Privacy Policy

Nancy Medina Art, LLC in partnership with Combined Curiosity, Inc. and its subsidiary entities (“CC”, “we”, “us,” or “our”) value the importance of your privacy. Therefore, we handle your information responsibly, and we want you to be informed about what type of information we collect, how we use this information, and with whom it is shared. This Privacy Policy describes our practices in connection with data, and your related rights, that we collect through the websites operated by us that link to this Privacy Policy and any affiliated emails and social media pages (collectively, the “Services”).

IF YOU DO NOT CONSENT TO THE COLLECTION, USE AND DISCLOSURE OF YOUR PERSONAL INFORMATION AS SET FORTH IN THIS PRIVACY POLICY, PLEASE EXIT AND DO NOT USE THIS SITE.

What Information Do We Collect?

Like most brands, we collect information, including information considered “personal information” or “personal data” under relevant privacy laws when you interact with our Services. Typically, the information we collect falls into one of three categories: (a) information you provide directly with your mouse and keyboard, (b) information we collect when you use our Services, often with the help of tracking technologies such as cookies or pixels, or (c) information provided to us by third parties. Where required by applicable law, we obtain your consent before collecting this information. This information may include:

Contact Information: Name, phone number, postal address, email address, titles, nicknames, previous names, contact information for related persons.
Account & Payment Information: Passwords, credit, debit, or other payment card information, details, purchase history, discounts, qualification data, records of payments, and credits.
Device & Technical Information: Device identifiers and network information such as IP address, device and browser information such as browser type, operating system, and hardware specifications.
Location Information: Imprecise location data, derived from Device & Technical Information.
Online & Usage Information: Activity logs, which include web server logs, URLs that refer users to our websites, and navigation within our websites. Interactions with emails, including whether they are opened or links are clicked, along with details of website usage and the times at which activities occur, are also tracked.
Other Information You Provide: When you engage with our Services, participate in our events, respond to our surveys, take part in our promotions, or interact with us in any way, including on platforms owned by other companies, we may collect the information you provide such as comments and customer service communications.

How Do We Use Information That We Collect?

We use your information to help us achieve our vision of sharing the joy of curiosity and the thrill of discovery by connecting people around the world with their passions. For example, we use your data for the following processing purposes:

To provide the products and services that you request, including:
Collecting payments and issuing refunds for products and services you purchase
Sending you products that you purchase
Supplying or enabling access to services that you purchase
Legal Basis: Performance of a Contract
To communicate with customers, including:
Providing customer service and responding to other customer interactions
Legal Basis: Performance of a Contract
Sending marketing communications about our (or our partners’) products, services, and other initiatives that we think may be of interest
Legal Basis: Legitimate Interest for promoting our (or our partners’) products, services, and other initiatives that we think may be of interest
Sending transactional communications such as statements and invoices
Legal Basis: Performance of a Contract
To serve and administer ads, including:
Serving ads about our (or our partners’) products, services, and other initiatives that we think may be of interest to customers and others with similar profiles
Measuring and analyzing the effectiveness of the ads that we serve
Legal Basis: Legitimate Interest for advertising and measuring the effectiveness of advertising our (or our partners’) products, services, and other initiatives that we think may be of interest
To operate our business, including:
Better understanding customers interests and needs
Improving our existing products and services broadly or through personalization
Developing new products and services
Supporting internal business functions such as accounting and finance
Legal Basis: Legitimate Interest in operating and improving our business
Detecting security threats and protecting against malicious activity
Legal Basis: Legitimate Interest in keeping you and all other stakeholders safe
To engage in legal and compliance matters, including:
Complying with the law
Legal Basis: Legal Obligation
Defending and enforcing our terms of service
Legal Basis: Legitimate Interest in preventing abuse of our Services

Retention Period: We only retain Information for as long as it's needed to fulfill its relevant processing purpose(s), as permitted by law.

‍

How Do We Disclose Information That We Collect?

We may disclose the information we collect:

To our subsidiaries and brands, for the purposes outlined in this Privacy Policy. The CC subsidiary that has collected your information will be responsible for the information that is disclosed.

To our third party service providers, to facilitate the services that they provide us such as web hosting, payment processing, and analytics.

To online platforms and advertising technology companies, in connection with the uses outlined in this Privacy Policy such as serving you relevant ads while browsing the web or interacting with social media.

In addition to the disclosures reasonably necessary for the purposes identified elsewhere above, we may disclose your personal information to the extent that it is required to do so by law, in connection with any legal proceedings or prospective legal proceedings, and in order to establish, exercise or defend our legal rights.

Do We Sell Your Information?

We do not sell or exchange your information for monetary value.

Securing your Information

We will take appropriate technical and organizational measures to prevent the loss, misuse or alteration of your information.

In the event of a data breach, we will notify you and the appropriate supervisory authority promptly and take all necessary steps to mitigate the incident and protect your information.

How You Can Control Your Information - Our Records

Depending on the circumstances of the situation and where you are based, including but not limited to residents of the EEA, Switzerland, the UK, and areas of the U.S. with state-specific privacy laws such as California, Connecticut, Colorado, Nevada, Utah, and Virginia, you may be entitled to the following rights:

Right to request access to personal information we hold and rectification of any errors in your personal information.
Right to request the erasure of your personal information from our records.
Right to request the restriction of processing of your personal information.
Right to receive your personal information in a structured, commonly used and machine-readable format or in some cases have it directly transmitted to another controller, otherwise known as the right to data portability.
Right to withdraw consent at any time for the processing of any personal information that is based upon consent.
Right to lodge a complaint with a supervisory authority if you consider that your rights under the relevant privacy legislation have been violated.
Right to opt out of the sale of your personal information.
Right to limit use of your personal information for Targeted Advertising or cross-context behavioral advertising.
Right to limit use of your personal information for profiling.
Right not to receive discriminatory treatment by a business for exercising privacy rights conferred by applicable privacy regulations, such as the CCPA.

