COLOURA COLLECTIVE PRIVACY POLICY

Effective Date: November 5, 2026  |  Last Updated: November 1, 2026

Coloura LLC dba Coloura Collective (“Coloura,” “we,” “us,” or “our”) values your privacy. This one policy explains what personal information we collect, how we use and share it, how we use cookies and AI, how long we keep information, and the choices and rights you have. It applies to the Coloura Collective online marketplace and our house shop (together, the “Platform”) and to everyone who uses it: shoppers (“Customers”), shop owners (“Sellers”), and visitors. By using the Platform, you agree to the practices described here.

In short: we do not sell your personal data. We do not run advertising cookies or ad pixels, and we have no social media tracking plugins. We use Google Analytics to understand site traffic and Klaviyo to send marketing emails, and you can opt out of both.

1. Information We Collect

1.1. Information Customers (Buyers) Provide

• Name.
• Billing address and mailing (shipping) address.
• Email address and phone number, and account details (such as username and password).
• Card information. Card details are entered directly with our payment processor, Stripe. We do not see or store full card numbers.
• Order details and messages you send to us or to Sellers.

1.2. Information Collected Automatically

We use Google Analytics and SEO tools, which we group together as “analytics.” Google Analytics collects:

• IP address (we do not collect precise location).
• Device information and browser type.
• Pages viewed, searches, clicks, and referring pages.

Our SEO tools mostly work with aggregate data that does not identify you. We have turned off Google Signals and Google’s optional data-sharing settings, so Google does not use this data to personalize ads. Optional usage-tracking features in our store software are also turned off.

1.3. Information We Collect from Sellers

If you apply to sell on the Platform, we collect the following for each Seller so we can run the marketplace and meet legal requirements, including the federal INFORM Consumers Act:

• Legal name, shop name, email, phone number, and address.
• Business type and tax ID (EIN or SSN), with tax forms.
• Bank account details for payouts.
• A government-issued ID or business document to verify your identity.
• Your listings, photos, messages, and sales history.

Payment, bank, and identity details are collected and verified through Stripe. If you are a high-volume Seller, we may be required to show Customers certain Seller information (name, business address, and contact details).

Seller self-identification. We may ask you to tell us whether you identify as a BIPOC (a.k.a Artist of the Global Majority). This can reveal racial or ethnic origin, which many state laws treat as “sensitive.” Providing it is voluntary and we ask for your consent. We use it only to confirm we’re rightfully and truthfully representing your rich background and for Platform community programs. We do not sell it or share it for advertising, and you may withdraw consent and ask us to delete it at any time (see Section 16).

2. Data We Collect, Why, and How Long We Keep It

This table summarizes the categories of personal information we collect, why we use them, and how long we keep them. We keep data only as long as needed for these purposes, and sometimes longer when the law requires (for example, tax and accounting records) or to resolve a dispute. After that, we delete or de-identify it.

Category	Examples	Why we use it	How long we keep it
Identifiers and contact info	Name, email, phone, shipping and billing address	Orders, support, account management, communications	While your account is active, then 30 days after you close it, except as noted below
Order and transaction records	Items purchased, amounts, tax, refunds, last four card digits	Fulfillment, accounting, tax compliance, disputes	7 years after the transaction
Payment information	Card or bank details (held by Stripe)	Processing payments and payouts	Held by Stripe under its own policy; we keep only a reference token and last four digits
Analytics data	IP address, device, browser, pages viewed (Google Analytics)	Security, understanding traffic, improving the Platform	Up to 14 months
Cookie data	Cookie IDs for login, cart, preferences	Keeping the site working and remembering your settings	Session cookies end when you close your browser; others up to 13 months
Email marketing and tracking data	Email address, emails opened and clicked, pages and products viewed (Klaviyo)	Sending relevant marketing emails and measuring them	Until you unsubscribe or ask us to delete it, then up to 13 months
Account security logs	Login times, fraud-prevention signals	Preventing fraud, abuse, and security incidents	12 months
Messages and support requests	Emails, chat, Customer–Seller messages	Support, dispute resolution	3 years
Seller identity and tax information	Legal name, TIN, ID or business documents, bank details (verified through Stripe)	INFORM Act verification, tax reporting, fraud prevention, payouts	While the shop is active, then 7 years after it closes (tax and legal records)
Seller shop content and sales history	Shop profile, listings, photos, sales and payout history	Operating the marketplace and displaying your shop	While the shop is active, then 3 years after it closes
Seller self-identification (if collected)	Whether you identify as BIPOC / an Artist of the Global Majority	Representation and community programs	While the shop is active, or until you withdraw consent

