Privacy Policy for SH Creative
Last updated: 1.29.2026

1. Introduction

This Privacy Policy explains how SH Creative (“SH Creative”, “we”, “us”, or “our”) collects, uses, discloses, and protects your personal information when you visit or use www.shcreative.co (the “Site”) and when you interact with us in connection with our services.

We are committed to handling your personal information in accordance with applicable data protection laws, including:

• Relevant United States federal and state laws (including, where applicable, the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”)), and

• The European Union General Data Protection Regulation (GDPR), the UK GDPR, and similar laws in the European Economic Area (“EEA”).

By using our Site or our services, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

Business Name: SH Creative
Website: https://www.shcreative.co
Location: Florida, United States
Business Activity:
SH Creative provides award-winning international art gallery expertise, including, but not limited to, consulting and support services for:

• Artists (from emerging to established professionals)

• Gallery owners

• Collectors

• Art consultants

Our offerings include, among other things:

• Consultations and advisory services related to the international art market

• Guidance on managing and growing art businesses and careers

• Products such as digital templates for managing your art business and consultation services sold via the Site’s e-commerce functionality.

Contact for Privacy Matters:
Email: summer@shcreative.co

For the purposes of the GDPR and similar laws, SH Creative is the data controller of personal data collected through the Site and in connection with our services.

3. Scope of This Privacy Policy

This Privacy Policy applies to personal information we collect:

• When you visit or use our website (www.shcreative.co)

• When you contact us (e.g., via the Site contact form, email, or other channels)

• When you purchase products (such as templates) or book services (such as consultations) through the Site

• When you interact with us as a client, prospective client, business partner, or collaborator

This Policy does not apply to:

• Third-party websites or services you may access through links on our Site

• Data processed by third-party platforms (such as payment providers) beyond what is shared with us in the normal course of providing our services

• Personal data of employees or contractors in the context of employment/engagement (which may be governed by separate policies)

4. Information We Collect

We collect information that you provide directly, information collected automatically via our Site, and information from third parties.

4.1 Information You Provide Directly

When you:

• Use the contact form on the Site (“LET US ASSIST YOU TODAY”)

• Book or purchase services/products (e.g., “The Consultation”, “Templates for Managing Your Business”)

• Communicate with us by email or other channels

• Engage us for consulting or other services

we may collect:

• Contact details

  • Name

  • Email address

  • Phone number (if provided)

  • Company, gallery, or business name (if provided)

• Inquiry and communication details

  • Subject and content of your messages

  • Details about your needs or questions (e.g., your role as artist, gallery owner, or consultant; project details; goals; timelines)

• Account/order information (via e-commerce functionality)

  • Products or services purchased (e.g., templates, consultations)

  • Order history and transaction-related information

  • Billing details (such as billing address and contact information)

• Payment-related information

  • Payment is typically processed by third-party payment providers integrated through our website platform (for example, Wix and its supported payment processors).

  • We do not receive or store your full payment card numbers. We may receive limited payment-confirmation data such as transaction IDs, payment status, and partial card information (e.g., last four digits), to verify and manage your orders.

4.2 Information Collected Automatically

When you visit or interact with our Site, certain information may be collected automatically, including through your browser and cookies/trackers used by our site platform (Wix) and integrated tools.

This may include:

• Technical and usage information

  • IP address

  • Browser type and version

  • Device type and operating system

  • Referring URLs and exit pages

  • Time and date of visits, pages viewed, time spent on pages

  • General geographic location (e.g., country or region, typically inferred from IP address)

• Cookies and similar technologies

  • Essential cookies needed to operate and secure the Site

  • Functional cookies (for things like remembering preferences)

  • Performance/analytics cookies (e.g., for aggregated usage statistics)

  • [If enabled in your Wix configuration] Marketing or advertising cookies (e.g., for retargeting or ad measurement)

The exact cookies and scripts used may vary over time depending on your Wix settings and any third-party apps or integrations you enable.

4.3 Information from Third Parties

We may receive information about you from:

• Website platform and apps (e.g., Wix and its integrations)

  • For example, analytics dashboards, form submissions, or payment status updates.

