Effective Date: December 1, 2025
Last Updated: November 21, 2025
Introduction
Welcome to Keenan Staffieri Studio, operated by Project Infinity LLC. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you visit our website or make a purchase.
Contact Us:
If you have questions about this Privacy Policy, please contact us at:
- Email: hello@keenanstaffieri.com
- Business Name: Project Infinity LLC, doing business as Keenan Staffieri Studio
- Location: California, United States
Quick Summary
In brief:
- We collect information needed to process orders and operate the website.
- We use Stripe (via WooPayments) for payment processing and do not store full credit card numbers.
- We share data only with service providers such as shipping, fulfillment, analytics, and payment processors.
- You can access, correct, delete, or limit certain uses of your data, with additional rights for California and EU residents.
- We use cookies for essential functions and analytics; you can manage these preferences through our cookie banner or your browser settings.
1. Information We Collect
Personal Information You Provide
When you visit our website, create an account, or make a purchase, we collect:
Account & Contact Information:
- Name (first and last)
- Email address
- Phone number (optional)
- Username and password (encrypted)
Billing & Shipping Information:
- Billing address
- Shipping address
- Payment information (processed securely by Stripe)
Order Information:
- Products purchased
- Order date and time
- Order total and payment status
- Shipping preferences
Communication:
- Messages sent through our contact form
- Email correspondence
- Customer service inquiries
Information Automatically Collected
When you visit our website, we automatically collect:
Device & Browser Information:
- IP address (anonymized for analytics)
- Browser type and version
- Device type (mobile, desktop, tablet)
- Operating system
- Screen resolution
Usage Information:
- Pages visited
- Time spent on pages
- Referring website
- Links clicked
- Search terms used on our site
- Session duration and frequency
Location Information:
- Geographic location (city/state level, derived from IP address)
- Time zone
Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Keep you logged in
- Remember your cart contents
- Understand how you use our website
- Improve website performance
- Comply with legal requirements
For detailed cookie information, see our Cookie Policy.
2. How We Use Your Information
We use your information for the following purposes:
Order Processing & Fulfillment
- Process and ship your orders
- Send order confirmations and shipping notifications
- Handle returns, exchanges, and customer service inquiries
- Maintain order history for your account
Payment Processing
- Process payments securely through Stripe
- Prevent fraud and unauthorized transactions
- Issue refunds when applicable
Communication
- Respond to your inquiries and support requests
- Send important updates about your orders
- Notify you of changes to our policies or services
Website Improvement
- Analyze website traffic and user behavior
- Improve website design and functionality
- Optimize product offerings
- Troubleshoot technical issues
Legal Compliance
- Comply with legal obligations (tax reporting, recordkeeping)
- Enforce our Terms and Conditions
- Protect our rights and prevent fraud
- Respond to legal requests from authorities
Marketing (With Your Consent)
- Send promotional emails about new artwork and products
- Share news and updates about the studio
- Offer exclusive discounts or early access
Note: You can opt out of marketing emails at any time using the “unsubscribe” link.
3. How We Share Your Information
We DO NOT sell your personal information to third parties. We share your information only with trusted partners who help us operate our business:
Service Providers
Payment Processing: Stripe (via WooPayments)
- Purpose: Process credit card payments securely
- Data Shared: Name, billing address, payment information
- Privacy Policy: https://stripe.com/privacy
- Why Necessary: Required to accept credit card payments
Order Fulfillment: Printify
- Purpose: Produce and ship print-on-demand products (fine art prints and merchandise)
- Data Shared: Name, shipping address, email, order details
- Privacy Policy: https://printify.com/privacy-policy/
- Why Necessary: Third-party fulfillment for POD products
Shipping Carriers: USPS, UPS
- Purpose: Deliver original paintings and packages
- Data Shared: Name, shipping address, phone number
- Why Necessary: Required for product delivery
Analytics: Google Analytics
- Purpose: Understand website traffic and user behavior
- Data Shared: IP address (anonymized), browsing behavior, device information
- Privacy Policy: https://policies.google.com/privacy
- Why Necessary: Helps us improve website experience
- IMPORTANT: Google Analytics shares data with Google for advertising purposes. California residents can opt out—see “Your Rights” section below.
