Privacy Policy

Information You Provide Directly

When you create an account, place an order, apply as a maker, or contact us, we may collect:

• Name and email address
• Mailing and billing address
• Phone number (optional)
• Payment information (processed securely by Stripe)
• Profile information for maker accounts
• Messages sent through our contact form

Guest Checkout

You can buy without an account. For a guest order we collect your name, email address, and (for shipped items) the recipient's name, shipping address, and optional phone number. We email you a receipt with a private order-lookup link tied to your order number and email address. Guest order details are kept for as long as the order record itself (see Retention below).

Classes and Workshops

When you book a class, we collect each attendee's name and, optionally, their email address so the maker or gallery running the class knows who is coming and can contact attendees about the session.

Partner Gallery Staff

Owners and staff of partner galleries use their own Salish Sea Crafts accounts. We record which gallery they belong to and the actions they take in the gallery tools (intake, pickups, in-store sales) so stock and payments stay correct.

Records of Agreements

When you accept our Terms of Service at checkout, or a maker or gallery accepts an agreement, we record the document and version, a fingerprint (hash) of the exact text shown, the time, your IP address, and your browser's user agent.

Information Collected Automatically

When you visit the site, we automatically collect certain information, including:

• IP address and general geographic location
• Browser type and version
• Pages visited and time spent on each page
• Referring URLs
• Device type and operating system

We use the information we collect to:

• Process and fulfill orders
• Create and manage your account
• Communicate with you about orders, updates, and support
• Send newsletters and promotional emails (with your consent)
• Improve the site and our services
• Detect and prevent fraudulent transactions
• Comply with legal obligations

We will never sell your personal information to third parties.

Support access. To resolve a support request, a Salish Sea Crafts administrator may view the site as a particular user (for example, to see the maker dashboard or gallery tools exactly as you see them). Every such session is logged with the administrator, the account viewed, and the start and end times. Administrators cannot accept agreements on your behalf during these sessions.

We use cookies and similar tracking technologies to enhance your experience on our site. Cookies are small data files stored on your device. We use:

• Essential cookies Required for the site to function (e.g., shopping cart, authentication session).
• Analytics cookies Help us understand how visitors use the site so we can improve it.
• Preference cookies Remember your settings and choices between visits.

Analytics. We use Google Analytics on salishseacrafts.com. Partner gallery websites that run on our platform have their own separate Google Analytics property, set by that gallery; we do not link visits across the two sites. Partner websites keep their own shopping cart in your browser for that site only. When you continue to checkout, the cart contents are handed over to salishseacrafts.com, where checkout is completed under our Terms.

You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.

We work with trusted third-party services to operate our marketplace. Each service has its own privacy policy.

• Stripe. Handles all payment processing, online and on card readers at partner galleries (Stripe Terminal), calculates sales tax, and pays makers and galleries. We do not store your full card number. Stripe's privacy policy is available at stripe.com/privacy.
• Supabase. Provides our database and authentication infrastructure. Data is stored in secure, encrypted databases. Supabase's privacy policy is available at supabase.com/privacy.
• EasyPost and USPS. We buy shipping labels through EasyPost and ship with USPS. They receive the recipient's name, shipping address and phone number (if given), the parcel's size and weight, and a short description of its contents. The return address printed on a label is the address the package ships from (the maker's studio or the partner gallery), and Salish Sea Crafts appears as the shipper of record.
• Cloudinary. Stores and serves product, profile and gallery images.
• Amazon Web Services (SES). Sends our emails: receipts, shipping and pickup updates, and account messages.
• Slack. Our internal team alerts (new orders, shipping problems) include order numbers and customer names. Only Salish Sea Crafts staff see them.
• Google Analytics. Measures site usage (see Cookies above).

Makers and Partner Galleries

• The maker or partner gallery that packs and ships your order receives your name, the recipient's name and shipping address, and the items ordered, so they can fulfill it.
• For a pickup or an in-store purchase at a partner gallery, the gallery receives your name and the items in your order so its staff can hand them over.
• For a class, the maker or gallery running it receives the attendee names and any attendee email addresses you provide.

We implement industry-standard security measures to protect your personal information, including:

• SSL/TLS encryption for all data transmitted to and from the site
• Encrypted storage for sensitive data
• Access controls limiting who can view personal data
• Regular security reviews and updates

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at hello@salishseacrafts.com.

We keep personal information only as long as we need it. Records we must keep for tax and accounting are kept for the periods below even after you close your account; short-lived records are deleted automatically by scheduled jobs.

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Opt out of marketing communications at any time
• Data portability: request a copy of your data in a common format

To exercise any of these rights, email us at hello@salishseacrafts.com. We will respond within 30 days.