 

3. How We Use Information

• Processing and fulfilling transactions, and paying Sellers.
• Facilitating communication between Customers and Sellers.
• Verifying Sellers and meeting legal obligations such as tax reporting and the INFORM Consumers Act.
• Improving and personalizing the Platform and understanding how it is used.
• Providing customer support.
• Sending service updates and marketing emails (with your consent where required).
• Detecting and preventing fraud, abuse, or security incidents.

4. How We Share Information

We do not sell your personal data for money, and we do not share it with advertising networks. We may share information as follows:

• With Sellers. Customer name, shipping address, and order details are shared with the Seller to fulfill the order.
• With service providers. Vendors that support our operations: Stripe (payments, payouts, and Seller identity verification), Klaviyo (email marketing), Google Analytics, and hosting and IT providers. They may use the information only to provide services to us.
• For legal compliance. If required by law, legal process, or government request, or to enforce our agreements and protect Coloura, our users, or others.
• Business transfers. In a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We do not knowingly sell or share the personal information of anyone under 18.

5. Cookies and Similar Technologies

At Coloura Collective, we believe in transparency, digital safety, and respectful technology practices. This section explains how and why we use cookies and similar technologies on our website and marketplace platform.

Cookies are small text files placed on your device when you visit a website. They help websites function, improve the user experience, and provide information to site owners. We also use similar technologies, such as tags and local storage, which work in comparable ways. For simplicity, we refer to all of these as “cookies.”

What we do not use: advertising cookies, ad pixels, and social media plugins or tracking buttons.

5.1. Types of Cookies We Use

1. Essential cookies (always on). These are necessary for the website to function. They come from our WordPress, WooCommerce, and Dokan store software, and from Stripe, which uses cookies to help detect fraud during payment. They allow you to:

• Navigate pages
• Log into your account (Customers and Sellers)
• Add items to your cart and check out
• Access secure areas of the platform

Without these cookies, core marketplace functions would not work.

1. Performance and analytics cookies (you can opt out). These help us understand how visitors use our site. We use Google Analytics, which collects your IP address, device, browser, and the pages you view. They allow us to:

• Track page performance
• Identify areas for improvement
• Measure engagement with listings and features

We use this data in aggregate form to improve the marketplace experience for artists and shoppers.

1. Functionality cookies (you can opt out). These remember your preferences so we can personalize your experience. They may:

• Save your language and accessibility settings
• Remember your login for future visits
• Support smoother browsing and filtering

1. Marketing email cookies (you can opt out). We use Klaviyo, our email marketing tool. Klaviyo may use cookies to recognize a visitor, record which pages and products they view, and connect that activity to an email address once you subscribe or click a link in one of our emails. We use this to send relevant emails and see which emails work.

5.2. Third-Party Cookies

Some cookies are placed by trusted third-party partners: Google Analytics (analytics), Klaviyo (email marketing), and Stripe (payments and fraud prevention). These partners may collect information such as device type, browsing activity, or session data, and they handle it under their own privacy policies.

5.3. How You Can Manage Cookies

You are in control. See Section 7 for how to opt out of analytics and email tracking. You can also adjust your browser settings, or block or delete cookies already stored on your device. If you block certain cookies, some parts of the Coloura Collective site may not work as well for you, and essential cookies cannot be turned off because the site needs them to work. We may update this section from time to time to reflect changes in technology, regulations, or our practices.

6. Email Marketing

We send marketing emails through Klaviyo only to people who sign up or otherwise agree to receive them. Every marketing email has an unsubscribe link and our mailing address. If you unsubscribe, we stop sending marketing emails and keep your address on a do-not-email list so we do not email you again. We will still send order and account messages.

