Privacy Policy for michaelherold.com and Related Platforms

Last updated: June 25, 2025

1. Introduction

This Privacy Policy governs how Michael Herold collects, uses, protects, and manages personal data on michaelherold.com, barneyallissculpture.com, and associated social media accounts (e.g., Instagram, Facebook, X) (collectively, “Platforms”). By accessing or using our Platforms, you agree to this Privacy Policy. If you do not agree, do not use our Platforms. For usage terms, see our Terms of Use at /terms-of-use. This policy is accessible (e.g., screen-reader compatible) per ADA and WCAG 2.1 AA standards.

2. Our Commitment to Privacy

We protect your privacy in compliance with global laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Brazil’s Lei Geral de Proteção de Dados (LGPD), Australia’s Privacy Act 1988, and other regulations. We follow data minimization principles, collecting only data necessary for outlined purposes.

3. Personal Data Collected

We may collect:

• Contact Information: Name, email, phone     number, mailing address for inquiries, commissions, or order     fulfillment.

• Transaction Data: Payment details processed     securely via third-party providers (e.g., Stripe, Square, PayPal).

• Analytics Data: Anonymized data via cookies,     pixels, or tools (e.g., Google Analytics, Meta Pixel) to track     performance, visitor behavior, or ad effectiveness.

• Device/Browser Data: IP address, browser     type, device type, operating system, geolocation for optimization     and security.

• Social Media Data: Limited profile data     (e.g., username, email) from social media logins or interactions     (e.g., Instagram comments).

• Event Data: Name, likeness, or contact     details from physical/virtual events (e.g., exhibitions, live     streams).

• User-Generated Content: Comments, reviews,     or submissions via forms, blogs, or social media.

• Feedback Data: Suggestions or ideas     submitted via email or forms.

• Subscription Data: If you subscribe (e.g.,     newsletter tiers, art memberships), data for managing recurring     payments.

• Crowdfunding/Pre-Order Data: If you back     crowdfunding or pre-orders, contact and payment details.

• Employee/Contractor Data: Limited data from     employees or contractors (e.g., Juno Works) for business operations,     if applicable.

See our vendor list at /vendors for third-party providers.

4. How We Use Your Data

We use data to:

• Respond to inquiries, commission requests, or support queries.

• Process and fulfill orders, including shipping, payments, and  installations.

• Improve Platform functionality, user experience, and personalization.

• Send newsletters, promotional offers, or event invitations  (with consent where required).

• Analyze performance and marketing (e.g., via Google     Analytics, Meta).

• Comply with legal obligations (e.g., tax, sanctions, law     enforcement).

• Promote Platforms using event photos/videos (unless opted     out).

5. Data Sharing

We do not sell, rent, or share data for marketing without consent. Data may be shared with:

• Service Providers: Payment processors (e.g.,     Stripe, Square, PayPal), shipping carriers, analytics/hosting     providers, bound by confidentiality.

• Business Partners: Fabricators (e.g., Juno     Works, A. Zahner Co.) for commissions, with confidentiality     protections.

• Legal Authorities: If required by law, court     order, or to protect our rights, property, or safety.

• Third-Party Trackers: Analytics/ad tools     (e.g., Meta Pixel) collect data under their policies (see Section     9).

6. Data Security

We use industry-standard measures:

• SSL/TLS encryption for transmission.

• Secure storage with access controls.

• Regular internal and third-party audits. No system is fully     secure; you share data at your own risk. We conduct Privacy Impact     Assessments (PIAs) for high-risk processing (e.g., third-party     trackers) per GDPR.

7. Data Retention

Data is retained only as needed or required:

• Contact Data: Until deletion request or     unsubscribe.

• Transaction Data: 7 years for     tax/accounting.

• Analytics Data: Anonymized, retained     indefinitely unless opted out.

• Event Data: Promotional content retained     until opted out.

• Other Data: Per legal or operational needs.     Request deletion at info@michaelherold.com.

8. Your Rights

Depending on jurisdiction, you may:

• Access, correct, or delete data.

• Restrict or object to processing (e.g., marketing).

• Request portability (structured format).

• Withdraw consent for non-essential processing.

• Opt out of “sale” under CCPA (we don’t sell data;     opt-out for trackers at info@michaelherold.com).     Submit requests to info@michaelherold.com. Response     within 30 days (45 days for CCPA in complex cases). No fees unless     excessive. EU/UK users may contact supervisory authorities (see     /regulators for links).

9. Cookie and Tracking Policy

We use cookies, pixels, web beacons, and similar technologies for:

• Essential Functionality: Session management,  checkout.

• Analytics: Performance tracking (e.g., Google Analytics, Meta Pixel).

• Marketing: Personalized ads/content,  including via affiliate partners (may earn commissions at no cost to     you).

• Third-Party Content: Embedded media (e.g.,  YouTube, Vimeo). Cookie Types:

• Essential: Non-disableable, required for operation.

• Analytics: Opt-out via consent tool or  browser.

• Marketing: Opt-out via consent tool or browser.

• Third-Party: Subject to external policies. Consent implied by use. Manage via browser settings or our consent  tool (if available). Disabling cookies may affect functionality. We don’t honor Do Not Track (DNT) signals but offer opt-out for non-essential tracking.

10. User-Generated Content

Comments, reviews, or submissions grant us a non-exclusive, royalty-free, worldwide, perpetual license to use, display, reproduce, modify, or authorize others to use for Platform operation/promotion. You ensure content is lawful, non-infringing, and accurate. We may moderate/remove content.

11. Social Media Interactions

Social media interactions (e.g., Instagram, X) are subject to third-party policies. Logins may provide limited data (e.g., username). We’re not responsible for third-party practices.

12. Cross-Border Data Transfers

Data may be processed/stored in the U.S. or elsewhere via providers (e.g., Stripe, Google). For EU/UK users, we use Standard Contractual Clauses (SCCs) for GDPR compliance. Details: info@michaelherold.com.

13. Data Breach Notification

If a breach occurs, we notify affected users/authorities within 72 hours (GDPR) or as required (e.g., CCPA), unless low risk. Notifications include details, risks, and mitigation.

14. Automated Decision-Making

We don’t use automated decision-making with significant effects (e.g., denying services). Analytics may inform marketing; opt out via Section 8.

15. Children’s Privacy

Platforms are not for children under 13; no intentional data collection. Content is child-safe. External sites not our responsibility (Section 18.2). Deletion requests: info@michaelherold.com.

16. Newsletters

Opt-in for updates on works, events. Unsubscribe via email links. No third-party marketing sharing.

17. Events and Exhibitions

Attendees’ data (e.g., photos) may be used for promotion unless opted out via form at events@michaelherold.com. Attendees assume injury/loss risks per Terms of Use.

18. Miscellaneous

18.1 External Links and Third-Party Content

External links/embedded content (e.g., YouTube, X) are subject to third-party policies. We’re not responsible.

18.2 Data Backup and Loss

We maintain backups; no liability for technical losses. Contact support@michaelherold.com.

18.3 Policy Updates

Updates posted here; continued use implies acceptance.

18.4 Language and Translation

English prevails. Assistance: info@michaelherold.com.

19. Data Protection Officer

For GDPR compliance, we have not appointed a Data Protection Officer (DPO), as our data processing is limited. For inquiries, contact info@michaelherold.com.

20. Contact Information

For inquiries, rights, or support:

• Michael Herold

• Email: info@michaelherold.com

• Address: 66 N Pearl St, Suite 101, Denver, CO 80203,     USA

========================