Cookie Consent: CookieYes
- Purpose: Manage cookie consent preferences
- Data Shared: Cookie preferences, IP address, browser information
- Privacy Policy: https://www.cookieyes.com/privacy-policy/
- Why Necessary: Legal compliance for cookie consent
Digital Wallets: Apple Pay, Google Pay
- Purpose: Process express checkout payments
- Data Shared: Billing address, device information, tokenized payment data
- Privacy Policies:
- Apple: https://www.apple.com/legal/privacy/
- Google: https://policies.google.com/privacy
- Why Necessary: Required to offer digital wallet payment options
Legal Obligations
We may disclose your information if required by law:
- In response to subpoenas, court orders, or legal processes
- To protect our rights, property, or safety
- To enforce our Terms and Conditions
- To comply with tax and financial regulations
- To prevent fraud or illegal activity
Business Transfers
If we are acquired, merge with another company, or sell assets, your information may be transferred as part of that transaction. You will be notified via email or website notice.
4. Data Security
We take data security seriously and implement industry-standard measures:
Technical Safeguards
- SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted
- PCI-DSS Compliance: Payment processing meets Payment Card Industry Data Security Standards (handled by Stripe)
- Secure Hosting: Website hosted on secure servers with regular security updates
- Access Controls: Limited employee access to personal information
- Password Protection: Passwords are encrypted using bcrypt hashing
What We Don’t Store
- Full credit card numbers: Stripe handles payment processing; we never see or store full card numbers
- CVV codes: Not stored anywhere in our system
Limitations
While we use reasonable security measures, no system is 100% secure. We cannot guarantee absolute security of data transmitted over the internet. You are responsible for maintaining the confidentiality of your account password.
5. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.
Order Information: Retained for 7 years (tax and legal compliance)
Account Information: Retained until you request deletion or close your account
Marketing Communications: Retained until you unsubscribe
Analytics Data: Generally retained according to Google Analytics’ default settings (currently about 26 months), after which it is aggregated or anonymized by our analytics provider
Customer Service Records: Retained for 3 years
After the retention period expires, we securely delete or anonymize your information.
6. Your Rights and Choices
Rights for All Users
Access Your Information:
You can view and update your account information by logging into your account.
Correct Inaccurate Information:
Contact us at hello@keenanstaffieri.com to correct errors in your personal information.
Delete Your Account:
Request account deletion by emailing hello@keenanstaffieri.com. Note: We may retain certain information for legal compliance (e.g., tax records).
Opt Out of Marketing:
Click “unsubscribe” in any marketing email, or contact us at hello@keenanstaffieri.com.
Manage Cookies:
Adjust cookie preferences in your browser settings or through our cookie banner. See our Cookie Policy for details.
Additional Rights for California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
Right to Know:
Request details about the personal information we collect, use, and share about you in the past 12 months.
Right to Delete:
Request deletion of your personal information (subject to legal exceptions).
Right to Opt-Out of “Sale” or “Sharing”:
We do not sell personal information in the traditional sense, but Google Analytics shares data for advertising purposes (cross-context behavioral advertising). You can opt out:
- Visit our Do Not Sell or Share My Info page
- Use the CookieYes cookie banner to disable analytics cookies
- Enable Global Privacy Control (GPC) in your browser
Right to Correct:
Request correction of inaccurate personal information.
Right to Limit Use of Sensitive Personal Information:
We do not use or disclose sensitive personal information beyond what is necessary to provide our services.
Right to Non-Discrimination:
We will not discriminate against you for exercising your privacy rights (e.g., we won’t charge different prices or provide different service levels).
How to Exercise Your Rights:
Email us at hello@keenanstaffieri.com with the subject line “California Privacy Request.” We will respond within 45 days.
Verification:
To protect your privacy, we may ask you to verify your identity before processing requests (e.g., confirming email address or order details).
Authorized Agents:
You may designate an authorized agent to make requests on your behalf. The agent must provide written authorization.
Additional Rights for European Union Users (GDPR)
If you are located in the European Union or European Economic Area, you have rights under the General Data Protection Regulation (GDPR). Project Infinity LLC, doing business as Keenan Staffieri Studio, acts as the data controller for information collected through this website.
Legal Basis for Processing:
We process your personal information based on:
- Contract: To fulfill orders and provide services
- Consent: For marketing communications and analytics cookies
- Legitimate Interest: To improve our website and prevent fraud
- Legal Obligation: To comply with tax and financial regulations
Right to Access:
Request a copy of your personal information.
Right to Rectification:
Request correction of inaccurate information.
Right to Erasure (“Right to be Forgotten”):
Request deletion of your personal information.
Right to Restrict Processing:
Request limitation on how we process your information.
Right to Data Portability:
Request your data in a portable format (e.g., CSV or JSON).
Right to Object:
Object to processing based on legitimate interest or for marketing purposes.
