Privacy Policy

Last updated: October 19, 2026

This Privacy Policy describes how Joe Kovalck ("we," "us," or "our") collects, uses, and shares information when you visit or make a purchase from https://joe-kovalck.tropic-arts.com (the "Site").

By using the Site, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

When you use our Site, you may provide us with certain information directly, including:

• Contact details such as your name, email address, postal address, and phone number
• Payment information including billing address and payment card details (processed securely by our payment provider)
• Account information such as a username and password if you create an account
• Communications you send to us, including support requests and feedback

Information Collected Automatically

When you visit the Site, we automatically gather technical information about your device and browsing activity, including:

• Your IP address and approximate location
• Browser type and version
• Device type and operating system
• Pages visited, time spent on pages, and referring URLs
• Date and time of your visit

Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Site. These help us:

• Remember your preferences and settings
• Keep items in your shopping cart
• Understand how visitors interact with the Site
• Deliver relevant content and advertising

You can control cookies through your browser settings, though disabling them may affect how the Site functions.

Visitor Counts

We keep a private, aggregate count of visits to this Site — how many people came, which pages they read, and which website or search engine they arrived from. This count uses no cookies, is never shared with anyone else, and does not identify you. We do not store your IP address or your browser details alongside these counts.

To avoid counting the same visitor twice in a week, your IP address is combined with a secret that is replaced every week and turned into a value that cannot be reversed. That value is deleted after eight days and is never stored next to the counts. If you decline analytics in our cookie banner, you are not counted at all.

Site Search

When you use the search box on this Site, we record the words you search for and how many results they found, so that we can improve our search and what we offer. We do not store your IP address, a cookie or any other identifier with the searches we record, and we delete them automatically after 400 days. Please don't type personal details, such as your name or email address, into the search box.

When we ask our website platform's AI for insights about this Site, our most frequent searches, and those that found nothing, are processed by our website platform's AI provider, currently Anthropic, PBC. Searches that look like someone's details, such as those containing an email address, a web address or a long number, are left out. The AI provider deletes what it receives within 30 days, unless it must keep it longer to enforce its usage policy or to comply with the law.

When the same search finds nothing at least twice in 30 days, we may add it to our list of things customers have asked for, so that we can see what customers want. Searches that look like someone's details are never added. A search on that list is kept until we remove it or, if we never act on it, 400 days after it was last searched. That list may also be processed by our website platform's AI provider when we use AI to note what customers ask for by email.

How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders
• Communicate with you about your account, orders, and inquiries
• Provide customer support
• Improve and personalize your experience on the Site
• Send marketing communications (where you have consented)
• Detect and prevent fraud or abuse
• Comply with legal obligations

How We Share Your Information

We do not sell your personal information. We may share it in the following circumstances:

• Service providers — payment processing, shipping, hosting, and analytics
• Legal authorities — when required by law or to protect our rights
• Business transfers — in connection with a merger, acquisition, or sale of assets

All third parties are required to protect your information and use it only for the purposes we specify.

Replies Drafted with AI

When we reply to your message, review or booking, we may use AI to prepare a draft. To do that, what you wrote and the details needed to answer it, such as your name and the time of your booking, are processed by our website platform's AI provider, currently Anthropic, PBC. Email addresses, phone numbers and web addresses are removed first, and so are passages our platform recognizes as sensitive, such as those about health. That check works in English only and may not catch everything.

A person at Joe Kovalck reviews every drafted reply before it is sent. Our website platform does not keep the AI's work separately: a draft becomes our own reply, kept as described under Data Retention. The AI provider deletes what it receives within 30 days, unless it must keep it longer to enforce its usage policy or to comply with the law.

Email Sorted and Drafted with AI

When you email us, we may use AI to help us answer it. As your email arrives, our website platform sorts it by what it is about and how urgent it seems, so that we can reply to urgent messages first, and prepares a draft reply. To do that, your email, our earlier messages with you and your name are processed by our website platform's AI provider, currently Anthropic, PBC, together with details about our business and, if you ask about an order or booking you have with us, its status, or which times are open. Email addresses, phone numbers and web addresses are removed first, and an email our platform recognizes as sensitive, such as one about health, is not sent at all. That check works in English and Spanish only and may not catch everything.

A person at Joe Kovalck reviews every drafted reply before it is sent; nothing is sent to you automatically. Our website platform keeps the sorting label with your email and deletes it with it, as described under Data Retention; a draft is deleted once we reply, or after 30 days. The AI provider deletes what it receives within 30 days, unless it must keep it longer to enforce its usage policy or to comply with the law.

Requests Noted with AI

When you email us asking for something we don't offer yet, we may use AI to note what you asked for, so that we can see what our customers want most. Someone at Joe Kovalck chooses which emails to note. To do that, your email and our earlier messages with you are processed by our website platform's AI provider, currently Anthropic, PBC, together with the list of things our customers have asked for. Your name is not sent. Email addresses, phone numbers and web addresses are removed first, and an email our platform recognizes as sensitive, such as one about health, is not sent at all. That check works in English and Spanish only and may not catch everything.

What we keep is a short description of what was asked for, such as "lavender candles", and how many customers asked. That list doesn't hold your name, your contact details or your email. Our website platform keeps with your email, and deletes with it, which item it was counted toward, as described under Data Retention. The AI provider deletes what it receives within 30 days, unless it must keep it longer to enforce its usage policy or to comply with the law.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information
• Object to or restrict certain processing
• Withdraw consent at any time
• Data portability — receive your data in a usable format

To exercise any of these rights, contact us using the details below.

Data Security

We take reasonable measures to protect your information from unauthorized access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute protection.

Children's Privacy

The Site is not intended for individuals under the age of [16/13]. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us so we can remove it.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. Where this occurs, we take steps to ensure your information receives an adequate level of protection.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us:

Joe Kovalck
Email: [EMAIL ADDRESS]
Address: [PHYSICAL ADDRESS]
Phone: [PHONE NUMBER]