• Payment processors

  • Information confirming a payment, such as transaction date, amount, and limited card/bank details as allowed.

• Marketing and analytics tools

  • Aggregated or pseudonymized analytics data such as page views, traffic sources, and conversion statistics.

• Publicly available sources

  • For example, your professional or gallery details from a public website or social media if you share or link these in the course of working with us.

We only receive data from third parties where it is necessary to provide our services, operate the Site, or comply with legal obligations.

5. How We Use Your Information and Legal Bases

We process personal information only when we have a lawful basis for doing so.

Under GDPR and similar laws, we rely on the following legal bases: performance of a contract, legitimate interests, consent, and legal obligations.

We use your information for:

1. Providing and managing our services and products

   • Processing bookings for consultations and other services

   • Fulfilling orders for templates and other products

   • Communicating with you about your inquiries, orders, or projects

   • Managing our relationship with you as a client, prospective client, or partner

   • Legal bases (EU/UK): performance of a contract or steps prior to entering into a contract; legitimate interests (to run and grow our business)

2. Operating and improving our Site

   • Operating the Site and ensuring it functions correctly

   • Monitoring and analyzing usage for performance, usability, and security

   • Developing and improving our offerings, layout, and content

   • Legal bases: legitimate interests (to maintain and improve our services); consent where required for analytics cookies

3. Communications and marketing

   • Responding to your messages and support requests

   • Sending you information you request (e.g., about services or pricing)

   • Sending occasional updates, news, or promotional content about SH Creative that may interest you (where permitted by law)

   • Legal bases: legitimate interests (permitted direct/B2B marketing); consent where required (particularly in the EEA/UK for email marketing)

4. Security, fraud prevention, and legal compliance

   • Protecting the Site, our systems, and our users from fraud, abuse, or security threats

   • Detecting, investigating, and preventing potential violations of our terms or law

   • Complying with legal obligations, such as tax and accounting rules and responding to lawful requests from authorities

   • Legal bases: legitimate interests (to safeguard our business and users); legal obligation

5. Business operations and transactions

   • Managing internal business operations (e.g., accounting, record-keeping, planning)

   • In the event of a reorganization, merger, or sale of some or all of our assets, your information may be transferred as part of that transaction, subject to appropriate safeguards.

   • Legal bases: legitimate interests (to manage and develop our business)

Where we rely on consent (for example, certain marketing communications or non-essential cookies in the EEA/UK), you may withdraw your consent at any time as described in Section 10.

6. How We Share Your Information

We do not sell personal information for money. We share personal information only as reasonably necessary for the purposes described in this Policy, under appropriate safeguards:

1. Service providers and processors We use third-party service providers to help run our Site and business, including (for example):

   • Website hosting and platform services (e.g., Wix)

   • Payment processing and e-commerce functionality

   • Email and communication tools

   • Analytics and performance monitoring tools

   • Cloud storage and backup providers

   These providers are allowed to use your information only to perform services on our behalf and are contractually required (where applicable) to protect it appropriately.

2. Professional advisors

   • Lawyers, accountants, and other professional advisors who are subject to confidentiality obligations and need access to certain information to provide services to us.

3. Business partners and collaborators

   • In some cases, we may work with trusted subcontractors or collaborators to deliver art-related consulting or services. They may receive limited information about you strictly as required to perform their role.

4. Legal and regulatory authorities

   • If we are required to do so by law, subpoena, court order, or other legal process.

   • When reasonably necessary to protect our rights, property, safety, or the rights, property, and safety of others.

5. Corporate transactions

   • If we are involved in a merger, acquisition, restructuring, or sale of assets, your personal information may be transferred as part of that transaction, subject to confidentiality and compliance with applicable laws.

We do not allow third parties to use your information for their own independent marketing purposes without your consent where required.

7. International Data Transfers

We are based in the United States (Florida), and the Site is hosted and operated using infrastructure that may be located in the U.S. and other countries.

If you are located in the EEA, UK, or another region with data transfer restrictions, your personal information may be transferred to countries (including the United States) that may not provide the same level of data protection as your home jurisdiction.