To exercise any of these rights that are applicable to where you live, please contact us using the methods provided in the “How Can You Contact Us” section below.

To stop receiving marketing emails from us at any time, please use the “unsubscribe” button found in the email. Please note that even if you opt out of receiving marketing emails, you will still receive administrative and transactional communications from us such as order confirmations. You have the right not to receive discriminatory treatment if you exercise any of the rights explained in this Privacy Policy.

How You Can Control Your Information - General Online Advertising

To learn more about your options for opting out of interest-based online advertising from third parties, please visit the below resources:

How You Can Control Your Information - Global Privacy Controls (GPC)

We honor Global Privacy Controls (GPC) signals, also known as opt-out preference signals or universal opt-out mechanisms, where required by applicable laws. GPC is a browser-based signal that indicates your choice to opt-out of the sale, sharing, and processing of personal data for targeted advertising. Learn more about how to get started here.

Cross-border Data Transfers

Information that Combined Curiosity, Inc collects may be stored and processed in and transferred between any of the countries in which Combined Curiosity, Inc operates to enable the use of the information in accordance with this Privacy Policy. For example, information collected in Toronto may be transferred outside of Canada with sufficient protections and safeguards in place.

This means that that information may be processed either in countries that have been recognized by the European Commision to offer adequate data protection, like New Zealand, or in other countries that the European Commission has not deemed to offer adequate data protection. Because safeguards need to be in place to ensure that the protection travels with the data, we use the EU Standard Contractual Clauses, standardized and pre-approved model data protection clauses.

In addition, personal information that you submit for publication on the website will be published on the internet and may be available around the world.

By using our Services, agree to such cross-border transfers of personal information.

For EU members, Combined Curiosity, Inc adheres to all GDPR standards and guidelines and is covered under recital 47 of the GDPR through its processing of personal information for certain legitimate business interests and purposes.

Whenever we process data for these purposes we will ensure that we always keep your Personal Data right in high regard and take account of these rights. You have the right to object to this processing if you wish, and if you wish to do so, please email support@combinedcuriosity.com. Please bear in mind that if you object, this may affect our ability to carry out tasks above for your benefit.

Updating this Statement

From time to time, we may update this privacy policy by posting a new version on this website. You should check this page occasionally to ensure you are familiar with any changes.

Other Websites

This website contains links to other websites.

Combined Curiosity, Inc is not responsible for the privacy policies or practices of any third party.

How Can You Contact Us?

If you have any questions about this Privacy Policy or would like to make a request to exercise your regarding our treatment of your personal information, you can contact us at support@combinedcuriosity.com or at Combined Curiosity, Inc, 5255 Winthrop Ave. Suite 2, Indianapolis, IN 46220.

You may permit an authorized agent to make requests on your behalf. Please note we may require signed, written authorization to verify the request and may also follow up with you to verify your identity before processing the request. Verification may require providing additional information such as your email address or details about past transactions such as order number. For the avoidance of doubt, a power of attorney is a valid form of authorization but not required.

California Privacy Notice & Notice at Collection

If you are a California resident, please review the below California-specific disclosures required by the California Consumer Privacy Act (CCPA) and its amendments.

This notice aims to inform you of our personal data handling practices over the past 12 months, effective from the "Last Updated" date of this Privacy Policy. We will review and update this disclosure at least once a year. Additionally, this disclosure applies to our current data practices such that it is also intended to serve you with "Notice at Collection," providing transparency into the personal data we collect online, our purposes for processing it, and other essential details. If we introduce new or significantly different data processing activities not covered in this disclosure, we will notify you as required by law, either at the time of data collection or through an earlier update to this disclosure. We reserve the right to modify this disclosure at our discretion and at any time.

We collect, store, use, and disclose your personal data for various business and commercial purposes, as outlined in this Privacy Policy. These purposes are detailed in the sections "What Information Do We Collect?", “How Do We Use Information That We Collect?”, and "How Do We Disclose Information That We Collect?" (collectively referred to as "Purposes"). The sources of personal data collection are explained in the "What Information Do We Collect?" section. The table below categorizes the personal data we collect, along with:

Examples of data types within each category
Recipients of disclosed data (including sensitive personal data)
Applicable Purposes for each category
Retention periods for each category of personal data

Note that the Purposes in the table are summarized for clarity, and you can find a more detailed explanation of each in the "How Do We Use Information That We Collect?" section.

‍

Sensitive Personal Information - We do not use or disclose “sensitive personal information” (as defined under California law) in any way that would require us to provide an opt-out opportunity under California law. If we did, you would have the right to limit the use or disclosure of that sensitive personal information.

Minors Under 16 - We do not knowingly Sell or Share personal data of minors under 16 years of age without their consent.

Right to Know - You can ask to receive personal information we have collected, including:

Categories of personal information
Sources of personal information
Business or commercial purpose for collecting, selling, or sharing personal information
Categories of third parties to whom the business discloses personal information
Specific pieces of personal information collected about the consumer