Privacy Policy
This policy describes what information nathalie.studio (Nathalie Chou Lab) collects, how it is used, who it is disclosed to and how, and the security practices that protect it. The short version: no accounts, no tracking cookies, no advertising — the site collects only what's needed to answer your messages and fulfill shop orders.
✦What We Collect
When you write through the contact page or join a project waitlist, we receive what you choose to send: how to address you, your email address, an optional phone number, and your message.
Purchases happen on our Shopify-hosted store. At checkout you provide your name, email, shipping address, and payment details on Shopify's secure pages — your card number never reaches this site or the Lab's systems. From the store we receive the order details needed to fulfill it: your name, shipping address, email, and the items ordered.
Hosting providers process standard connection data (IP address, browser type) in server logs to serve pages and prevent abuse. On the production host, anonymous page-speed metrics may be collected to keep the site fast. There are no advertising cookies, no analytics profiles, and no cross-site tracking.
Camera-based demos process camera input locally in your browser — images are never recorded, stored, or transmitted. Tool preferences and saved work live in your browser's local storage and stay on your device.
✦How We Use It
To read and answer your messages; to fulfill, ship, and support your shop orders; to keep the site fast, secure, and free of abuse; and to meet legal, tax, and accounting obligations. Your information is never sold, rented, traded, or used for advertising.
✦Who We Disclose It To, and How
Information is shared only with the service providers required to operate the site and fulfill orders, always over encrypted connections (HTTPS/TLS), and in most cases you transmit it directly to the provider yourself:
FormSubmit — relays contact-form submissions to the Lab's inbox. Shopify — hosts the store and processes checkout, with payment handled by its PCI-DSS-certified payment providers (Shopify privacy policy). Our print partner — receives your name, shipping address, and ordered items to print and ship your order. Vercel and GitHub Pages — hosting infrastructure that serves the site and processes standard server logs; Vercel also provides the anonymous speed metrics above.
Beyond these providers, information is disclosed only if required by law or to protect our legal rights. It is never disclosed by sale, by agreement with advertisers, or through tracking technologies.
✦Security Practices
Every page and form is served exclusively over HTTPS/TLS. Payment details are handled end-to-end by Shopify's certified payment infrastructure and never touch this site. We collect the minimum each function needs, keep no customer database of our own — order records live inside Shopify's secured systems — and access to those systems is limited to the Lab's operator and protected by authentication.
✦Retention & Your Rights
Correspondence is kept only as long as needed to handle your inquiry. Order records are retained as long as tax and accounting law requires. You may request a copy of the information held about you, ask for it to be corrected, or ask for it to be deleted (except records required by law) via the contact page.
✦Children
The site is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided information, contact us and it will be deleted.
✦Changes & Contact
This policy may be updated from time to time; the date above reflects the latest revision, and material changes will be noted on this page. Questions are welcome via the contact page. Related documents: Terms of Use and the Legal Notice.