Customer service
What 10NECTAR DIGITAL ARTHOUSE collects, why it is needed, where it goes, and the choices available to you. Last updated August 30, 2026.
10NECTAR DIGITAL ARTHOUSE is responsible for the personal information it decides to collect and use through 10nectar.com. Privacy and data requests may be sent to support@10nectar.com with the subject “Privacy request.”
Use the email address connected to your order, subscription, or message where possible. Do not send complete payment-card details, passwords, government identification, or other sensitive information by email.
Cloudflare delivers and protects the website and may process technical request information such as IP address, request time, requested page, browser or device details, and security signals. 10NECTAR uses a one-way hash derived from the visitor address for short-term rate limiting; the raw address is not placed in the 10NECTAR rate-limit table.
The site stores cart selections and the external-media privacy choice in your browser’s local storage. This information stays on that device and is not used for advertising or behavioral profiling. 10NECTAR does not use session storage or set analytics or advertising cookies.
A minimal first-party measurement system is prepared but currently disabled. When explicitly enabled on the final 10nectar.com host, it may record allowlisted public page and conversion events without cookies, visitor IDs, session IDs, IP addresses, emails, full URLs, raw query strings, Stripe identifiers, Commission content, protected links, fingerprinting, or external analytics scripts. Analytics rows are scheduled for deletion after 90 days.
When you deliberately subscribe to Through Time, 10NECTAR collects the email address you enter, the signup location or source, subscription status, the date and time of signup, and the current consent notice version. A protected subscriber record is kept in Cloudflare R2 and the address is added to the designated Through Time list in Brevo. This is used only to manage the subscription, send Through Time emails, document the signup, prevent duplicate records, and honor unsubscribe requests.
Through Time is optional. You may unsubscribe at any time through the signed link in an email, by replying “unsubscribe,” or by emailing support@10nectar.com. A minimal suppression record may remain to honor that choice. 10NECTAR does not automatically add a purchaser, gift-card customer, Commission customer, or inquiry contact to Through Time without a separate checkbox and submission.
Stripe Checkout may collect your name, email address, billing or shipping details where required, payment information, device and fraud-prevention information, and transaction details. Stripe handles complete card details; 10NECTAR does not request or store complete card numbers or security codes.
10NECTAR receives the customer name and email, Stripe customer and transaction identifiers, purchased item, amount, payment status, coupon information where used, and delivery details needed to fulfill and support the order. Apparel pre-order emails may also include preferred size, quantity, and ship-to city or state.
Brevo receives the name and email details needed to send receipts, private delivery links, gift-card details, Commission messages, payment-failure notices, and customer-service email. These service messages are tied to the purchase or request and do not add the recipient to Through Time.
When you start a commission, 10NECTAR collects the selected tier and add-ons, your project brief, optional reference files and filenames, customer name and email from Stripe, payment and order identifiers, approval or revision choices, change requests, project status, and delivery records.
Before Stripe Checkout opens, the brief and reference details are placed in a protected, temporary Cloudflare R2 intake record. Stripe receives an opaque intake identifier, the Commission deposit description and amount, and the payment information it needs; the brief, filenames, and protected R2 object keys are not copied into Stripe metadata. Completed intake details become the authoritative D1 Commission record. Abandoned temporary intake records and their references are scheduled for deletion after seven days.
Reference, concept, and final files are stored in protected Cloudflare R2. Commission state, payment identifiers, authorization tokens, delivery dates, check-in state, and the durable notification outbox are stored in Cloudflare D1. Unique review and studio links function like passwords; keep them private. Do not include medical, financial, government-identification, password, or other unnecessary sensitive information in a brief or reference file.
After final delivery, Brevo may hold the customer name, email, PAST_CUSTOMER status, top_of_funnel stage, and last-delivery date for operational customer history and service communication. This does not add the customer to the Through Time list. One non-promotional customer-service check-in is scheduled 30 days after final delivery; it asks about the completed Commission and does not advertise another product or create a marketing subscription.
When an artist submits work through Careers, 10NECTAR collects the artist name, contact email, one or more public social or portfolio links, an optional short introduction, and 5–10 submitted artwork files and filenames. The information is used only to review the submission, prevent obvious duplicates or abuse, contact the artist if there is a fit, and handle related privacy or legal requests. A submission does not create employment, representation, publication, placement, partnership, or a contract, and it does not subscribe the artist to Through Time.
