🚧 This site is still under construction and not yet functional.

Privacy Policy

Effective date: July 29, 2026

This Privacy Policy describes how Cypress Oak Studios, LLC ("we," "us," or "our"), operating stevetex.com, helentheartist.com, and cypressoakstudios.com (collectively, "the Sites"), collects, uses, and protects your personal information when you visit or make a purchase from us.

1. Who We Are

Cypress Oak Studios, LLC is an art studio based in Washington State offering fine art photography and paintings for viewing and purchase.

Privacy inquiries: info@stevetex.com

2. Information We Collect

Information you provide directly:

  • Contact form — your name, email address, and message
  • Purchase orders — your name, email address, and shipping address. Payment card details are processed entirely by Stripe and are never transmitted to or stored on our servers.
  • Optional SMS order updates — if you actively opt in, your US mobile number plus the date, source, and disclosure version of your consent
  • Internal staff alerts — an artist or designated staff member's name, mobile number, signature, consent date, and disclosure version

Information collected automatically:

  • Usage data — pages visited, time on site, referring URLs, browser type, device type, and approximate location (via Google Analytics 4)
  • Cookies — analytics cookies placed by Google Analytics to measure traffic and usage patterns

3. How We Use Your Information

We use the information we collect to:

  • Fulfill your orders and communicate about them
  • Respond to contact form inquiries
  • Send order confirmations and shipping updates
  • Send transactional SMS order updates to customers who expressly opt in
  • Send internal new-order alerts to artists and staff who separately opt in
  • Analyze site traffic and improve the Sites
  • Comply with applicable legal obligations

We do not sell, rent, or trade your personal information to third parties.

4. Mobile Messaging Privacy

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. We do not sell or rent mobile numbers or transfer SMS consent. We disclose mobile information only to service providers that help us operate the transactional messaging program, such as Twilio, or when required by law.

Message frequency varies. Customers typically receive 1–5 messages per order; opted-in artists or staff may receive up to one alert per paid order on the site they support. Message and data rates may apply. Reply STOP to opt out or HELP for help. See our Mobile Terms and SMS Consent page.

5. Third-Party Services

We rely on the following third-party providers, each of which may process your personal data as described:

ServicePurposePrivacy Policy
StripePayment processingstripe.com/privacy
Google AnalyticsWebsite analyticspolicies.google.com/privacy
ResendTransactional email deliveryresend.com/privacy
Amazon Web ServicesImage storage and CDN deliveryaws.amazon.com/privacy
VercelWebsite hostingvercel.com/legal/privacy-policy
TwilioTransactional customer order updates and internal staff order alertstwilio.com/legal/privacy

6. Cookies

We use cookies solely through Google Analytics to understand how visitors use the Sites. These cookies do not identify you personally.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on or by adjusting your browser's cookie settings.

7. Data Security

We use reasonable technical and organizational safeguards to protect your data, including HTTPS encryption, access controls, and reputable cloud providers. No method of internet transmission is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

  • Order records — retained for as long as reasonably necessary for business and legal purposes
  • Contact form messages — forwarded to our email inbox; not stored in a separate database
  • SMS consent records — retained while you participate in the program and afterward as reasonably necessary to document consent and opt-out requests
  • Analytics data — retained per Google Analytics default settings (26 months)

9. Your Rights

EU and UK residents (GDPR)

You have the right to:

  • Access — request a copy of data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data
  • Portability — receive your data in a machine-readable format
  • Objection — object to processing based on our legitimate interests

To exercise any of these rights, email info@stevetex.com. We will respond within 30 days.

Washington State and California residents may have additional rights under applicable state privacy laws. Contact us for more information.

10. Children's Privacy

Our Sites are not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently done so, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect any changes. Continued use of the Sites after updates are posted constitutes acceptance of the revised policy.

12. Contact Us

Cypress Oak Studios, LLC
Washington, USA
info@stevetex.com

Cart

Your cart is empty.