Privacy Policy

Privacy Policy — HB Oil Paintings
Last Updated: October 5, 2025
Welcome to HB Oil Paintings. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what we collect, how we use it, who we share it with, and the choices you have—especially for Texas residents under the Texas Data Privacy and Security Act (TDPSA).
1) Scope & Applicability

This policy covers personal information we collect through our website, checkout, email, and related services for our online art shop.
It does not cover third-party websites or services that may be linked on our site—please review their policies separately.
HB Oil Paintings acts as a “controller” of personal data and uses trusted “processors” (e.g., payment, hosting, shipping, email, analytics) under contract.

2) Information We Collect
We may collect:

Contact Information: name, email, phone number, shipping/billing address.
Account Data (if you create an account): username, password (stored securely/hashed), preferences.
Transaction Data: order details, payment confirmations, purchase history.
Technical & Usage Data: IP address, device/browser type, pages viewed, cookie/identifier data for analytics and site performance.
Communications: messages you send us by email or through contact forms.
Marketing Preferences: newsletter opt-ins/opt-outs.

We do not intentionally collect sensitive personal data (e.g., health, precise geolocation, biometric). If that changes, we will clearly notify you and obtain consent where required.
3) How We Use Your Information

Process and fulfill orders, shipping, and returns.
Communicate about purchases, updates, and customer support.
Maintain and secure accounts and our website.
Prevent, detect, and investigate fraud or abuse.
Analyze site performance and improve features.
Send marketing communications with your consent (you can unsubscribe anytime).
Comply with legal, tax, and accounting obligations and enforce our terms.

We will not use your information for purposes that are materially different from these without telling you and, where required, obtaining your consent.
4) Sharing & Disclosure
We may share your information with:

Service Providers/Processors: payment processors, shipping carriers, hosting, email, analytics, and similar vendors who must protect your data and use it only as instructed.
Legal/Compliance: when required by law, subpoena, or to protect rights, safety, or property.
Business Transactions: if we undergo a merger, acquisition, or sale, your data may transfer under confidentiality obligations.

We do not sell or rent your personal information in the ordinary sense. If a practice ever meets the legal definition of a “sale” or “share,” we will provide the required notices and opt-out options.
5) Cookies & Tracking

We use cookies and similar technologies to remember preferences, measure performance, and improve our website.
You can manage cookies in your browser settings and opt out of non-essential cookies where offered on our site.
If any tracking counts as “targeted advertising” or a “sale/share” under the TDPSA, we will provide an opt-out method.

6) Texas Resident Rights (TDPSA)
If you are a Texas resident, you have the right to:

Confirm & Access your personal data we process.
Correct inaccuracies in your personal data.
Delete personal data you provided.
Data Portability—receive a copy of data you provided to us in a portable format.
Opt-Out of targeted advertising, sale of personal data, or certain profiling (if applicable).
Appeal if we decline a request.

Response timelines: We generally respond within 45 days. If needed, we may extend once by up to 45 additional days and will inform you of the extension and reason.
How to submit a request or appeal:
Email hb@hboilpaintings.shop with the subject line “Privacy Request” or “Privacy Appeal” and include:

Your full name and the email address used on our site;
The type of request (access, correction, deletion, portability, opt-out, or appeal);
Enough details for us to verify your identity and locate your data (e.g., order numbers, dates).
We may request additional information solely to verify your identity.

Global Privacy Control (GPC): If supported on our site, we will treat valid GPC signals as an opt-out request for targeted advertising or sale/share, as applicable.
7) Data Security & Retention

We use reasonable administrative, technical, and physical safeguards (e.g., encryption in transit, access controls, least-necessary access).
No method of transmission or storage is 100% secure, but we continuously improve our safeguards.
We retain personal data only as long as necessary for orders, support, and legal/tax obligations, or until you request deletion (subject to lawful exceptions).

8) Children

Our website and store are not directed to children under 13, and we do not knowingly collect data from them.
If we learn we collected data from a child under 13 without proper consent, we will delete it promptly.

9) Changes to This Policy
We may update this Privacy Policy from time to time. We will post updates with a new “Last Updated” date. Significant changes will be highlighted where reasonable.
10) Contact Us & Privacy Requests
HB Oil Paintings
Email: hb@hboilpaintings.shop
Website: hboilpaintings.shop
For any privacy questions or to exercise your rights, email us with the subject “Privacy Request.”
Optional Notices (only if they ever apply to you)

Sensitive Data Notice: If we ever sell sensitive personal data, we will display: “NOTICE: We may sell your sensitive personal data.”
Biometric Data Notice: If we ever sell biometric personal data, we will display: “NOTICE: We may sell your biometric personal data.”