7. Your Privacy Choices

We do not sell personal data for money, and we do not run advertising cookies or ad pixels, so we do not share your personal data with ad networks for targeted advertising. You can opt out of analytics and email tracking in any of these ways:

• Google Analytics. Install Google’s free opt-out browser add-on (tools.google.com/dlpage/gaoptout).
• Your browser. Adjust your browser settings, or block or delete cookies already stored on your device. Blocking essential cookies may stop the cart, checkout, or login from working.
• Marketing emails. Click “unsubscribe” in any Coloura marketing email.
• Email. Write to hello@coloura.co with the subject “Opt Out.”

We will not penalize you for opting out. Your browser may send a “Do Not Track” or similar opt-out signal, such as Global Privacy Control. There is no industry agreement on how to handle them, and we do not currently respond to browser-based signals. Please use the options above.

8. Your Privacy Rights

Residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with similar laws have some or all of the rights below. We offer these rights to all US users, including Illinois residents, whether or not your state’s law requires it. Some rights have exceptions.

• Know. Ask for the categories of personal information we collected, their sources, our purposes, and the categories of third parties we share them with.
• Third-party list. If you live in Connecticut, Minnesota, or Oregon, you can ask for a list of the specific third parties we disclosed personal information to. Email hello@coloura.co with the subject “Third Party List Request” and your address so we can confirm your state. Rhode Island residents can use the subject “Rhode Island Third Party Disclosure Request.”
• Access. Get a copy of your personal information, in a portable format where possible.
• Correct. Ask us to fix inaccurate information.
• Delete. Ask us to delete the personal information we collected about you.
• Opt out. Opt out of targeted advertising, the sale or sharing of personal information, and certain profiling. We do none of these, but you can still use the choices in Section 7.
• Limit sensitive data. Withdraw consent for, or limit our use of, sensitive data. The only sensitive data we may collect is the optional Seller self-identification.
• No retaliation. We will not deny you service, charge you different prices, or give you worse service for using your rights.

8.1. How to Make a Request

You can update much of your information in your account settings. You can also email hello@coloura.co with the subject “Privacy Request.” We will confirm we received it and respond within 45 days. If we need more time, we may extend by 45 days and will tell you why. Requests are free up to twice a year. We may need to verify who you are and where you live: we will first ask you to confirm information we already hold, such as your account email, and only then, if needed, ask for government ID. You may use an authorized agent; we may ask for proof of permission.

8.2. How to Appeal

If we deny all or part of a request, you may appeal. Email hello@coloura.co with the subject “Privacy Appeal” within 60 days of our decision and tell us what you want reviewed. We will answer in writing within the time your state requires, generally 45 to 60 days (Virginia, for example, requires 60). If we deny your appeal, we will tell you how to contact your state attorney general, and you may file a complaint there. Examples:

• Minnesota: ag.state.mn.us/Data-Privacy/Complaint/
• New Jersey: njconsumeraffairs.nj.gov/file-a-complaint/
• Virginia: oag.state.va.us, or call 1-800-552-9963
• Other states: see your state attorney general’s website.

8.3. California Residents

In the last 12 months we collected the categories of personal information in the table in Section 2: identifiers (name, email, IP address, cookie IDs, and for Sellers, tax ID and government ID), other records (phone, addresses, bank details), commercial information (orders, listings, sales), internet or network activity (analytics), sensory information (photos Sellers post), and approximate location from IP address. We collect them from you, your devices, Stripe, and Google Analytics, for the purposes in Section 3. We disclose them for business purposes to the service providers in Section 4, and to Sellers for order fulfillment. We have not sold or shared personal information in the last 12 months. You may ask us to limit the use of sensitive personal information (Seller tax ID, government ID, and bank details), which we use only to verify Sellers, pay and report taxes, and comply with law. California’s “Shine the Light” law lets you ask which categories we disclosed to third parties for their direct marketing; we make no such disclosures.

8.4. Colorado Residents

We do not knowingly process personal information of children under 13. The only sensitive data we may process is optional Seller self-identification, and only with your consent. We share buyer and Seller account information, payment information (through Stripe), transaction information, support information, device information, and usage information with Customers and Sellers (for orders), our service providers, professional advisers such as accountants and lawyers, and government entities. We do not sell personal information, we do not use it for targeted advertising, and we do not engage in profiling that requires an opt-out.