Right to Withdraw Consent:
Withdraw consent for processing at any time (e.g., unsubscribe from marketing emails).
Right to Lodge a Complaint:
File a complaint with your local data protection authority.
How to Exercise Your Rights:
Email us at hello@keenanstaffieri.com with the subject line “GDPR Request.” We will respond within 30 days.
Data Transfers:
Your information may be transferred to and processed in the United States. We rely on standard contractual clauses approved by the European Commission.
7. Categories of Personal Information (CCPA Disclosure)
In the past 12 months, we have collected the following categories of personal information:
| Category | Examples | Collected? | Shared? |
|---|---|---|---|
| Identifiers | Name, email, address, IP address, account username | Yes | Yes (Stripe, Printify, shipping carriers) |
| Commercial Information | Order history, products purchased, payment status | Yes | Yes (Stripe, Printify for fulfillment) |
| Financial Information | Payment card type, last 4 digits (processed by Stripe) | Yes | Yes (Stripe for payment processing) |
| Internet Activity | Browsing behavior, pages visited, clicks, search terms | Yes | Yes (Google Analytics) |
| Geolocation Data | City/state derived from IP address | Yes | Yes (Google Analytics) |
| Inferences | Shopping preferences, product interests | Yes | No |
| Sensitive Personal Information | Account login credentials (encrypted) | Yes | No (stored encrypted, not shared) |
Sources of Information
- Directly from you: Account creation, order checkout, contact forms
- Automatically collected: Cookies, analytics, browsing behavior
- Third parties: Payment processors (transaction confirmation)
Business/Commercial Purposes
- Order processing and fulfillment
- Payment processing
- Customer service and support
- Website analytics and improvement
- Fraud prevention and security
- Legal compliance
“Sale” or “Sharing” of Personal Information
We do NOT sell personal information for money. However, under California law, sharing data with Google Analytics for advertising purposes may be considered “sharing” for cross-context behavioral advertising.
Categories “Shared” in Past 12 Months:
- Internet activity (browsing behavior, pages visited) → Google Analytics
- Identifiers (IP address, device info) → Google Analytics
Opt-Out: Visit Do Not Sell or Share My Info.
8. Third-Party Links
Our website may contain links to third-party websites (e.g., social media, payment processors). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing personal information.
External Links:
- Instagram: https://help.instagram.com/privacy
- Stripe: https://stripe.com/privacy
- Printify: https://printify.com/privacy-policy/
9. Children’s Privacy
Our website is not intended for children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a minor, please contact us immediately at hello@keenanstaffieri.com, and we will delete it.
Age Requirement: You must be 18 years or older to make purchases.
10. International Users
Our business is based in the United States, and our website is hosted on U.S. servers. If you access our website from outside the United States, your information will be transferred to, stored, and processed in the United States.
Data Protection Standards:
U.S. privacy laws may differ from those in your country. By using our website, you consent to the transfer of your information to the United States.
European Union Users:
We rely on standard contractual clauses approved by the European Commission for data transfers.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.
How We Notify You:
When we make changes, we update the “Last Updated” date at the top of this page and may also provide additional notice (such as an email or on-site notice) where appropriate.
Your Responsibility:
Please review this Privacy Policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.
12. Contact Information
For questions, concerns, or requests regarding this Privacy Policy or your personal information:
Email: hello@keenanstaffieri.com
Business Name: Project Infinity LLC, doing business as Keenan Staffieri Studio
Location: California, United States
Response Time:
- General inquiries: We generally respond within 5 business days
- California Privacy Requests: Within 45 days
- GDPR Requests: Within 30 days
California-Specific Disclosures
California Consumer Privacy Act (CCPA) Compliance
California residents have rights under CCPA/CPRA, including the rights to know, delete, correct, and limit certain uses of personal information, to opt out of “sale” or “sharing,” and to be free from discrimination for exercising these rights.
To exercise these rights, email hello@keenanstaffieri.com with “California Privacy Request” in the subject line or use the Do Not Sell or Share My Info page. We will verify your identity before responding and generally reply within 45 days.
Shine the Light (Cal. Civ. Code § 1798.83): California residents may request information about data shared with third parties for their direct marketing purposes. To submit a request, email hello@keenanstaffieri.com with “Shine the Light Request” in the subject line.
Global Privacy Control (GPC)
We honor Global Privacy Control (GPC) signals sent by supported browsers and extensions. When GPC is enabled, we treat it as an opt-out request for “sale” or “sharing” of personal information under California law.
For more detail about our data practices and your rights, see the “Your Rights and Choices” section above and our Do Not Sell or Share My Info page.