Art for the People

Privacy Policy

Last updated: 18 July 2026

This Privacy Policy explains how Oscar Aldridge, trading as Salt Factory (“Salt Factory”, “we”, “us” or “our”) collects, uses, discloses and protects your personal information when you use our website, store and services (the “Service”). We are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”), and — where they apply to you — other privacy laws such as the EU/UK GDPR.

1. Who we are

Oscar Aldridge, trading as Salt Factory (a registered Australian business name), operates the Service and is responsible for your personal information collected through it. For any privacy questions, requests or complaints, contact us at hello@artpeople.studio.

2. What personal information we collect

We collect the following categories of personal information:

Information you provide directly:

  • Order and delivery details — your name, shipping address, email address, and order history. (The Service uses guest checkout — there are no customer accounts or passwords.)
  • Prompts and generation inputs — the text prompts and any inputs you submit to generate artwork.
  • Communications — the content of messages you send us (e.g. support enquiries).

Payment information:

  • Payments are processed by our payment processor, Stripe. Your full card number and security code are entered directly with Stripe and are not stored by us. We receive limited information such as a payment confirmation, the last four digits of your card, and the card type.

Information we collect automatically:

  • Technical and usage data — IP address, browser type, device information, pages viewed, referring URLs, and timestamps.
  • Cookies and similar technologies — see clause 7.

We do not intentionally collect sensitive information (as defined in the Privacy Act). Please do not submit sensitive information in prompts or messages.

3. How we use your personal information

We use your personal information to:

  • generate the artwork you request and operate the Service;
  • process, fulfil and deliver your orders (including via our fulfilment and payment providers);
  • communicate with you about your orders and support requests;
  • detect, prevent and investigate fraud, abuse, prohibited content, and breaches of our Terms of Service;
  • comply with our legal obligations and the requirements of our upstream providers;
  • improve and secure the Service and understand how it is used; and
  • send you marketing communications where you have opted in (you can opt out at any time).

Where the GDPR applies, our legal bases are: performance of a contract (to provide the Service and fulfil orders); your consent (for marketing and non-essential cookies); our legitimate interests (to secure and improve the Service and prevent fraud); and compliance with legal obligations.

4. When we disclose your personal information

We share personal information only as needed to run the Service:

  • Stripe (payment processing) — to process payments and prevent fraud. Stripe acts as an independent controller of payment data under its own privacy policy: https://stripe.com/privacy
  • Prodigi (print-on-demand fulfilment) — we share the artwork file and your name and shipping address so your Print Product can be manufactured and shipped to you. Prodigi and its global print network process this data under Prodigi’s privacy policy: https://www.prodigi.com/privacy-and-cookie-policy/
  • AI providers — the prompts and inputs you submit are processed by our upstream AI model providers to generate artwork and to run automated content moderation, under those providers’ terms and privacy policies.
  • Hosting — the Service and its database are hosted with DigitalOcean in Sydney, Australia; artwork files are stored in DigitalOcean’s Sydney object-storage region.
  • Email delivery — order and delivery emails are sent via Resend.
  • Error monitoring — we use Sentry to capture application errors, which may include your IP address and technical details of the request that failed.
  • Analytics — we use privacy-friendly, cookieless web analytics (Plausible) that collects aggregate usage data only and does not track you across sites.
  • Legal and safety — where required by law, court order, or to protect our rights, users or the public, or enforce our Terms.
  • Business transfers — if we sell or reorganise our business, personal information may be transferred as part of that transaction.

We do not sell your personal information.

5. Overseas disclosure

Because we ship worldwide and use international providers, your personal information may be stored or processed outside Australia — including, depending on the provider, in the United Kingdom, the European Union, the United States and other countries where our providers or their print partners operate. Where we disclose personal information overseas, we take reasonable steps to ensure it is handled consistently with the APPs and applicable law.

6. Data retention

We keep personal information only for as long as necessary for the purposes described in this Policy, including to fulfil orders, maintain business and financial records (for example, to meet Australian tax and accounting requirements), resolve disputes and enforce our agreements. When no longer required, we take reasonable steps to delete or de-identify it.

7. Cookies

We use essential cookies only: Stripe sets cookies on the payment page for secure checkout and fraud prevention, and a first-party cookie is used for operator preview access. We do not use advertising, marketing, or cross-site tracking cookies, and our web analytics is cookieless. You can control cookies through your browser settings; blocking essential cookies may prevent checkout from working.

8. Security

We take reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access, including encryption in transit, access controls, and using reputable processors (such as Stripe for card data). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights and choices

Subject to applicable law, you may:

  • access the personal information we hold about you and request a copy;
  • request correction of inaccurate or incomplete information;
  • request deletion of your information (subject to our legal retention obligations);
  • opt out of marketing at any time via the unsubscribe link or by contacting us; and
  • where the GDPR applies, exercise additional rights including data portability, restriction of processing, objection to processing, and withdrawal of consent.

To exercise any of these, contact us at hello@artpeople.studio. We will respond within the timeframes required by law. We may need to verify your identity first. There is normally no charge to access your information, though a reasonable cost-based fee may apply in limited circumstances.

10. Children

The Service is not directed to, and is not intended for use by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Complaints

If you have a privacy concern, contact us first at hello@artpeople.studio and we will try to resolve it. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. If you are in the EU/UK, you may also lodge a complaint with your local data protection authority.

12. Changes to this Policy

We may update this Policy from time to time. The current version will always be posted on the Service with a revised “Last updated” date. Material changes will be brought to your attention where required by law.

13. Contact us

Questions about this Policy or your personal information? Email us at hello@artpeople.studio.