Privacy Policy — ENDVR Co

ENDVR Co LLC(“ENDVR Co,” “we,” “us,” or “our”) operates endvrco.co and related services (the “Site”). We sell gallery-quality canvas art printed and shipped within the United States.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what your rights are. If you have questions, contact us at privacy@endvrco.co.

Information you provide directly:

• Order information: Name, email address, shipping address, and phone number when you place an order.
• Payment information: We do not store your payment card details. All payments are processed by Stripe, Inc., a PCI-DSS Level 1 certified payment processor. We receive only a payment confirmation and last four digits of your card.
• Email communications: If you email us or subscribe to our email list, we retain that correspondence.
• Newsletter signups: Email address if you opt in to marketing communications.

Information collected automatically:

• Log data: IP address, browser type, pages visited, time and date of visit, referring URL, and other standard log information.
• Cookies and similar technologies: We use essential cookies to operate the site (e.g., shopping cart, session management). We may use analytics cookies to understand how visitors use the site. You can disable cookies in your browser settings; this may affect site functionality.
• Device information: Device type, operating system, and browser.

• Process and fulfill orders: Your name, email, and shipping address are shared with our print-on-demand fulfillment partner (Prodigi) to print and ship your order.
• Payment processing: Order information is passed to Stripe to process your payment securely.
• Order communications: We use your email to send order confirmation, shipping notification, and tracking information. These are transactional — you cannot opt out while your order is active.
• Customer support: To respond to your questions and resolve issues.
• Marketing (only with consent): If you subscribe to our email list, we may send you information about new products, promotions, and updates. You can unsubscribe at any time via the link in any email.
• Site improvement: Analytics data helps us understand how visitors use the site so we can improve it.
• Legal compliance: We may use or disclose your information to comply with applicable laws, respond to legal process, or enforce our rights.

We do not sell your personal information. We share it only with:

• Stripe, Inc. — Payment processing. Stripe's privacy policy: stripe.com/privacy
• Prodigi Ltd. — Print fulfillment and shipping. Your name and shipping address are transmitted to fulfill your order.
• Email service providers — For transactional and marketing emails. These providers are contractually prohibited from using your data for their own purposes.
• Analytics providers — Aggregated, anonymized usage data to improve the site.
• Law enforcement or legal process — When required by law, court order, or to protect our legal rights.
• Business transfers — If ENDVR Co is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you in advance.

We retain order and customer data for seven (7) years to comply with tax and accounting obligations. Marketing email subscriptions are retained until you unsubscribe. You may request deletion of your personal data (subject to legal retention requirements) by contacting privacy@endvrco.co.

We implement commercially reasonable technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These include HTTPS encryption for all data in transit, and we use vetted third-party services (Stripe, Supabase) that maintain their own security certifications.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

Depending on your location, you may have the following rights:

California Residents (CCPA/CPRA):

• Right to Know: Request disclosure of personal information we have collected about you, the sources, the purposes, and any third parties it was shared with.
• Right to Delete: Request deletion of personal information we hold about you, subject to certain exceptions (e.g., legal retention requirements).
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for advertising purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

European Residents (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to processing

To exercise any of these rights, contact us at privacy@endvrco.co. We will respond within 45 days (or as required by applicable law). We may need to verify your identity before processing your request.

Our Site is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at privacy@endvrco.co and we will delete it promptly.

Our Site may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. If we make material changes, we will notify you by email (if you have an account or order history with us) or by posting a notice on the Site. Your continued use of the Site after any changes constitutes acceptance of the updated policy.

Questions, requests, or complaints about this Privacy Policy or our data practices:

ENDVR Co LLC
New Jersey, United States
Email: privacy@endvrco.co

If you are a California resident and we fail to respond to your request within 45 days, you may contact the California Attorney General's office.