little masterpieceStart creating

Data & Compliance

GDPR and CCPA compliance information. Last updated: 4 April 2026

GDPR — General Data Protection Regulation

If you are located in the European Economic Area (EEA) or the United Kingdom, the GDPR grants you specific rights regarding your personal data. little masterpiece is committed to honouring these rights.

Legal basis for processing

We process your personal data under the following legal bases:

  • Contract performance — to fulfil your order, including artwork transformation, printing, and shipping.
  • Legitimate interest — to improve our service and respond to support requests.
  • Consent — where you have opted in to receive communications from us.

Your GDPR rights

  • Right of access — request a copy of the personal data we hold about you.
  • Right to rectification — request correction of inaccurate or incomplete data.
  • Right to erasure — request deletion of your personal data ("right to be forgotten").
  • Right to restrict processing — request that we limit how we use your data.
  • Right to data portability — receive your data in a structured, machine-readable format.
  • Right to object — object to processing based on legitimate interest.
  • Right to withdraw consent — withdraw consent at any time where processing is based on consent.

International data transfers

Your data may be processed in countries outside the EEA, including the United States and Australia. When this occurs, we ensure appropriate safeguards are in place through our service providers' data processing agreements and compliance frameworks.

CCPA — California Consumer Privacy Act

If you are a California resident, the CCPA provides you with specific rights regarding your personal information.

Categories of information collected

  • Identifiers — name, email address, shipping address.
  • Commercial information — order history and transaction details.
  • Internet activity — pages visited and interactions with the Service.
  • User-generated content — artwork images you upload.

Your CCPA rights

  • Right to know — request disclosure of what personal information we collect, use, and share.
  • Right to delete — request deletion of your personal information.
  • Right to opt out — opt out of the sale of personal information. We do not sell your personal information.
  • Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights.

Sale of personal information

We do not sell your personal information to third parties. We share data only with service providers necessary to fulfil your order, as described in our Privacy Policy.

Exercising your rights

To exercise any of the rights described above, please submit a request through our contact form.

We will respond to your request within 30 days (GDPR) or 45 days (CCPA). We may ask you to verify your identity before processing your request.