Privacy Policy

This policy covers personal information we collect through our website, checkout, email, and related services for our online art shop.

It does not cover third-party websites or services that may be linked on our site—please review their policies separately.

HB Oil Paintings acts as a “controller” of personal data and uses trusted “processors” (e.g., payment, hosting, shipping, email, analytics) under contract.

2) Information We Collect We may collect:

Contact Information: name, email, phone number, shipping/billing address.

Account Data (if you create an account): username, password (stored securely/hashed), preferences.

Transaction Data: order details, payment confirmations, purchase history.

Technical & Usage Data: IP address, device/browser type, pages viewed, cookie/identifier data for analytics and site performance.

Communications: messages you send us by email or through contact forms.

Marketing Preferences: newsletter opt-ins/opt-outs.

We do not intentionally collect sensitive personal data (e.g., health, precise geolocation, biometric). If that changes, we will clearly notify you and obtain consent where required. 3) How We Use Your Information

Process and fulfill orders, shipping, and returns.

Communicate about purchases, updates, and customer support.

Maintain and secure accounts and our website.

Prevent, detect, and investigate fraud or abuse.

Analyze site performance and improve features.

Send marketing communications with your consent (you can unsubscribe anytime).

Comply with legal, tax, and accounting obligations and enforce our terms.

We will not use your information for purposes that are materially different from these without telling you and, where required, obtaining your consent. 4) Sharing & Disclosure We may share your information with:

Service Providers/Processors: payment processors, shipping carriers, hosting, email, analytics, and similar vendors who must protect your data and use it only as instructed.

Legal/Compliance: when required by law, subpoena, or to protect rights, safety, or property.

Business Transactions: if we undergo a merger, acquisition, or sale, your data may transfer under confidentiality obligations.

We do not sell or rent your personal information in the ordinary sense. If a practice ever meets the legal definition of a “sale” or “share,” we will provide the required notices and opt-out options. 5) Cookies & Tracking

We use cookies and similar technologies to remember preferences, measure performance, and improve our website.

You can manage cookies in your browser settings and opt out of non-essential cookies where offered on our site.

If any tracking counts as “targeted advertising” or a “sale/share” under the TDPSA, we will provide an opt-out method.

6) Texas Resident Rights (TDPSA) If you are a Texas resident, you have the right to:

Confirm & Access your personal data we process.

Correct inaccuracies in your personal data.

Delete personal data you provided.

Data Portability—receive a copy of data you provided to us in a portable format.

Opt-Out of targeted advertising, sale of personal data, or certain profiling (if applicable).

Appeal if we decline a request.

Your full name and the email address used on our site;

The type of request (access, correction, deletion, portability, opt-out, or appeal);

Enough details for us to verify your identity and locate your data (e.g., order numbers, dates). We may request additional information solely to verify your identity.

Global Privacy Control (GPC): If supported on our site, we will treat valid GPC signals as an opt-out request for targeted advertising or sale/share, as applicable. 7) Data Security & Retention

We use reasonable administrative, technical, and physical safeguards (e.g., encryption in transit, access controls, least-necessary access).

No method of transmission or storage is 100% secure, but we continuously improve our safeguards.

We retain personal data only as long as necessary for orders, support, and legal/tax obligations, or until you request deletion (subject to lawful exceptions).

8) Children

Our website and store are not directed to children under 13, and we do not knowingly collect data from them.

If we learn we collected data from a child under 13 without proper consent, we will delete it promptly.

Sensitive Data Notice: If we ever sell sensitive personal data, we will display: “NOTICE: We may sell your sensitive personal data.”

Biometric Data Notice: If we ever sell biometric personal data, we will display: “NOTICE: We may sell your biometric personal data.”

Privacy Policy - The Basics

What to Include in the Privacy Policy

2) Information We Collect
We may collect:

We do not intentionally collect sensitive personal data (e.g., health, precise geolocation, biometric). If that changes, we will clearly notify you and obtain consent where required.
3) How We Use Your Information

We will not use your information for purposes that are materially different from these without telling you and, where required, obtaining your consent.
4) Sharing & Disclosure
We may share your information with:

We do not sell or rent your personal information in the ordinary sense. If a practice ever meets the legal definition of a “sale” or “share,” we will provide the required notices and opt-out options.
5) Cookies & Tracking

6) Texas Resident Rights (TDPSA)
If you are a Texas resident, you have the right to:

Enough details for us to verify your identity and locate your data (e.g., order numbers, dates).
We may request additional information solely to verify your identity.

Global Privacy Control (GPC): If supported on our site, we will treat valid GPC signals as an opt-out request for targeted advertising or sale/share, as applicable.
7) Data Security & Retention