PRIVACY POLICY

Last Updated: January 2026

This Privacy Policy describes how Douglas Flanders & Associates, LLC ("we," "us," or "our") collects, uses, discloses, and protects personal data when you visit or interact with our website https://www.flandersart.com or otherwise engage with our services (collectively, the "Services").

This notice is intended to comply with applicable U.S. privacy laws, including the Minnesota Consumer Data Privacy Act (MCDPA), effective July 31, 2025, and other applicable state privacy laws.

If you do not agree with this Privacy Policy, please do not use our Services. Questions may be directed to syrilmcnally@flandersart.com.

SUMMARY OF KEY POINTS

  • We collect personal data you provide directly and certain information automatically when you use our Services.

  • We do not knowingly collect or process sensitive personal data except as permitted by law.

  • We do not sell personal data or use it for cross-context behavioral advertising.

  • Minnesota residents and residents of other qualifying U.S. states have specific privacy rights, including access, correction, deletion, and opt-out rights.

  • You may appeal privacy-related decisions, including to the Minnesota Attorney General.

1. INFORMATION WE COLLECT

Personal Data You Provide

We collect personal data you voluntarily provide, including:
- Name
- Email address
- Phone number
- Mailing and billing address
- Payment-related information (processed by third-party payment processors)
- Communication preferences
We do not knowingly collect sensitive personal data as defined under the MCDPA.

Payment Information

All payment transactions are handled by third-party processors (e.g., Stripe, PayPal, Square). We do not store full payment card numbers. Their privacy practices are governed by their respective privacy policies.

Automatically Collected Data

When you use our Services, we may automatically collect:
- IP address
- Browser and device information
- Operating system
- Pages visited and usage data
- Approximate location derived from IP address
This data is used for security, analytics, and site functionality.

2. HOW WE USE PERSONAL DATA

We use personal data to:
- Provide and administer our Services
- Process transactions
- Communicate with you
- Respond to inquiries
- Send marketing communications (where permitted)
- Improve website functionality
- Maintain security and prevent fraud
- Comply with legal obligations

3. LEGAL BASES FOR PROCESSING

Where required by law, we process personal data based on:
- Your consent
- Performance of a contract
- Compliance with legal obligations
- Legitimate business interests that do not override your rights

4. SHARING OF PERSONAL DATA

We may share personal data with:
- Service providers who perform services on our behalf under contractual obligations
- Payment processors
- Legal or regulatory authorities when required by law
- Successors in the event of a merger, sale, or business transfer
We do not sell personal data.

5. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies for:
- Website functionality
- Analytics
- Security
You may manage cookies through your browser settings. Disabling cookies may affect site functionality.

6. DATA RETENTION

We retain personal data only as long as reasonably necessary to fulfill the purposes described in this Policy, unless a longer retention period is required by law.

7. DATA SECURITY

We implement reasonable administrative, technical, and physical safeguards to protect personal data. However, no system is 100% secure.

8. CHILDREN’S PRIVACY

We do not knowingly collect personal data from individuals under 18. If such data is discovered, it will be deleted promptly.

9. YOUR PRIVACY RIGHTS

Minnesota Residents (MCDPA)

If you are a Minnesota resident, you have the right to:
- Confirm whether we process your personal data
- Access your personal data
- Correct inaccuracies
- Delete personal data
- Obtain a copy of your personal data
- Opt out of targeted advertising, sale of personal data, or profiling (we do not currently engage in these activities)

Other U.S. State Rights

Residents of other states with privacy laws (e.g., CA, CO, VA, CT, UT) may have similar rights.

10. EXERCISING YOUR RIGHTS

You may exercise your rights by:
- Emailing syrilmcnally@flandersart.com
- Calling 612-920-3497
- Using our contact form: https://www.flandersart.com/contact
We will respond within the timeframe required by applicable law.

Appeals

If we deny your request, you may appeal by contacting us at syrilmcnally@flandersart.com.

If your appeal is denied and you are a Minnesota resident, you may file a complaint with the Minnesota Attorney General.

11. DO-NOT-TRACK SIGNALS

We do not currently respond to Do-Not-Track signals due to lack of a uniform industry standard.

12. UPDATES TO THIS POLICY

We may update this Privacy Policy periodically. Changes will be posted with a revised date.

13. CONTACT INFORMATION

Douglas Flanders & Associates, LLC
5025 France Ave S, Minneapolis, MN 55410
612-920-3497
syrilmcnally@flandersart.com

14. REQUESTING ACCESS, CORRECTION, OR DELETION

To request access to, correction of, or deletion of your personal data, please contact us using the information above. Requests are handled in accordance with applicable law.