Where required by applicable law, we implement appropriate safeguards for such transfers, which may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission or UK authorities; or

• Other legally recognized transfer mechanisms.

You can contact us at summer@shcreative.co for more information about the safeguards applied to international transfers of your personal information.

8. Cookies and Similar Technologies

Our Site is built and hosted on a website platform (such as Wix) that uses cookies and similar technologies to operate effectively and to provide analytics and other functionality.

8.1 Types of Cookies We May Use

Depending on your settings and your browser, the following types of cookies may be used:

• Strictly necessary cookies

  • Essential for the operation of the Site, such as security cookies, session cookies, and cookies that remember actions while you navigate between pages or retain items in a shopping cart.

• Functional cookies

  • Enhance your experience by remembering your preferences (for example, language settings or form entries).

• Analytics/performance cookies

  • Collect information about how visitors use our Site (for example, pages visited, time spent, clicks).

  • This helps us analyze usage and improve content and performance.

  • In some cases, these may be set by analytics tools integrated through the Site platform.

• Marketing/advertising cookies (where enabled)

  • Used to deliver or measure advertisements and promotions, including interest-based advertising or retargeting, possibly via integrated tools or third-party services.

8.2 Managing Cookies

On your first visit (and periodically), you may see a cookie banner that allows you to manage or consent to certain categories of cookies, where required by law.

In addition, you can:

• Adjust your browser settings to block, delete, or limit cookies.

• Use privacy tools or browser extensions to control tracking technologies.

Please note that if you disable certain cookies, parts of the Site may not function properly.

If you would like more detailed information on specific cookies used (names, purposes, durations), you can contact us at summer@shcreative.co, and we will provide the most up-to-date information we have about cookies enabled on our Site.

9. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including:

• Providing services and products

• Complying with legal, tax, and accounting obligations

• Resolving disputes and enforcing our agreements

In general:

• Contact form and inquiry data: kept for as long as needed to respond and for a reasonable follow-up period (for example, up to 2 years), unless a longer period is required for legal reasons or to establish, exercise, or defend legal claims.

• Client and project data: retained for the duration of the engagement and then for the period required under applicable law, such as tax or contract limitation periods (often 3–7 years, depending on jurisdiction).

• Order and billing records: retained in accordance with legal and tax requirements (which may require keeping certain data for a number of years).

• Marketing data: retained until you opt out of marketing communications or withdraw consent, or after a period of inactivity, unless a longer retention is required or allowed by law.

• Analytics and technical logs: retained for a period sufficient to analyze and improve our Site and ensure security (for example, up to 26 months or as configured in analytics tools).

When personal information is no longer needed, we will delete it or anonymize it. If immediate deletion is not possible (for example, data stored in backup archives), we will securely store the information and isolate it from further processing until deletion is feasible.

10. Your Privacy Rights

Your rights may vary depending on where you live and which laws apply. We respect and will honor your rights to the extent required by applicable law.

10.1 Rights Under 16

If you are in the EEA or UK, you generally have the following rights (subject to legal conditions and exceptions):

1. Right of access

   • Obtain confirmation that we process your personal data and receive a copy, along with information about how we use it.

2. Right to rectification

   • Request correction of inaccurate or incomplete personal data.

3. Right to erasure (“right to be forgotten”)

   • Request deletion of your personal data in certain circumstances (for example, if it is no longer necessary, you withdraw consent, or you successfully object to processing).

4. Right to restrict processing

   • Request that we limit the processing of your personal data in specific situations (for example, while we verify its accuracy or consider an objection).

5. Right to data portability

   • Receive certain personal data in a structured, commonly used, machine-readable format and/or have it transmitted to another controller, where technically feasible.

6. Right to object

   • Object to processing of your personal data based on our legitimate interests, including profiling on that basis.

   • Object at any time to the use of your personal data for direct marketing (including profiling related to direct marketing); if you do, we will stop processing for that purpose.

7. Right to withdraw consent

   • Where we rely on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.

8. Right not to be subject to automated decision-making

   • We do not use your data for automated decisions with legal or similarly significant effects.

