Privacy Policy.

1. Who we are

VisageVibe ("we," "us," "our") is a digital portrait atelier. This policy explains how we handle personal data collected through our website at visagevibe.com and through interactions with our Etsy shop. If you have questions about anything below, email us at info@visagevibe.com.

2. What we collect

We keep data collection to the minimum we need to deliver your portrait and run the business. Specifically:

• Order data from Etsy. When you purchase through our Etsy shop, Etsy shares your first name, order details, and message contents with us so we can fulfil the order. Etsy itself collects and processes your payment information — we never see your card details.
• Photos you send us. To produce your portrait we need the source photo(s) you upload via Etsy messages or email. We treat these as confidential and use them only to fulfil your order.
• Email correspondence. If you email us directly, we retain your message and our replies to respond to your inquiry and to follow up where relevant.
• Site analytics. When you visit our website we may log aggregated, anonymised statistics (page views, rough country, device type) via privacy-focused analytics. We do not track you across sites or build advertising profiles.

3. How we use it

We use the data we collect to:

• Produce and deliver your custom portrait.
• Communicate with you about the order — drafts, revisions, delivery, follow-up.
• Improve our work (spotting patterns in feedback, understanding which styles land best).
• Comply with legal obligations — tax records, accounting, responding to lawful requests.

4. Legal basis (for EU/UK visitors)

Under the GDPR we rely on the following lawful bases: performance of a contract (to deliver the portrait you paid for), legitimate interests (running the business, understanding how the site performs), and consent where we ask for it (for example, if we add an email newsletter in the future).

5. How long we keep it

Order records and source photos are retained for up to two years after delivery, so we can honour revision requests, handle after-sales questions, and meet accounting requirements. After that window they are deleted or securely archived. You can ask us to delete your photos sooner — just email us.

6. Who we share it with

We share personal data only with providers that help us run the business, and only to the extent necessary:

• Etsy — our sales and messaging platform. Etsy's own privacy policy governs what they collect and how.
• Vercel — hosts this website. Vercel processes request logs as part of serving the site.
• Email provider — delivers our outbound email.
• Tax and accounting advisors — where required for compliance.

We do not sell personal data, and we do not share it with advertising networks.

7. Cookies

Our site uses a small number of cookies: a theme preference cookie (so your light/dark mode setting persists between visits) and any analytics cookie set by the analytics provider above. We do not use advertising or tracking cookies. You can clear or block cookies through your browser settings at any time — the site will still work.

8. Your rights

Depending on where you live, you may have some or all of the following rights over the personal data we hold about you:

• Access a copy of the data we hold.
• Ask us to correct inaccurate data.
• Ask us to delete your data.
• Ask us to restrict or object to certain processing.
• Data portability — receive your data in a common format so you can move it elsewhere.
• Withdraw consent where we rely on it, at any time, without affecting past processing.

To exercise any of these rights, email us at info@visagevibe.com. We will respond within the timeframe required by applicable law — typically within 30 days. If you believe we have not handled your data appropriately, you have the right to lodge a complaint with your local data protection authority.

9. California residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect about you, to request its deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information. We do not sell or share your personal information in the way those terms are defined under California law. To exercise your rights, contact us at the email above.

10. Children

Our services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. International transfers

Our providers (Etsy, Vercel, and our email provider) may process data outside your country, including in the United States. Where required, we rely on standard contractual clauses and other approved safeguards to protect your data during those transfers.

12. Security

We take reasonable technical and organisational measures to protect personal data — encryption in transit, access controls, and vendor due diligence. No system is perfectly secure, so we cannot guarantee absolute security, but we treat breaches seriously and will notify affected users and regulators where required.

13. Changes to this policy

We may update this policy from time to time — for example, if we add new features, change providers, or respond to new regulations. When we do, we'll update the "Last updated" date above. Material changes will be announced on this page before they take effect.

14. Contact

Questions about this policy or how we handle your data? info@visagevibe.com — we read everything.