9. Artificial Intelligence (AI) Policy: Integrity and Stewardship

9.1. Our Commitment to Human Craft

The Coloura Collective was founded to counter systemic barriers and redefine creative success for artists of the global majority (a.k.a BIPOC). We believe that genuine creation is an act of human intellect, labor, and cultural specificity—qualities that AI cannot replicate.

This policy ensures that every piece of art, item or craft sold on our platform is compensated fairly and that our organizational practices actively mitigate the negative environmental and ethical costs of AI development, promoting a truly equitable and resilient creative ecosystem.

9.2. Creative Use and Integrity

This section defines the acceptable use of AI for creators and internal staff. AI must never be used to generate the final, client-facing concept or execution that is marketed as a creator’s unique work. The final product must represent a significant creative investment of human labor, strategy, and judgment.

9.3. Authorship and Compensation

We actively address market devaluation by requiring transparency and ensuring all compensation goes to human creators.

The Authorship Mandate: The creator must hold full and exclusive legal authorship over the final piece. All submitted works must represent a substantial investment of human creative labor, strategic curation, and original conceptualization.

Compensation Focus: Fees and commissions are paid exclusively for the artist’s strategic insight, cultural context, and human labor, not for the speed of machine output (AI bots).

9.4. Ethical and Environmental Stewardship

Coloura Collective recognizes the environmental and global equity strain of AI infrastructure and commits to mitigating harm through deliberate procurement choices.

Acknowledging AI’s impact on marginalized creators. Coloura Collective acknowledges that AI development has intensified existing inequities faced by artists of the global majority. From the extraction of cultural labor to systems that replicate bias or dilute authorship, marginalized creators often carry a disproportionate share of technological harm. As a platform built to champion their brilliance, we affirm that AI must support human creativity—not replace, overshadow, or appropriate it.

Environmental justice and water impact. We recognize the environmental burden tied to AI infrastructure, particularly the water-intensive nature of data centers that support AI technologies. These facilities can consume significant amounts of potable water for cooling and energy production, often sited near or within communities already facing water scarcity or environmental neglect, those very communities we want to center always. Coloura Collective is committed to advocating for AI practices that do not deepen resource inequity, and to remaining vigilant about the environmental impact of the tools and vendors we choose.

As AI continues to infiltrate every aspect of human society, Coloura Collective will continue to uplift human-made art and will adapt our AI policy as needed.

9.5. AI and Your Personal Information

Confirm: We do not use your personal information to train AI models, and we do not put Customers’ or Sellers’ personal information (such as names, addresses, payment, tax, or ID details) into public AI tools. We do not make decisions with legal or similarly significant effects on you, such as approving a Seller or removing a shop, using AI alone; a person reviews those decisions.

10. Data Security and Breach Notice

We use reasonable physical, technical, and administrative safeguards to protect personal information. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

If there is a data breach. If we learn that unauthorized people have gained access to your personal information in a way that creates a risk to you, we will investigate right away and stop the exposure. As required by the Illinois Personal Information Protection Act (815 ILCS 530) and similar laws, we will notify affected people in the most expedient time possible and without unreasonable delay. Our notice will describe what happened, what information was involved, and the steps we are taking. It will include contact details for the national consumer reporting agencies and the Federal Trade Commission, and information about fraud alerts and security freezes. Where the law requires, we will also notify the Illinois Attorney General and other state regulators. Please contact us right away if you suspect your account has been compromised.

11. Children’s Privacy

The Platform is not directed to individuals under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

12. Third-Party Links and Services

The Platform may contain links to third-party websites or services. We are not responsible for their privacy practices or content. Independent Sellers may also have their own policies for information you give them directly.

13. International Transfers

The Platform is intended for use in the United States. If you access it from outside the United States, your information may be transferred to and processed in the United States, where privacy laws may differ from those of your country.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top shows when this version was published. If we make material changes, we will notify you by email or a notice on the Platform. Continued use of the Platform after changes are posted means you accept the revised policy.

15. Accessibility

If you need this policy in another format, contact us and we will help. See also our Accessibility Statement.

16. Contact Us

For questions about this Privacy Policy or our data practices, or to make a request or appeal:

Coloura LLC dba Coloura Collective  |  Email: hello@coloura.co  |  250 Parkway Dr, Ste 150, Lincolnshire, IL 60069