Privacy Policy
Last updated: September 15, 2026
Who We Are
This website is operated by Miles Conrad Encaustics. Our website address is https://custom-encaustics.com.
For questions about this Privacy Policy or your personal information, contact us at:
Email: service@custom-encaustics.com
Phone: (520) 820-6410
What Personal Data We Collect
We may collect personal information when you visit our website, place an order, create an account, contact us, leave a comment, subscribe to communications, or otherwise interact with the website.
Information we may collect includes:
- Name, billing address, shipping address, email address, and telephone number
- Account login information and customer preferences
- Order, transaction, refund, and shipping information
- Information submitted through contact forms
- Comments and associated information
- IP address,
- Information needed to prevent fraud, spam, abuse, or security threats
We do not intentionally request or collect health information or other sensitive personal information through this website.
How We Use Personal Data
We use personal information to:
- Process payments, purchases, refunds, and shipments
- Communicate with customers about orders and inquiries
- Provide customer service
- Create and maintain customer accounts
- Maintain transaction, tax, and accounting records
- Prevent fraud, spam, abuse, and security incidents
- Operate, maintain, and improve the website
- Measure website performance and usage
- Send marketing communications when a visitor has chosen to receive them
- Comply with legal and regulatory requirements
Orders and Payments
When you purchase from us, we collect information necessary to process and fulfill your order. This may include your name, billing address, shipping address, email address, telephone number, purchased items, order total, and payment status.
Payments are processed through WooPayments and its payment-processing partner, Stripe. Miles Conrad Encaustics does not receive or store your complete payment-card number.
Payment providers may use automated fraud-prevention, identity-verification, and risk-assessment systems when processing transactions.
For more information, review the privacy policies of Automattic and Stripe.
Contact Forms
When you submit a contact form, we collect the information entered into the form, which may include your name, email address, telephone number, and message.
We use this information to respond to your inquiry and provide customer service. Contact-form information is not used for marketing unless you separately choose to receive marketing communications.
Contact-form submissions may also be processed through automated spam-detection and website-security services.
Comments
If visitors leave comments on the website, we collect the information shown in the comments form, along with the visitor’s IP address and browser user-agent information, to assist with spam detection and website security.
An anonymized string created from your email address, sometimes called a hash, may be provided to the Gravatar service to determine whether you use that service. The Gravatar service privacy policy is available at https://automattic.com/privacy/. After a comment is approved, a Gravatar profile image may be publicly visible with the comment.
Media
If users are permitted to upload images to the website, they should avoid uploading images containing embedded location information, such as EXIF GPS data. Website visitors may be able to download publicly accessible images and extract embedded location information.
Cookies
Our website and its service providers use cookies and similar technologies to operate the store, remember preferences, maintain security, understand website usage, and improve performance.
Shopping and account cookies may be used to:
- Maintain your shopping cart and checkout session
- Remember account login information
- Save website and display preferences
- Detect fraud, spam, and security threats
- Measure website traffic and performance
If you leave a comment, you may choose to save your name, email address, and website in cookies so you do not need to enter that information again when leaving another comment. These cookies may last for one year.
If you visit the website login page, WordPress may set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal information and is discarded when you close your browser.
When a registered user logs in, WordPress sets cookies to save login information and display preferences. Login cookies generally last for two days, screen-preference cookies generally last for one year, and a login may persist for two weeks when “Remember Me” is selected. Login cookies are removed when the user logs out.
When an administrator or authorized contributor edits or publishes an article, WordPress may save an additional cookie containing the article’s post identification number. This cookie contains no personal information and generally expires after one day.
Where required, visitors may manage nonessential cookies through the cookie-preference controls available on the website. Disabling necessary cookies may prevent the shopping cart, checkout, login, or other portions of the website from functioning properly.
Embedded Content From Other Websites
Pages or articles on this website may contain embedded content, such as videos, images, maps, or articles from other websites.
Embedded content behaves in substantially the same way as if the visitor had visited the originating website directly. Those websites may collect information about visitors, use cookies, include additional third-party tracking, and monitor interactions with the embedded content. This may include tracking interactions when a visitor has an account with and is logged into the third-party website.
Analytics
We may use analytics services provided by our website host, WordPress, Jetpack, WooCommerce, or similar providers.
