Privacy

1. Who We Are; Scope

This Privacy Policy explains how Island Global Co, a Delaware company ("we," "us"), collects, uses, discloses and protects personal information in connection with NoHo Gallery and noho.gallery (the "Service"). By using the Service you agree to this Policy and to our Terms of Use. If you do not agree, do not use the Service. The Service is intended for adults and is not directed to anyone under 18.

2. Information We Collect

Depending on how you use the Service, we may collect:

• Information you give us: name, email address, phone number, account credentials, billing details, messages, prompts, questions, files, photos, survey answers, support requests and any other content you submit. Payment card data is collected by our payment processors, not stored by us.
• Information collected automatically: IP address, device and browser identifiers, operating system, language, referring pages, pages and features used, timestamps, approximate location derived from IP, crash and performance data, and interaction data, using cookies, pixels, SDKs, server logs and similar technologies.
• Information from third parties: sign-in providers (such as Apple or Google), payment processors, affiliate networks, data vendors, public records and sources, and analytics and security providers.
• Inferences and AI-generated data: classifications, summaries and outputs created from your inputs.

Do not give us sensitive information (such as Social Security, government ID or financial account numbers, health information, or privileged materials) unless the Service specifically asks for it. If you do, you consent to our processing it as described here.

3. How We Use Information

We use personal information to: provide, operate, maintain and secure the Service; create and manage accounts; process payments and orders; generate outputs and personalize results; communicate with you, including service messages and, where permitted, marketing; analyze and improve the Service; detect, investigate and prevent fraud, abuse, security incidents and illegal activity; enforce our Terms and protect our rights, users and the public; comply with law and legal process; and for any other purpose you consent to. We may create aggregated or de-identified data, which we may use and disclose for any purpose.

4. How We Disclose Information

We disclose information to: service providers and processors that act for us (such as cloud hosting and infrastructure, AI model providers, email and SMS delivery, payment and banking, analytics, customer support and security vendors); affiliates; advertising and affiliate partners (limited identifiers and click data); professional advisers; authorities, courts and counterparties where we believe disclosure is required or appropriate to comply with law or protect rights, safety or property; in connection with a merger, financing, acquisition, bankruptcy or sale of assets; and with your consent or at your direction. Content you submit to AI features is transmitted to our third-party AI providers to produce outputs; those providers process it under their own terms and our agreements with them.

5. No Sale of Personal Information; Cookies and Advertising

We do not sell personal information for money. Some cookies, affiliate links and advertising or analytics tools may disclose identifiers or browsing activity to third parties, which certain state laws call "sharing" or "targeted advertising." You may opt out by emailing us, by using your browser's cookie controls, or by enabling Global Privacy Control, which we honor where required. We do not respond to "Do Not Track" signals except as required by law. Blocking cookies may break parts of the Service.

6. Artificial Intelligence and Training

Prompts and inputs are processed by third-party AI providers. We do not authorize providers to train their public models on your inputs where our agreement or settings allow us to prevent it, but we cannot guarantee a provider's practices, and we may use inputs and outputs to operate, secure, evaluate and improve our own Service. Do not submit information you are not comfortable having processed this way.

7. Retention

We keep personal information for as long as needed to provide the Service and for legitimate business, legal, tax, accounting, dispute-resolution, security and backup purposes, then delete or de-identify it according to our schedules. Backups and logs may persist for a period after deletion. We may retain information as required to comply with law or enforce our rights.

8. Security

We use administrative, technical and physical safeguards that we consider reasonable, but no method of transmission or storage is completely secure, and we cannot and do not guarantee security. You use the Service and transmit information at your own risk. You are responsible for keeping your credentials confidential. To the fullest extent permitted by law, we are not liable for unauthorized access, loss or disclosure that results from circumstances outside our reasonable control.

9. Your Privacy Rights

Depending on where you live (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and other U.S. states, and the EEA, UK and Switzerland) you may have the right to: know and access the personal information we hold; correct it; delete it; obtain a portable copy; opt out of targeted advertising, sale or profiling; limit use of sensitive information; withdraw consent; and not be discriminated against for exercising rights. To exercise a right, email info@island.contact with the subject "Privacy Request" and enough detail for us to verify your identity (we may require you to confirm control of your account email and may deny requests we cannot verify). An authorized agent may submit a request with written proof of authority. We may decline requests where permitted by law, including where an exception applies, and will describe any appeal process in our response. EEA/UK users may also complain to their data-protection authority. We respond within the time required by law.

10. Legal Bases (EEA/UK) and International Transfers

Where GDPR or UK GDPR applies, our legal bases are performance of a contract, legitimate interests (operating, securing and improving the Service), compliance with legal obligations, and consent where required. We are based in the United States and process information there and wherever our providers operate. By using the Service you understand your information will be transferred to countries that may not provide the same level of protection as your home country; where required we use approved transfer mechanisms such as Standard Contractual Clauses.

11. Children

The Service is not intended for anyone under 18 and we do not knowingly collect personal information from minors. If you believe a minor has given us information, email us and we will delete it.

12. California Notices

California residents: in the past 12 months we have collected the categories described above (identifiers, commercial information, internet activity, geolocation (approximate), audio or visual content you submit, inferences and, if you provide it, other sensitive information) and disclosed them for business purposes to the categories of recipients described above. We do not knowingly sell or share the personal information of consumers under 16. Under California's Shine the Light law, you may request information about disclosures to third parties for their direct marketing by emailing info@island.contact.

13. Nevada, Other States, and Automated Decisions

Nevada residents may submit an opt-out request regarding sale of covered information by emailing us; we do not sell it as defined by Nevada law. We do not make decisions producing legal or similarly significant effects on you solely by automated means unless we tell you.

14. Payments

Payments are processed by third-party processors and banks that collect and handle your payment details under their own policies. We may receive limited details (such as card brand, last four digits, billing name, transaction amounts and bank reference numbers) for fulfilment, accounting, fraud prevention and tax compliance.

15. NoHo Gallery Specific Data Practices

When you place an acquisition we collect your name, email address, phone number if provided, delivery address, the works you reserve, and your order reference. We use that information to confirm and fulfill your order, match your bank wire to your order, ship your work, communicate about delivery, detect fraud, keep tax and accounting records, and respond to claims. We share delivery details with carriers, insurers and crating or fulfillment partners, and order data with our commerce platform, hosting, email and banking providers. Your bank handles your wire and holds your bank details; we receive confirmation of the incoming wire and limited details such as sender name, amount and reference. We do not collect card numbers. We keep order and payment records for as long as needed for tax, accounting, fraud-prevention and dispute purposes.

16. Third-Party Sites

The Service may link to third-party sites and services. This Policy does not apply to them and we are not responsible for their practices.

17. Changes

We may change this Policy at any time by posting the updated version with a new date. Your continued use after the change means you accept it, to the extent permitted by law.

18. Contact

Island Global Co, a Delaware company. Privacy questions and requests: info@island.contact.