DARTE DESIGN — PRIVACY POLICY Effective date: July 23, 2026 Darte Design ("Darte," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect when you use our website (darte.design) — in particular when you secure a spot in one of our programs, purchase from our store, or contact us — how we use it, who we share it with, and the choices and rights you have. By securing a spot, making a purchase, or otherwise submitting your information to us, you acknowledge that you have read and understood this Policy. 1. WHO WE ARE Darte Design is a human-centered design and leadership studio. We are the "controller" of the personal information described in this Policy. If you have any questions, you can reach us at: Jess@darte.design 2. INFORMATION WE COLLECT We only collect what we need to serve you. Depending on how you use the site, that includes: a) Information you give us when you SECURE A SPOT / ENROLL When you submit the enrollment ("Secure my spot") form, we collect: - First and last name - Email address - Phone number - Age - The program you're interested in - Any optional message you choose to include b) Payment information (store purchases) When you buy something from our store, payment is processed by our payment provider, Stripe. We do NOT collect or store your full card number or security code — Stripe handles that directly. We retain a record of your order (such as the item, amount, order status, and the email associated with the purchase) to fulfill and support your purchase. c) Information you give us when you contact us If you email us (for example, at Jess@darte.design), we receive your email address and whatever you choose to include in your message. d) Information collected automatically Like most websites, our site and hosting provider may automatically receive limited technical information — such as your IP address, browser type, and the pages you visit — for security, reliability, and basic analytics. We use your browser's local storage to remember small preferences, such as whether you have dismissed an announcement banner. 3. HOW WE USE YOUR INFORMATION We use the information above to: - Confirm and manage your enrollment or waitlist request, and reach out to you personally about your spot - Process and support purchases from our store - Respond to your questions and requests - Operate, secure, and improve our website and services - Comply with our legal obligations We do NOT sell your personal information, and we do not send you marketing you didn't ask for. 4. LEGAL BASES FOR PROCESSING (for visitors in the EU/UK/EEA) Where the GDPR or similar laws apply, we rely on these legal bases: - Performance of a contract — to enroll you, deliver a program, or fulfill a purchase you requested - Consent — where you have given it (which you can withdraw at any time) - Legitimate interests — to run and secure our site and communicate with people who have contacted us - Legal obligation — to keep records the law requires us to keep 5. HOW WE SHARE INFORMATION We share personal information only with service providers who help us run the studio, and only as needed to provide our services. These include: - Supabase — secure database and hosting for enrollment and order records - Stripe — payment processing for store purchases We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer (such as a merger or acquisition). We never sell your personal information. 6. INTERNATIONAL DATA TRANSFERS We work with individuals and organizations around the world, and our service providers may store or process information in countries other than your own, including the United States. Where required, we take steps to ensure your information receives an adequate level of protection when it is transferred. 7. HOW LONG WE KEEP YOUR INFORMATION We keep personal information only for as long as necessary for the purposes described in this Policy — for example, to administer your enrollment, support a purchase, or meet legal, accounting, or record-keeping requirements — after which we delete or anonymize it. 8. HOW WE PROTECT YOUR INFORMATION We use reasonable technical and organizational measures to protect your information, including access controls on our database so that submissions cannot be read back out by other visitors. No method of transmission or storage is completely secure, but we work to safeguard the information you entrust to us. 9. YOUR RIGHTS AND CHOICES Depending on where you live, you may have the right to: - Access the personal information we hold about you - Correct information that is inaccurate - Delete your information - Restrict or object to certain processing - Receive a copy of your information in a portable format - Withdraw consent you previously gave California residents have additional rights under the CCPA/CPRA, including the right to know, delete, and correct personal information, and the right not to be discriminated against for exercising those rights. Because we do not sell or "share" personal information for cross-context behavioral advertising, there is nothing to opt out of on that front. To exercise any of these rights, email us at Jess@darte.design. We will respond in line with applicable law. You may also have the right to complain to your local data protection authority. 10. CHILDREN'S AND MINORS' PRIVACY Our enrollment form is intended for people aged 13 and older, and we do not knowingly collect personal information from children under 13. If you are under 18, please only submit your information with the involvement and consent of a parent or guardian. If you believe a child under 13 has provided us information, contact us at Jess@darte.design and we will delete it. 11. COOKIES AND SIMILAR TECHNOLOGIES Our site uses only what it needs to function. We use your browser's local storage for small preferences (such as remembering a dismissed banner). Our payment provider, Stripe, may set cookies during checkout to process your payment securely and help prevent fraud. We do not use advertising or cross-site tracking cookies. 12. THIRD-PARTY LINKS Our site may link to other websites we don't control. This Policy does not apply to those sites, and we encourage you to review their privacy policies. 13. CHANGES TO THIS POLICY We may update this Policy from time to time. When we do, we will revise the "Effective date" above. Material changes will not retroactively reduce your rights without your consent. 14. CONTACT US Questions, requests, or concerns about your privacy? Contact: Darte Design Jess@darte.design