These services may collect information such as pages visited, approximate location, device type, browser type, referral source, IP address, and time spent on the website. We use analytics information to understand website traffic, maintain the store, and improve website performance.
Visitors may use the website’s cookie-preference controls to manage optional analytics cookies where those controls are available.
Who We Share Your Data With
We may share personal information with service providers only when reasonably necessary to operate the website, process transactions, fulfill orders, provide customer service, maintain security, or comply with the law.
These providers may include:
- WooCommerce, WooPayments, Automattic, and Stripe for ecommerce and payment processing
- Our website-hosting, backup, and security providers
- Shipping carriers, including USPS and UPS
- Contact-form and spam-detection services
- Analytics providers
- Email or newsletter providers when a visitor subscribes
- Account, bookkeeping, tax, or professional-service providers
- Government agencies, courts, or other parties when disclosure is legally required
If you request a password reset, your IP address may be included in the password-reset email.
We do not sell personal information for money.
How Long We Retain Your Data
We retain personal information only as long as reasonably necessary for the purposes described in this policy and to satisfy legal, tax, accounting, security, fraud-prevention, and dispute-resolution requirements.
Order and transaction records may generally be retained for up to seven years or longer when required by law.
Contact-form messages may generally be retained for up to two years unless longer retention is needed to address an order, dispute, customer-service matter, or legal obligation.
If you leave a comment, the comment and its associated information may be retained indefinitely so that follow-up comments can be recognized and approved without being held for moderation.
For registered customers, we store the personal information provided in the customer profile. Registered users may generally view, edit, or delete their personal information, except that usernames may not be changeable. Website administrators can also view and edit this information.
Some records cannot be deleted immediately because they must be retained for administrative, legal, accounting, fraud-prevention, or security purposes.
What Rights You Have Over Your Data
Depending on where you live, you may have the right to request:
- Access to personal information we hold about you
- Correction of inaccurate personal information
- Deletion of certain personal information
- A copy or export of information you provided
- Withdrawal of consent
- An objection to certain uses of your information
To submit a privacy request, email service@custom-encaustics.com. We may need to verify your identity before responding.
These rights do not require us to delete information that we must retain for administrative, legal, accounting, fraud-prevention, or security purposes.
Marketing emails include an unsubscribe option. Cookie preferences may be managed through the controls provided on the website.
Where Your Data Is Sent
Our business and primary website operations are based in the United States. Information submitted from another country may be processed in the United States or in other locations where our service providers operate.
Visitor comments and contact-form submissions may be checked through automated spam-detection or website-security services. Order and payment information may be transmitted to ecommerce, payment, fraud-prevention, hosting, and shipping providers.
Third-party providers are responsible for maintaining their own legally required privacy and data-transfer safeguards.
How We Protect Your Data
We use reasonable administrative and technical safeguards appropriate for a small online business. These may include:
- Encrypted website connections
- Password-protected administrative access
- Access restrictions
- Website backups
- Spam and fraud prevention
- Security monitoring
- Software and security maintenance
No method of electronic transmission or storage can be guaranteed to be completely secure.
Data-Breach Procedures
If we become aware of a breach affecting personal information, we will investigate the incident, take reasonable measures to contain and correct it, work with the appropriate service providers, and provide legally required notifications.
Information Received From Third Parties
We may receive information from payment processors, shipping carriers, ecommerce providers, fraud-prevention services, analytics providers, and other service providers. This may include payment status, fraud-risk information, shipping status, delivery confirmation, refunds, disputes, and website-performance information.
We use this information to process orders, provide customer service, prevent fraud, resolve disputes, and operate the business.
Automated Decision-Making and Fraud Screening
Our payment and security providers may use automated systems to evaluate transactions for possible fraud, abuse, or security risks. These systems may approve, delay, decline, or request additional verification for a transaction.
Questions about a transaction may be directed to service@custom-encaustics.com.
Children’s Privacy
This website is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13.
Changes to This Privacy Policy
We may update this Privacy Policy when our business practices, website services, or legal obligations change. The revised policy will be posted on this page with an updated revision date.
Contact Information
Questions, concerns, or requests concerning this Privacy Policy may be sent to:
Miles Conrad Encaustics
Email: service@custom-encaustics.com
Phone: (520) 820-6410
