Privacy Policy

This privacy policy is in effect as of November 21st, 2024.

Who we are

Project Create (“we”), is a non-profit organization providing art education in DC. Our headquarters are located at the Project Create Arts Center, at 2208 Martin Luther King Jr. Ave. SE Washington, D.C. 20020.

Our website is located at projectcreatedc.org (the “website” or the “site”).

The user (“you”) is entitled to know what data is stored and used about them. This document outlines what data we collect, share, and store, as well as the cookies that the website utilizes and other privacy information.

For any additional questions, please feel free to reach out to the website’s administrator through email at pctech [at] projectcreatedc.org

What personal data we collect and why we collect it

While you visit our store, we’ll track:

  • Products you’ve viewed: we’ll use this, for example, to show you products you’ve recently viewed
  • Location, IP address, and browser type: we’ll use this for tasks like estimating taxes and estimating shipping.
  • Shipping address: we’ll ask you to enter this so we can, for example, estimate shipping before you place an order and then send you your order.
  • We’ll also use cookies to keep track of cart contents while you’re browsing our site.

We collect information about you during the checkout process on our store.

When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details, and optional account information like username and password. We’ll use this information to process your order and provide a good shopping experience, which includes:

  • Sending you information about your account and order
  • Responding to your requests, including refunds and complaints
  • Processing payments and preventing fraud
  • Setting up your account for our store
  • Complying with any legal obligations we have, such as calculating taxes
  • Improving our store offerings
  • Sending you marketing messages, if you choose to receive them

If you create an account, we will store your name, address, email, and phone number, which will be used to populate the checkout for future orders.

We may store comments or reviews, if you choose to leave them.

We also collect information about visitors who comment on this site for our Akismet Anti-spam service. The information we collect typically includes the commenter’s IP address, user agent, referrer, and site URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself).

Who on our team has access

Members of our team have access to the information you provide us for the use of our shop. For example, both Administrators and Shop Managers can access:

  • Order information like what was purchased, when it was purchased, and where it should be sent
  • Customer account information like your name, email address, and billing and shipping information

Our team members have access to this information to help fulfill orders, process refunds, and support you.

Our Administrators also have access to comments and their metadata in order to moderate and approve them for publication on the site.

Payment and Shipping

Paypal

We accept payments through PayPal, and we use your data to manage and process payments with PayPal. To manage payments, we use your purchase total, the purchasing currency, and your billing information. That data is stored on our servers and some of that data is passed to PayPal to facilitate and process the payment.

Please see the PayPal Privacy Policy for details about how they handle this information.

Shipping Rates, Shipping Labels and Tax

We use your data to calculate taxes for your purchase. We use the value of goods in your cart, the value of shipping, and the destination address to calculate shipping, and that data is stored on our servers and sent to Automattic.

We may also use your information to calculate shipping rates at checkout. We use the destination address, purchased product IDs, dimensions, weight, and quantities to calculate shipping rates, and that data is stored on our servers and sent to Automattic.

We also use your information to create shipping labels. We use your name, address, and phone numbers, as well as the dimensions, weight, quantities, and payment method for purchased products to create shipping labels, and that data is stored on our servers and sent to Automattic.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection and allow us to moderate.

Your comments may also be processed by a spam-detection service provided by Akismet in order to help moderate our site.

Media

Any user uploaded media and files will be stored on our servers.

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF, GPS, etc.) included, as that data will be stored on our servers with the image. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

WooCommerce and Jetpack set a number of cookies. These cookies include different pieces of data to facilitate the use of our shop and ensure a consistent and efficient experience for visitors. Please see the WooCommerce Cookies page and Jetpack Cookies page for more information on the cookies used and created by WooCommerce and Jetpack respectively.

Some embedded videos may include cookies from their source (YouTube, Vimeo, etc.) in order to track watch data and interactions with their players.

Smart Slider 3 may use cookies in the your browser to store which slide you saw last, to be able to continue from that slide after you go to another page. For more information, see the Smart Slider 3’s cookies page.

Embedded content from other websites

Pages on this site may include embedded content (e.g. videos, images, articles, maps, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

While we do not track analytics on our site ourselves, some of our partners — including Jetpack, Automattic, and DreamHost — may track and store certain anonymized analytical data about server activity, website performance, page views, referring websites, user interactions, and other usage statistics.

Who we share your data with

If you leave a comment on the site, data may be sent to and checked through an automated spam detection service provided by Akismet. Only the personal data needed to carry out its core function of protecting against comment spam is collected. Please see the Akismet Privacy page for more information about the data shared with Akismet when leaving comments.

We utilize Adobe Fonts on our website. When a request is made to Adobe’s servers for font files, it will include your IP address in order to return a response. Please see the Adobe Fonts Privacy page for more information about the data shared with Adobe when using Adobe Fonts and what it does with that data.