To exercise your rights, please contact us at summer@shcreative.co. We may need to verify your identity before responding to your request, to protect your privacy and security.

You also have the right to lodge a complaint with your local data protection authority if you believe our processing violates applicable law.

10.2 Rights Under CCPA/CPRA (California Residents)

If you are a California resident, you may have the following rights regarding your “personal information” as defined in the CCPA/CPRA:

1. Right to know/access

   • Request that we disclose:

     • The categories of personal information collected about you

     • The categories of sources from which it was collected

     • The business or commercial purposes for collecting or (if applicable) selling/sharing personal information

     • The categories of third parties with whom we share personal information

     • The specific pieces of personal information we have collected about you (subject to certain limitations).

2. Right to request deletion

   • Request that we delete personal information we collected from you, subject to exceptions (for example, to comply with legal obligations, detect security incidents, or complete transactions).

3. Right to correct

   • Request correction of inaccurate personal information we maintain about you.

4. Right to opt-out of sale or sharing of personal information

   • We do not sell personal information for monetary consideration and do not knowingly “share” personal information for cross-context behavioral advertising in a way that would trigger the CCPA/CPRA opt-out requirement.

   • If this changes in the future, we will update this Policy and provide you with a clear mechanism (such as a “Do Not Sell or Share My Personal Information” link) to exercise your rights.

5. Right to non-discrimination

   • We will not discriminate against you for exercising your CCPA/CPRA rights. This means we will not deny you goods or services, charge different prices, or provide a different level or quality of services solely because you exercised your rights, except as permitted by law.

To exercise any of these rights, you can contact us at summer@shcreative.co and indicate that you are making a CCPA/CPRA request. We will take steps to verify your identity before responding. You may also authorize an authorized agent to submit requests on your behalf, subject to verification of the agent’s authority and your identity.

11. Security

We use reasonable and appropriate technical and organizational measures to help protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures may include, for example:

• Using secure hosting and reputable service providers

• Restricting access to personal information to those who need it for legitimate business purposes

• Using encryption and other security controls where appropriate

• Monitoring systems for vulnerabilities and implementing protective safeguards

However, no system or transmission over the internet is completely secure. We cannot guarantee absolute security of your data. If you believe your interaction with us is no longer secure, please contact us immediately at summer@shcreative.co.

12. Children’s Privacy

Our Site and services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16.

If you are a parent or guardian and believe that a child under 16 has provided us with personal information without appropriate consent, please contact us at summer@shcreative.co. We will take steps to delete such information as required by applicable law.

13. Third-Party Websites and Services

Our Site may contain links to third-party websites, plug-ins, or services (for example, external product links, social media, or partner resources). These third parties operate independently from us and have their own privacy policies.

We are not responsible for the content, privacy practices, or security of any third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our services or business practices

• The technologies we use

• Applicable legal or regulatory requirements

When we make changes, we will:

• Update the “Last updated” date at the top of this page; and

• Where required by law or where the changes are material, provide additional notice (for example, by posting a notice on the Site or sending you an email).

We encourage you to review this Policy regularly so that you remain informed about how we collect, use, and protect your information.

15. How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact:

SH Creative
Email: summer@shcreative.co
Location: Florida, United States

Please clearly describe your request, the country/state in which you reside, and, where applicable, the law you are invoking (for example, GDPR or CCPA), so we can respond in the most appropriate way.

Brief Summary

• SH Creative is a Florida-based international art gallery consulting business serving artists, gallery owners, collectors, and consultants worldwide through the Site www.shcreative.co.

• We collect personal information you provide (such as contact details, inquiries, and order information), information collected automatically via cookies, and limited data from third parties (such as payment processors and analytics tools).

• We use this information to provide services and products, operate and improve our Site, communicate with you, comply with laws, and protect our business, relying on legal bases such as contract, legitimate interests, consent, and legal obligations.

• We share information only with service providers and other third parties as necessary and in accordance with the law; we do not sell personal information for monetary consideration.

• You may have important rights under GDPR, UK GDPR, and CCPA/CPRA (including rights to access, delete, correct, or object), which you can exercise by contacting summer@shcreative.co.