Privacy Policy
This Privacy Policy explains how The Bubble Art ("we," "us," or "our"), operator of The Bubble Art (the "Services"), collects, uses, shares, and protects your personal information. By using the Services, you agree to this Policy. If you do not agree, please do not use the Services.
Contents
1. Information we collect
| Category | Examples |
|---|---|
| Account data | Name, email address, password (stored hashed), role (buyer/artist), and profile details you provide. |
| Transaction data | Orders, bids, purchases, sales, payout details, and order history. Full card numbers are handled by our payment processor, not stored by us. |
| Content you submit | Listings, artwork files, descriptions, messages, reviews, and support requests. |
| Usage & device data | IP address, browser/device type, pages viewed, referring URLs, and interactions, collected via cookies and similar technologies. |
| Communications | Emails and messages you send us, and your preferences. |
We collect this information directly from you, automatically as you use the Services, and from service providers such as payment processors and analytics tools.
2. How we use information
- To create and manage your account and provide the Services;
- To process transactions, bids, payments, and payouts, and deliver Artworks;
- To communicate with you about your account, orders, security, and updates;
- To personalize, maintain, secure, and improve the Services;
- To prevent fraud, enforce our Terms, and comply with legal obligations;
- With your consent where required, to send marketing about new seasons, drops, and auctions (you can opt out anytime).
3. Legal bases (EEA/UK users)
Where the GDPR or UK GDPR applies, we process personal data on the bases of: performance of a contract (to provide the Services), our legitimate interests (to secure and improve the Services and prevent fraud), your consent (for certain cookies and marketing), and compliance with legal obligations.
4. Cookies & tracking
We use cookies and similar technologies for essential functionality (such as sign-in sessions and cart contents), preferences, and limited analytics. You can manage non-essential cookies through our cookie banner and your browser settings. For details, see our Cookie Policy.
5. How we share information
We do not sell your personal information for money. We share information only as needed:
- Service providers — payment processors (e.g., Stripe), hosting, analytics, email, and certificate/authentication providers, who process data on our behalf under confidentiality obligations;
- Between buyers and sellers — limited information necessary to complete and fulfill a transaction;
- Legal & safety — to comply with law, respond to lawful requests, enforce our Terms, or protect rights, safety, and property;
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
6. Payments
Payments are processed by third-party processors such as Stripe. When you pay, your card details are collected and processed directly by the processor under its own privacy policy and PCI-DSS standards. We receive limited information (such as confirmation, amount, and the last digits/brand of a card) to manage orders, payouts, refunds, and fraud prevention. We do not store full card numbers.
7. Data retention
We retain personal information for as long as your account is active and as needed to provide the Services, then for as long as necessary to comply with legal, tax, accounting, dispute-resolution, and fraud-prevention obligations. When no longer needed, we delete or anonymize it.
8. Security
We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential.
9. Your rights & choices
Depending on your location, you may have the right to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing or withdraw consent. You can update much of your information in your account settings, unsubscribe from marketing via the link in our emails, and contact us to exercise other rights. We will respond as required by applicable law and may need to verify your identity.
10. U.S. state privacy rights
Residents of certain U.S. states (such as California under the CCPA/CPRA) may have rights to know, access, delete, and correct personal information, and to opt out of "sale" or "sharing" of personal information and certain targeted advertising. We do not sell personal information for money. To exercise these rights, contact us at info@thebubbleart.com; we will not discriminate against you for exercising them.
11. International transfers
We operate in the United States and may process and store information in the U.S. and other countries. Where we transfer personal data internationally, we use appropriate safeguards as required by applicable law.
12. Children's privacy
The Services are not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
13. Third-party links
The Services may link to third-party websites or services that we do not control. Their privacy practices are governed by their own policies, and we are not responsible for them.
14. Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance.
15. Contact
Questions or requests about privacy? Contact:
The Bubble Art
Email: info@thebubbleart.com