We may utilize Google Fonts on our website. When a request is made to Google’s servers for the font files, it will include your IP address in order to return a response. Please see the Google Fonts Privacy FAQ for more information about the data shared with Google when using Google Fonts.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. After approval of your comment, your profile picture is visible to the public in the context of your comment. Please see the Gravatar service Privacy Policy for more information on how they handle your data.

In order to further enable and improve the functionality of Jetpack, some comment data and metadata is synced to Automattic’s servers, including the comment author name, email address, URL, IP address, WordPress.com user ID (if known), and usernames and email addresses associated with connected accounts (if applicable).

We may share certain anonymized analytical data about server activity, website performance, page views, referring websites, user interactions, and other usage statistics with partners like DreamHost, Jetpack and Automattic. Please see What Data Does Jetpack Sync? and Automattic’s Privacy Policy for more details about how they handle your data. Please see DreamHost’s Privacy Policy for more information on how they handle your data.

If you request a password reset, your IP address will be included in the reset email.

WooCommerce Shipping & Tax

We use The WooCommerce Shipping & Tax Feature to facilitate tax calculation, shipping calculations and shipping label printing. That means some of your data will be shared with Jetpack and it’s creators, Automattic, and some of your data will be stored on Automattic’s servers.

Your data may also be stored on Automattic’s servers to handle support requests, prevent unauthorized access, provide an activity log, manage users, and integrate with third-party social media services. This data may include your IP address, user agent, user ID, username, email addresses, usernames and email addresses associated with connected accounts (if applicable), and site roles and capabilities.

To calculate automated taxes, we send the value of goods in the cart, the value of shipping, and the destination address to TaxJar via Automattic. Please see TaxJar’s Privacy Policy for details about how they handle your information.

To get shipping rates, we may send the destination address and purchased product IDs, dimensions, weight, and quantities via Automattic either to the carrier directly or to EasyPost, depending on the service used. That data is not stored by Automattic after they validate it and pass it to partners.

To create shipping labels, we send your name, address and phone numbers, as well as the dimensions, weight, quantities, and payment method for purchased products via Automattic either to the carrier directly or to EasyPost, depending on the service used. That data is not stored by Automattic after they validate it and pass it to partners. The shipping labels themselves are stored by both Automattic and their partners on their respective servers to make it easy to reprint labels.

Please see EasyPost’s Privacy Policy for details about how they handle your information.

Please see What Data Does Jetpack Sync? and Automattic’s Privacy Policy for more details about what user data for shipping and tax is shared with and stored by Jetpack and Automattic, and how they handle your data.

Some anonymized user data may also be sent to Jetpack and Automattic and used to help improve WooCommerce Shipping & Tax.

How long we retain your data

We generally store data about you for as long as is legally required, and for as long as we are utilizing it for the purposes it was collected for. Once we are no longer required to keep it, and we have finished utilizing it, we will remove the data from our servers. This data may include your name, email address and billing and shipping addresses.

If you leave a comment, the comment and its metadata may be retained indefinitely. This is so we can prevent spam, and so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

If you register an account on our website, we also store any personal information you provide in your user profile. User account data will be stored indefinitely, until you delete your account or until you have requested the erasure of your personal data from our servers. All users can see, edit, or delete their own personal information at any time — however, usernames cannot be changed. Website administrators can also see and edit user information, but cannot see their passwords.

If you make a purchase, your order information, billing information and shipping information are stored indefinitely. This allows us to provide support for past orders and keep a record of sales for legal and tax purposes.

What rights you have over your data

If you have an account on this site, have made a purchase or have left comments, you can request to receive an exported file of the personal data we are storing about you, including any data you have provided to us. You can also request that we erase any personal data we are storing about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

How we protect your data

The data we collect belongs to you. All user accounts are password protected. Passwords are only known by the owner of the account, and cannot be accessed by Site Administrators, Shop Managers, or any other member of our team.

All data transferred between the user’s browser and the website’s servers is fully encrypted and protected by our website host, DreamHost, and all data stored on our website’s server is encrypted and protected.

Our site is kept up to date with the latest security updates, and is regularly maintained in order to ensure the protection of user data and the stability of the website.

What data breach procedures we have in place

We regularly monitor our site for data breaches. If or when we identify a data breach, we will immediately address it and take action to mitigate issues. Users will be notified of any breaches to our site, and we will share what, if any, information we are able to identify was accessed.

Changes to this Policy

This Privacy Statement may be revised from time to time without prior notice to reflect updates in our information practices or applicable laws. To inform you of any significant changes in how we collect and use information, we will post a notice on the homepage of this website linking to the updated Privacy Statement. The effective date at the top of the Privacy Statement will indicate when the policy was last revised.