Privacy policy

Who is responsible

Ototee decides how the information described here is used. Write to contact-us@ototee.com with any question about it.

What we collect when you order

• —Your name, email address and phone number.
• —Your delivery address, which we check against a mapping service to help spot location errors.
• —What you ordered, what it cost, and any tax charged.
• —The payment reference PayPal gives us. We never receive your card number.

Why we use it

To take payment, produce your order, deliver it, send your confirmation and tracking, and answer you if you write to us. We also keep order records for as long as tax and accounting rules require.

We do not sell your information, and we do not use it to advertise to you.

Who else sees it

• —PayPal, to take payment. PayPal is a controller of your payment data in its own right and applies its own privacy policy.
• —Prodigi, our print partner, which receives your name and delivery address so it can print, pack and post your order — and nothing more. Prodigi produces our US orders inside the United States.
• —Microsoft Azure, which hosts this site, stores our data, verifies delivery addresses and sends our email. Order data is stored in the United States.
• —Anyone we are legally required to disclose it to.

Optional visit analytics

Only if you accept analytics, we measure visits and time on page to understand interest in the artwork. Before acceptance, after rejection or withdrawal, and when Do Not Track or Global Privacy Control is enabled, no optional analytics events are sent or recorded.

• —A random visitor identifier is hashed before being stored in analytics. It lets us recognise repeat visits but is not a name or email address. We treat this as pseudonymous information, not a guarantee of anonymity.
• —If an accepted visitor cookie is unavailable, a daily-changing hash can be used instead. Raw IP addresses are not stored in our application analytics records. Hosting and security services process requests separately to operate and protect the site.
• —We record the page path only. Query strings and anything after a # are dropped before they leave your browser.
• —We record the site that linked you, as a hostname only.
• —Your country is guessed from your browser's time zone. We do not look your IP address up in a location database.
• —We record your screen width as one of three sizes: mobile, tablet or desktop.
• —We record how long the page was actually visible.
• —With analytics consent, we count selected interactions such as size and frame choices, gallery use, adding to the cart, checkout stages and successful contact or newsletter requests. These events contain public product identifiers and action categories, not names, email addresses, messages or delivery details.
• —The owner's own dashboard is left out of these figures entirely.
• —Do Not Track and Global Privacy Control disable optional analytics, even if a previous choice allowed it.

Cookies and local storage

We ask before setting anything that is not strictly necessary, and nothing optional is set until you say yes. You can change your answer whenever you like from “Cookie settings” at the foot of any page — refusing is one click, exactly like agreeing.

Strictly necessary, set without asking because the site cannot work otherwise: a session cookie if you sign in, lasting thirty days or until you sign out; a sign-in session for the owner's private dashboard, never set for visitors; and a small cookie remembering the cookie choice you made, so we stop asking. We ask again after six months.

Optional, and only if you agree: one analytics cookie holding a random identifier, kept for a year. It supports repeat-visit measurement and is not used for advertising. Withdraw your choice and the visitor cookie is deleted from your browser and further analytics collection stops.

If your browser sends Do Not Track or Global Privacy Control we treat that as a refusal: no optional cookie is set, and you are not asked at all.

Your cart and choice of inches or centimetres are kept in your browser's local storage. Cart selections are sent when you request a checkout total or begin checkout. Clearing browsing data removes these choices.

Your account

Placing an order opens an account under the email address you gave at checkout, so you can come back and see what you have bought. If that address already has an account, the order joins it rather than making a second one.

There is no password. A requested sign-in link works once and expires after fifteen minutes; the link in an order confirmation lasts seven days. The account contains your email, a name supplied with an order, account and sign-in dates, subscription preference, and a one-way hash of any outstanding sign-in token, not the token itself.

The newsletter first emails a confirmation link. We add a new subscriber record only after confirmation; the email service necessarily processes the address to deliver that message and may retain operational logs.

Ordering or signing in does not enroll you in release announcements or reverse an unsubscribe choice. Join through a confirmed newsletter link or the explicit subscription control in your account. Every release announcement carries an unsubscribe link, and leaving the list does not affect your orders or essential order messages.

Camera room preview

The room preview uses your device camera only when you choose to start AR or camera preview and allow access. Ototee does not record, upload, or store your camera feed. The artwork model and desktop QR code are generated on your device.

The in-page camera stops when you close the preview, leave the page, or switch away from it. On supported devices, AR may open your operating system's viewer, which manages its own camera permissions and any screenshots you choose to take. No microphone or location access is requested.

Notes and photos you post

If you own a piece you can leave a note about it and attach a photo. Both are read by a person before anything appears on the site, and neither is published if we do not publish it.

A published note shows the first name and last initial from your order, never your email address or your full name.

We re-encode every photo when it arrives, which removes the information cameras attach to a picture — including the location where it was taken. We store only the re-encoded copy, never the original file.

If a note is rejected, any photo attached to it is deleted. To take down something already published, write to us and we will remove it.

When you write to us

A message sent through the contact form reaches us by email, and we also keep a copy — the subject, the message and the address you gave — so that we can answer it and see which enquiries are still outstanding.

Nothing else about the request is recorded. We do not store your IP address, your browser or anything that would identify the device you wrote from.

Affiliate applications and promo codes

If you apply as an affiliate, we store your name, email, country, website and social links, audience description, message, application status, and acceptance of the program terms. We use these details to review and manage the partnership, not to enroll you in marketing. Partner details are visible only to the owner in the private dashboard.

A promo code entered at checkout is stored with the order and its discount. We associate it with the referring partner to calculate commissions on confirmed payments, excluding tax. Delivery dates, confirmed refunds, refund allocations, and manual payout references are retained for reconciliation. We compare the checkout and PayPal payer emails with the partner email to detect self-referrals.

This pilot uses checkout codes only. It adds no referral cookie, link tracking, advertising pixel, or third-party affiliate service. Partners receive commission statements, not customer names, email addresses, phone numbers, or delivery addresses. Payment details are arranged directly after partner approval; the application form does not collect bank details.

How long we keep things

• —Analytics records delete themselves automatically after 400 days.
• —Order records are kept for as long as tax and accounting law requires, then deleted.
• —Messages sent through the contact form are kept as long as needed to deal with them.
• —Affiliate applications are kept while under review or needed to manage the partnership. Commission, refund, and payout records are kept for applicable tax and accounting requirements. Contact us to request correction or deletion of application details; records that must be retained by law may be kept separately.

Your rights

You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. Write to us and we will answer within a month.

If you live in California, you also have the right to know what is collected and to whom it is disclosed, the right to deletion and correction, and the right not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by California law.

Analytics records are pseudonymous rather than labelled with your name or email. Write to us about an access or deletion request; we will assess what records can be located and what information we need to handle it.

Security

The site is served over HTTPS. Our systems reach the database and the email service using managed identities rather than shared passwords. Access to order data is limited to the people who need it to fulfil your order.

No system is perfect. If we ever discover a breach affecting you, we will tell you.

Children

This site is not intended for children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, write to us and we will delete it.

Changes

If this policy changes, the date at the top of the page changes with it. Significant changes will be highlighted on the site.