Last updated

2 July 2026

Who we are

This Privacy Policy describes how Guild 79 LLC (registered in Wyoming, United States, registered address 30 N Gould St, Ste N, Sheridan, WY 82801) collects, uses, and protects your personal information when you visit guild79.com or make a purchase. We can be reached at hello@guild79.com, and on privacy matters at privacy@guild79.com.

Guild 79 LLC is the controller responsible for your personal information across the markets we serve: the United States, Turkey, Australia, New Zealand, Japan, South Korea, Singapore, and Hong Kong. Depending on where you are, that responsibility is framed by your local data protection law, including US state privacy laws such as the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), Turkey's Personal Data Protection Law (KVKK, Law No. 6698), Australia's Privacy Act 1988 and the Australian Privacy Principles (APPs), New Zealand's Privacy Act 2020, Japan's Act on the Protection of Personal Information (APPI), South Korea's Personal Information Protection Act (PIPA), Singapore's Personal Data Protection Act (PDPA), and Hong Kong's Personal Data (Privacy) Ordinance (PDPO).

For Singapore, our Data Protection Officer can be reached at privacy@guild79.com.

What we collect

• Order information · your name, shipping address, billing address, email, phone number, and order details. Required to make and ship the piece.
• Payment information · processed directly by Shopify Payments (powered by Stripe). We do not see or store your full card number, only the last four digits, the card brand, and the authorisation result.
• Browser and device information · type of browser, operating system, screen size, language, IP address, and pages visited on our site. Collected automatically when you visit.
• Communication · the contents of any email or contact-form message you send us.

For visitors in Hong Kong, this Privacy Policy serves as our Personal Information Collection Statement under the PDPO. It is linked wherever we collect personal information, including checkout and our contact forms.

How we use what we collect

• To make and ship the piece you have ordered
• To send you order confirmation, production updates, shipping notifications, and the provenance certificate
• To respond to your messages and provide customer service
• To verify identity for high-value orders, as part of our anti-fraud and customer-verification checks
• To analyse aggregate site traffic and improve the site experience
• To comply with our legal obligations under tax, customs, consumer protection, and accounting law

We do not sell your personal information. When our advertising is active, limited event data is shared with Meta for ad measurement and targeting, as described in "Advertising and measurement partners" below, and you can opt out at any time. We do not use your data for purposes beyond those described in this policy.

Cookies and similar technologies

We use cookies in three categories:

• Strictly necessary · cart functionality, checkout, fraud prevention, language preferences. Cannot be disabled. The site does not work without them.
• Analytics · aggregated traffic data to understand which pages visitors find useful, using Shopify's built-in analytics.
• Marketing · Meta (Facebook and Instagram) advertising technologies, used for the measurement and targeting described in "Advertising and measurement partners" below and governed by the regional consent rules that follow.

Our consent banner is geo-aware. For visitors in Turkey, non-essential cookies are loaded only with your KVKK opt-in consent. For visitors in the United States, marketing technologies operate on an opt-out basis: you can decline them at any time via the "Do not sell or share my personal information" page or by enabling a Global Privacy Control signal in your browser, which we honour automatically. For visitors in Australia, New Zealand, Japan, South Korea, Singapore, and Hong Kong, our use of analytics and marketing cookies is disclosed here and can be declined the same way. Strictly necessary cookies are always active because the site cannot function without them.

Advertising and measurement partners

When our advertising is active, we work with Meta Platforms, Inc. (Facebook and Instagram) to measure how our advertising performs and to reach people likely to be interested in our work. To do this, the site shares event data with Meta: pages visited, products viewed, items added to the cart, checkout steps, purchases, and the fact that an enquiry form was submitted.

This event data can include your IP address, browser and device information, Meta's own cookie identifiers, and, at checkout, your name, email address, phone number, and address in hashed form. Hashing converts these details into a fixed code before they leave the platform; Meta uses it to match events to its own accounts for measurement and ad delivery, as described in Meta's Business Tools terms. We never share your card details or the contents of your messages.

Some US state laws treat this kind of disclosure as "sharing" for targeted advertising. You can opt out at any time: use the "Do not sell or share my personal information" page, enable Global Privacy Control in your browser, or decline marketing cookies where the consent banner is shown. In Turkey, these technologies stay off unless you accept them in the consent banner. Opting out does not affect your ability to browse, order, or use the site.

Where a consent banner is shown, you can set cookie preferences there at any time. You can also use the "Do not sell or share my personal information" page linked in the footer, a Global Privacy Control signal in your browser, or your browser's own privacy controls. Declining analytics or marketing cookies does not affect your ability to browse, order, or use the site.

