privacy Choices

Information collected through Google Analytics and Meta Pixel may be used to measure advertisements and understand whether visits or purchases resulted from a particular campaign.

We do not sell personal information in exchange for money. However, the use of advertising technologies may be considered “sharing,” “targeted advertising” or a similar activity under certain privacy laws.

Where applicable, you may object to or opt out of such processing through the website’s consent controls or by contacting us.

International Data Transfers

Some service providers involved in hosting, analytics, advertising, checkout, payment processing, production or fulfilment may process information outside Cyprus or the European Economic Area.

Where required, international transfers are protected through recognized legal safeguards, contractual protections or other mechanisms permitted under applicable data-protection law.

Data Retention

Personal information is retained only for as long as reasonably necessary for the purposes described in this policy. Order and transaction records may be retained for the period required by tax, accounting, consumer-protection and other applicable laws. Contact messages and customer-service records are retained only for as long as necessary to respond, resolve an issue or protect legitimate legal interests.

Analytics and advertising information may be retained according to the settings and retention periods applied within Google Analytics, Meta and associated advertising accounts.

When information is no longer required, it will be deleted, anonymized or securely disposed of where reasonably possible.

Data Security

Reasonable technical and organizational measures are used to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.

However, no website, transmission method or electronic storage system can guarantee absolute security.

Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Request access to your personal information

• Request correction of inaccurate or incomplete information

• Request deletion of your information

• Request restriction of certain processing

• Object to processing based on legitimate interests

• Object to or opt out of targeted advertising where applicable

• Request transfer of information you have provided

• Withdraw consent where processing is based on consent

• Opt out of marketing communications

• Lodge a complaint with an appropriate data-protection authority
  
  

These rights may be subject to legal limitations—for example, where information must be retained to comply with tax or accounting obligations. If you are located in Cyprus or another EU or EEA country, you may lodge a complaint with your local supervisory authority. In Cyprus, this is the Office of the Commissioner for Personal Data Protection.

Third-Party Links

The website may contain links to social-media platforms or other external websites. When you follow an external link, that provider may collect and process information according to its own privacy policy.

We are not responsible for the privacy practices or content of independent third-party websites.

Children’s Privacy

This website and its shop are not directed toward children, and we do not knowingly collect personal information directly from children.

If you believe that a child has submitted personal information through the website, please contact us so that the matter can be reviewed.

Contact

If you have questions about this Privacy Policy, wish to exercise a privacy right or have concerns about how your information is handled, please contact us through the Contact page at lacross.art. We may need to request reasonable information to confirm your identity before completing certain privacy requests.

Updates to This Policy

This Privacy Policy may be updated periodically to reflect changes to the website, analytics configuration, advertising practices, service providers or legal requirements. The revised policy will be published on this page with an updated effective date. Where required by law, additional notice or renewed consent will be provided.