Submission metadata is stored in protected Cloudflare D1 and artwork files are stored in protected Cloudflare R2. Files are not published by the submission form, object keys are not public authorization, and there is no public download route. Artist submission data is scheduled for deletion after 180 days unless a temporary retention hold is reasonably needed for an active dispute, rights protection, or law.
When you email 10NECTAR, the studio receives your email address and anything you choose to include, which may include your name, order details, business information, website or social link, city, project direction, or supporting attachments. This information is used to answer the request, provide support, prepare a quote, or keep a record of the conversation.
Information is used to provide requested products and services, process and document payments, deliver digital files, manage commissions, review artist consideration submissions, answer messages, send subscribed publications, prevent fraud and misuse, maintain website security, keep required business records, enforce agreements, and comply with law.
Where applicable, processing is based on performing a contract or taking requested pre-contract steps, your consent for Through Time and optional external media, legitimate interests in operating and protecting a small creative business, and legal obligations such as tax, accounting, fraud, or dispute records.
Cloudflare provides hosting, network security, D1 database, R2 file storage, and request processing. The 10NECTAR Worker/server manages business logic, authorization, private delivery, Commission state transitions, and event routing. Stripe provides checkout, payment processing, saved payment-method authorization for approved Commission balances, and fraud prevention. Brevo manages separately consented Through Time contacts, delivers order and Commission service email, and stores limited post-delivery customer attributes. Replies and direct requests are received through the configured support mailbox. Spotify receives information only if you load its embedded player or leave the site for Spotify.
These providers process information only for their services and under their own terms and privacy notices. Information may also be disclosed when you direct it, to professional advisers when reasonably necessary, to protect rights or safety, or when required by law. 10NECTAR does not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising.
Hashed rate-limit records are used only for short-term security and are removed during routine cleanup after 24 hours. Device-local cart information remains until checkout succeeds, you remove it, or browser storage is cleared. The saved external-media choice remains until you change it or clear browser storage. Temporary Commission intake records and abandoned reference uploads are scheduled for deletion after seven days.
Through Time subscription information is kept while the subscription is active. After unsubscribe or consent withdrawal, 10NECTAR may retain a minimal suppression record so the address is not added again by mistake. Artist consideration submissions and their protected artwork files are scheduled for deletion after 180 days unless a temporary retention hold is required for an active dispute, rights protection, or law. Commission briefs, references, artwork, and project communications are normally kept for up to 24 months after final delivery or closure unless a longer period is needed for support, a dispute, rights protection, or law.
Order, payment, refund, tax, accounting, and related business records may be kept for up to seven years after the transaction or longer when law or an active dispute requires it. Other inquiry and partnership messages are reviewed and deleted when no longer reasonably needed for the conversation or business record.
Depending on where you live and which law applies, you may request access to personal information, correction, deletion, a portable copy, restriction or objection, withdrawal of consent, or an opt-out from applicable sale, sharing, targeted advertising, or optional tracking. Because 10NECTAR does not sell personal information or use targeted advertising, there is currently no sale or advertising profile to opt out of.
Withdrawing Through Time consent stops newsletter and other marketing-list delivery. It does not prevent necessary receipts, private delivery, payment or fraud messages, active Commission workflow notices, replies to support or privacy requests, or the one-time non-promotional Commission service check-in. A Commission purchase alone never creates Through Time consent.
10NECTAR may need to verify your identity using information already connected to the request and may retain or decline to delete information where legally permitted or required. Authorized-agent requests may require proof of authority. You will not be discriminated against for exercising an applicable privacy right.
Requests are acknowledged and handled within the period required by applicable law; 10NECTAR’s target is 30 days. You may also complain to the privacy or data-protection authority where you live when that right applies.
10NECTAR is based in North Carolina and serves customers globally. Information may be processed in the United States and other countries where the listed providers operate, subject to the safeguards available through those providers and applicable law.
The website is not directed to children under 13, and 10NECTAR does not knowingly collect personal information from a child under 13. A parent or guardian who believes a child submitted information should contact the studio for review and deletion.
This notice will be updated before materially different collection, optional analytics, advertising tracking, or new data uses are activated. The updated date will change when a material revision is published.