Who has access to your data

• Shopify Inc. · the platform that runs the storefront, processes payments, and serves the site infrastructure. Shopify also processes order and browsing data across its platform to operate checkout, optimise the payment methods shown to you, power on-site search and filtering, prevent fraud, generate order documents, and send transactional messages on our behalf, as described in Shopify's Privacy Policy. Shopify may also use this data across its platform to improve its products and personalise its services, including advertising services; you can opt out at any time via the "Your Privacy Choices" link in the footer.
• Payment processors · Shopify Payments (powered by Stripe), the relevant processor for your transaction
• Couriers · DHL Express, FedEx, or the equivalent for shipping the piece (name and shipping address only)
• Editioned · the SaaS edition-tracking app that issues your provenance certificate (order number, edition number, and verification token only; no payment or full address)
• Google · Google Workspace hosts our email, so messages you send us are processed by Google as our mail provider. If you choose "Sign in with Google" for your customer account, we also receive your name and email address from Google. Email-code sign-in is always available if you prefer not to use Google.
• Meta Platforms · advertising measurement and targeting when our advertising is active, receiving the event data and hashed identifiers described in "Advertising and measurement partners" above. Never your card details or the contents of your messages.
• Email service provider · for sending order confirmation, production updates, and the certificate (Shopify Notifications)
• Tax and accounting providers · only as required by law, for the entity's tax obligations
• Government authorities · only if compelled by valid legal process, or for customs disclosure on international shipments

We do not sell your personal information to data brokers, and we do not rent or trade customer lists. Sharing with the providers and partners above is limited to the purposes described in this policy, and the advertising sharing described above can be opted out of at any time.

How long we keep it

We retain personal information for the periods required by:

• Tax and customs law in the United States and the destination country (typically 7 years from the transaction)
• Consumer protection law, for the statutory period
• Fraud-prevention and verification outcomes (not identity images, which are deleted after review), retained up to 5 years from the transaction

Order records that support after-sales service are kept while you own the piece; you can ask us to delete them at any time.

Marketing-list email addresses are retained until you unsubscribe; you can unsubscribe from any email by clicking the link in the footer of that email.

Your rights

The rights available to you depend on your jurisdiction. Across the markets we serve, you may have the right to:

• Access · a copy of the information we hold about you
• Correct · any information that is inaccurate or incomplete
• Delete · your personal information (subject to records we must keep by law)
• Opt out · of the sale or sharing of personal information and of targeted advertising, via the "Do not sell or share my personal information" page, a Global Privacy Control signal, or the consent banner where shown.
• Withdraw consent · for marketing or non-essential cookies, at any time

How these rights apply depends on where you are:

• United States · under the CCPA/CPRA and other US state privacy laws, you may request access to, correction of, and deletion of your personal information, and opt out of any sale or sharing. We currently fall below the revenue and data-volume thresholds that make these laws mandatory for us, but we honour access, deletion, and opt-out requests as a matter of practice. We do not discriminate against you for exercising these rights.
• Turkey · under the KVKK you may learn whether your data is processed, request information and correction, request deletion, and object to processing that produces a result against you.
• Australia · under the Privacy Act and the APPs you may request access to and correction of your personal information.
• New Zealand · under the Privacy Act 2020 you may request access to and correction of your personal information.
• Japan · under the Act on the Protection of Personal Information (APPI) you may request disclosure, correction, and cessation of use of your personal information.
• South Korea · under the Personal Information Protection Act (PIPA) you may request access to, correction or deletion of, and suspension of processing of your personal information.
• Singapore · under the PDPA you may request access to and correction of your personal information by contacting our Data Protection Officer.
• Hong Kong · under the PDPO you may make a data access and correction request in respect of the personal data we hold about you.

To exercise any of these rights, email privacy@guild79.com with the subject line "Data request." We verify your identity before acting and respond within the timeframe required by your local law (and otherwise within a reasonable period). If you are not satisfied with our response, you may raise the matter with the data protection authority in your jurisdiction.

Children

The site and our pieces are intended for adult buyers. We do not knowingly collect personal information from anyone under the age of 18.

International transfers

Guild 79 LLC is established in the United States and is the controller of your personal information. You provide your data to us directly when you place an order.

Your personal data is held on our Shopify platform and is processed by us, including by our own team operating from Turkey. To produce your piece, our ateliers in Turkey receive only the manufacturing specifications; they do not receive your name, address, or any other personal details. To deliver your piece, your name and delivery address are shared with the courier (DHL Express, FedEx, or equivalent), as set out in "Who has access to your data" above. We do not transfer your personal information to our atelier or to any party not listed in this policy. Where your data crosses borders in this way, we rely on the security and contractual protections of the established providers named above (Shopify and the couriers).

Security

We use TLS encryption for all data in transit and rely on Shopify's enterprise-grade infrastructure for data at rest. Payment information is handled directly by PCI-DSS compliant processors and never touches our own servers.

No system is perfectly secure. If we ever experience a personal data breach that affects you, we will investigate promptly, notify the relevant authority where the law requires it, and notify affected individuals without undue delay where there is a risk to your rights.

Changes to this policy

We may update this Privacy Policy to reflect changes in law or our operations. The version in effect when you place an order is the version that applies to that order. Material changes are noted on the policy page with a new "Last updated" date.

Contact

General · hello@guild79.com
Privacy and data requests · privacy@guild79.com (also our Data Protection Officer for Singapore)

Guild 79 LLC
30 N Gould St, Ste N, Sheridan, WY 82801