Privacy & uploaded files.

Your artwork and photographs remain yours. This policy explains the limited ways we use the information needed to evaluate and fulfill your request.

Information we collect

We collect the contact, order, destination, project, and communication information you submit. When you submit a form, we may also attach the landing page, referring site, and campaign parameters that brought you to WhittledArt so we can understand which sales activity produced the request. When you upload a file, we also record its filename, type, size, private storage location, and the order or inquiry it supports. Payment providers process card or bank information; WhittledArt does not store complete payment-card numbers.

Campaign attribution

The site uses temporary browser session storage to preserve referral and campaign details as you move between WhittledArt pages. This is not used to build a cross-site advertising profile. When you submit a form, captured attribution details may be included with that inquiry or order and retained with the related business record. The temporary browser value ordinarily ends with the browser session and submissions still work when browser storage is unavailable.

How we use it

We use information to answer inquiries, review files, prepare quotes and proofs, collect payment, produce and deliver work, provide customer support, address remakes or claims, maintain business records, protect the service, and comply with law. We do not sell customer files or use them for advertising, resale, or AI training without separate written permission.

Private file storage

Customer uploads are placed in private storage rather than a public image gallery. Access is limited to WhittledArt and service providers needed to operate the upload, review, production, communication, payment, and fulfillment process. Temporary access links may be created for authorized order handling and expire automatically.

Service providers

WhittledArt may use providers such as Vercel for website and private file infrastructure, Formspree or Resend for communications, and a payment processor such as Stripe for secure payment links. Shipping, accounting, and production providers receive only the information reasonably needed for their work. Their own terms and privacy practices also apply to their services.

Retention and deletion

We keep inquiry and order information only as long as reasonably needed to fulfill the request, support approved reorders or remakes, maintain required business records, resolve disputes, and protect the service. Abandoned uploads may be deleted. You may request deletion of an uploaded customer file after fulfillment unless continued retention is legally required or needed for an unresolved transaction or claim.

Healthcare and sensitive information

Do not upload patient names, medical records, protected health information, identifiable patient photographs, financial account credentials, government identifiers, or other sensitive data that WhittledArt does not need. Contact us before sending any file that may require special handling.

Security and your choices

We use reasonable technical and operational safeguards, but no internet service can promise absolute security. You may ask what information you submitted, correct it, or request deletion where applicable by emailing us. We may need to verify the request and retain limited records when required for tax, accounting, fraud prevention, or legal obligations.

Contact

Privacy or file-deletion requests can be sent to matt@whittledco.com. WhittledArt is operated by Newotics LLC in Mountain Home, Arkansas.