Consumer health data notice
This notice describes our practices; it is not legal advice.
Some privacy laws, including Washington State’s My Health My Data Act, can treat a photo of your eye as consumer health data. This notice explains how Iris Art handles it.
- What we collect: the eye photo(s) you upload for your order. We strip location and other metadata (EXIF) when you upload. We also keep your email and order details to deliver your artwork.
- Why: only to make your iris artwork, show you a preview and deliver the final file. We don’t use your photos to identify you, for biometric matching, advertising, profiling or AI model training.
- Consent: we only collect the photo after you tick the separate consent box on the order page. You can withdraw consent at any time by emailing us; we then delete your photos and cancel the order (with a refund if we haven’t delivered your artwork).
- Where it goes: your photo is held briefly in our website’s database (Cloudflare) while our own studio computer renders your artwork, and is removed from the website as soon as the finished artwork is uploaded for review. The artwork is rendered on that computer. A person on our team checks every artwork.
- Sharing and selling: we don’t sell your consumer health data, and we don’t share it with anyone. PayPal receives only your payment details, not your photo.
- How long we keep it: the original photo is removed from our website once the finished artwork is uploaded for review, and our studio computer keeps it only until your order is delivered or closed (so a free revision is possible), never longer than 30 days. If we can’t use your photo, it’s deleted within 7 days. The watermarked preview is deleted once your artwork is delivered; the final file stays downloadable for 7 days after you approve your preview and is then deleted. Unpaid uploads are deleted after 24 hours, and everything is gone within 30 days of your order.
- Your rights: you can ask what we hold about you, ask us to delete it, or withdraw consent. Email porter@gislerlabs.com with your order number. We’ll confirm the deletion by email.
- Contact: Gisler Labs, porter@gislerlabs.com.