Privacy Policy

When you buy a piece. Your name, the certificate name you ask us to print, email address, mobile number, billing address, the level and seat you chose, how you heard about the project, and whether you gave publishing permission. We do not collect a delivery address, because nothing is delivered — you collect your piece in person.

When you enquire. Anything you enter on our interest and partnership forms — typically name, email, phone, the level you are considering, and any notes you add.

When you join the list. Your email address.

Automatically. Basic request information such as IP address and browser type, kept by our hosting provider for security and reliability, plus any campaign tags in the link you followed.

We never receive your card details. Payment is entered on Stripe’s own checkout page. Card numbers never reach our servers and we cannot see them. We receive only a confirmation that payment succeeded, the amount, and the last four digits.

To take payment and prevent overselling a limited edition; to make, number and register your piece; to contact you about painting, signing, photography and events; to maintain the permanent provenance record that gives each numbered piece its history; and — only if you check the box — to publish your photo, first name, city, piece number and pledge.

Publishing permission is optional and off by default. We store the exact wording you agreed to along with the date and time, so there is never any doubt about what was consented to. You can withdraw it at any time by emailing us.

We use a small number of service providers, each of which only receives what it needs to do its job. We do not sell your personal information, and we do not share it for advertising.

• Stripe — payment processing, tax calculation, receipts and invoices.
• Supabase — the database holding orders, enquiries and the piece registry.
• Netlify — website hosting and delivery.
• Email and SMS providers — used to send order confirmations and project updates.

We may also disclose information where the law requires it, or to establish or defend a legal claim.

• Unfinished checkouts — if you start a purchase and do not complete it, the details are deleted after 90 days.
• Enquiry and interest forms — kept for 24 months from your last contact with us, then deleted.
• Completed orders and financial records — kept for 7 years, which is the standard retention period for US tax and accounting records.
• The piece registry — because each of the 250 pieces is a numbered original whose value rests on an unbroken record of who made it, the registry entry (piece number, certificate name, and the date it was claimed) is kept permanently as part of the artwork’s provenance. If you ask us to, we will remove your name and any photos from public display while keeping the minimum record needed to prove the piece’s history.
• Mailing list — until you unsubscribe.

Email larsenteam@gmail.com and we will, at your request: tell you what we hold about you, correct anything wrong, delete what we are not legally required to keep, stop publishing your photo and details, or unsubscribe you.

If you are a California resident, the CCPA gives you the rights to know, delete, correct, and opt out of sale or sharing of your personal information. We do not sell or share personal information as those terms are defined by the CCPA, and we will not treat you differently for exercising any of these rights. We aim to respond to every request within 45 days.

To stop text messages, reply STOP to any message. To stop emails, use the unsubscribe link at the bottom of any email.

Traffic to this site is encrypted. Order records sit behind row-level security and are reachable only by our server, never from your browser. Card data is handled entirely by Stripe, a PCI Level 1 certified provider, and never touches our systems. No system is perfectly secure, but we limit what we collect and who can reach it.

This site is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has given us information, email us and we will delete it.

If this policy changes we will update the date at the top of this page. Material changes affecting how we use information already collected will be notified by email where we have your address.

Catalyst One Ventures LLC — larsenteam@gmail.com