Privacy policy
The short version: this site sets no cookies and does not track you. The only information collected is what you choose to send through the contact form, and what you give Shopify when you buy a print.
Last updated 5 November 2026
This website, rooseveltwashington.art, is run by Roosevelt Washington, an independent artist based in Virginia, USA. In this policy "I" and "me" mean Roosevelt Washington, and "you" means the person visiting the site. For the purposes of the EU and UK General Data Protection Regulation (GDPR), I am the data controller for the information described here. Questions about this policy go to [EMAIL ADDRESS].
This site does not set cookies, run analytics, load advertising, or use social media trackers. There is no cookie banner because there is nothing to consent to. The small notice at the bottom of the page is remembered in your own browser's local storage once you close it, and nothing is sent anywhere.
When online checkout opens, the cart is run by Shopify. Shopify's cart script may store your cart in your browser so it survives a page reload. That storage is strictly necessary for the cart to work and is not used to track you. Payment itself happens on Shopify's own checkout pages, which are covered by Shopify's privacy policy. If this site ever adds cookies that need your consent, this policy will be updated first and you will be asked before any are set.
Because this site does not track you, it does not respond to browser "Do Not Track" signals; there is nothing to switch off.
The contact form. If you write to me, I receive your first name, last name, email address, the topic you chose and your message. I use these to reply to you and, if it leads to a print order, an original or a commission, to carry that out. The legal basis is the steps you ask me to take before entering into an agreement, and my legitimate interest in answering people who write to me.
New-print emails. The contact form has a box for hearing about new prints and voting on what comes next. It is unticked by default. If you tick it, your consent is the legal basis for those emails, and every email carries an unsubscribe link. You can also withdraw consent at any time by writing to [EMAIL ADDRESS].
Orders. When you buy a print, Shopify collects your name, email, shipping address, and payment details. I never see your card number. Shopify passes me what I need to pack, ship and support your order: your name, address, email and what you bought. The legal basis is the contract of sale, and the legal duty to keep tax and accounting records.
Server logs. The site is hosted by GitHub Pages. Like every web host, GitHub records standard technical details of each request, such as your IP address, browser type and the page requested, in its logs for security and operation. See GitHub's privacy statement. I do not have access to those logs beyond what GitHub makes available for keeping the site running.
Instagram, WhatsApp, text and email links. Links to Instagram open Instagram, which has its own policy. The "Share this site" button uses your phone's share sheet or opens WhatsApp, your messaging app or your email app with the link already written. Nothing about that passes through this site.
I do not sell your personal information, rent it, or share it for advertising. I do not profile you. I do not send marketing to anyone who has not asked for it. I do not knowingly collect information from children under 16; if you believe a child has sent me information, write to me and I will delete it.
Only the services needed to run the site and ship your order: the form delivery service that carries contact messages to my inbox, my email provider, Shopify for orders and payments, the shipping carrier (who gets your name and address), and GitHub as host. Each of these handles information under its own policy and acts on my instructions for the work it does for me. I may also disclose information when the law requires it.
I am in the United States, and the services above store information mainly in the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, your information is transferred to the United States when you write to me or place an order. The transfer rests on the contract you ask for (your message, or your purchase), and the services I use rely on standard contractual clauses or the EU-US Data Privacy Framework for their own transfers.
Contact messages: for as long as our conversation is active, and up to two years after it ends in case you come back. Order records: for seven years, as tax and accounting law requires. New-print emails: until you unsubscribe. I delete or anonymise information once it is no longer needed.
Wherever you live, you can ask me what information I hold about you, ask me to correct it, ask me to delete it, or ask me to stop sending you emails. Write to [EMAIL ADDRESS] and I will answer within 30 days. I will never treat you differently for exercising these rights.
If you are in the EU, the UK or Switzerland, the GDPR also gives you the right to restrict or object to processing, the right to receive your information in a portable form, and the right to withdraw consent at any time without affecting what was done before. You also have the right to complain to your data protection authority. In the EU that is the authority in your country; in the UK it is the Information Commissioner's Office.
If you live in California, you have the right under the California Consumer Privacy Act to know what personal information is collected about you, to delete it, to correct it, and to opt out of its sale or sharing. I do not sell or share personal information, so there is nothing to opt out of. You may also appoint an agent to make a request for you; I will ask for proof that you authorised them. The categories I collect are identifiers (name, email, address) and commercial information (what you ordered), from you directly, for the purposes above.
Residents of other US states with privacy laws, such as Virginia, Colorado, Connecticut and Texas, have similar rights, and the same email address is the way to use them.
The site is served over HTTPS. Shopify handles payments on PCI-compliant systems. Contact messages and order details live in my email and Shopify accounts, protected by strong passwords and two-factor authentication. No system is perfectly secure, so if you have a concern, write to me.
When this policy changes, the date at the top changes with it. A change that affects how your information is used will be noted on this page for at least 30 days.
Roosevelt Washington, Virginia, USA. Email [EMAIL ADDRESS].
See also the terms and conditions.