Privacy Policy

Multiverse Works LLC ("Multiverse Works," "we," "us," or "our") is a Wyoming limited liability company formed under the laws of the State of Wyoming, United States. Our principal place of business, and the address from which we operate, is 547 NE Eliason St, Poulsbo, WA 98370, USA. We operate the website multiversalpolymathcreative.com and provide brand identity, illustration, marketing graphics, and digital design services.

This Privacy Policy explains what personal information we collect through our website and services, why we collect it, who we share it with, how long we keep it, and the choices you have. For privacy purposes, Multiverse Works LLC is the controller of the personal information described here. We do not appoint a Data Protection Officer because we are a small studio and do not carry out large-scale or systematic monitoring of individuals.

This policy applies to personal information we collect when you visit the site, submit a quote or contact request, email or call us, pay an invoice, or engage us for creative work. It works alongside our Cookie Policy, Terms of Service, and Trust & Security page.

The site does not offer public user accounts, social login, public comments, or a checkout cart. Payments are collected later by invoice through our payment provider, not on a stored-card form on this site.

If you follow a link to a third-party website, that site’s own privacy policy applies. We are not responsible for other companies’ practices.

Information you give us

When you use the contact form, email us, call us, or enter into an engagement, you may provide:

• Identifiers such as your name, email address, and phone number.
• Professional details such as a company or brand name and the discipline you select.
• A budget range, if you choose to share one.
• A project description and any files, text, images, logos, or other materials you send.
• Anything else you choose to include in correspondence.

The public form also includes a hidden field used only to catch automated spam. Humans should leave it empty. Values submitted in that field are discarded and are not used as personal information.

Payment information

When you pay an invoice online, your card details are collected and processed directly by our third-party payment provider under its own security and privacy terms. We do not receive or store your full card number. We keep only limited billing records, such as the invoice, the amount, the date, the last four digits if the provider shows them, and a confirmation reference.

Information collected automatically

Like most websites, we collect limited technical information automatically. That can include your device and browser type, approximate region (from IP address or a region lookup used to set cookie defaults), referring pages, pages viewed, and how you use the site. Some of this is collected through cookies and similar technologies, which are controlled by your consent choices as described in our Cookie Policy.

Information from third parties

We do not buy marketing lists or enrich your profile from data brokers. We may receive limited information from our payment provider (payment status and a confirmation reference), from email or hosting providers that deliver messages, and from analytics or advertising tools only if you have allowed those cookie categories.

Sensitive personal information

We do not seek sensitive personal information (such as government ID numbers, precise geolocation, health data, biometric identifiers, or information about children). If you include that kind of information in a brief or file, we use it only as needed to perform the engagement and then delete it when it is no longer needed, unless the law requires us to keep a record.

We use personal information to:

• Respond to inquiries and prepare written proposals.
• Deliver the work you engage us for and manage the project.
• Issue invoices and process payments through our payment provider.
• Keep project, billing, and correspondence records.
• Detect spam, abuse, and fraud, and keep the website secure.
• Meet our legal, tax, and accounting obligations.
• With your consent, measure site performance and, where applicable, marketing.
• Send transactional messages about your inquiry or project. We do not add you to a promotional mailing list unless you ask.

We do not sell your personal information, and we do not use it for third-party targeted advertising except through the optional Marketing cookie category, which stays off unless you turn it on.

Legal bases (EEA, UK, and similar regions)

Where data protection law requires a legal basis, we rely on the bases in the table below. You may withdraw consent at any time without affecting processing that already happened. Withdrawing consent does not affect work we must finish under a contract or records we must keep by law.

We use cookies and similar technologies in four categories: Necessary, Functional, Analytics, and Marketing. Necessary technologies keep the site secure and working and remember your consent choice. They are always on. The other three are optional and are controlled by you.

You can change your choices at any time using Cookie Settings and Your Privacy Choices in the site footer. In regions where opt-in consent is required, non-essential cookies stay off until you allow them. Our Cookie Policy lists each tool, its category, its purpose, and how long it lasts.

We share personal information only in these limited ways:

• Service providers who help us run the studio, such as our payment provider, email and hosting providers, and secure file-delivery tools. They may process your information only to provide their service to us, under their own terms and our instructions.
• A contact-form delivery webhook, when one is configured, so a quote request can reach the studio inbox. That delivery is used only to receive the inquiry you submitted.
• Analytics and marketing providers, only within the cookie categories you have allowed.
• Legal and safety reasons, where disclosure is required by law, regulation, or valid legal process, or to protect our rights, users, or the public.
• Business transfers, if the studio is involved in a merger, acquisition, or sale of assets, in which case we will notify you of any change in how your information is handled.

We do not sell your personal information for money. We do not share it for cross-context behavioral advertising outside the Marketing cookie category you control. We do not allow service providers to use your information for their own unrelated advertising.

We honor the Global Privacy Control (GPC) signal. If your browser or extension sends a GPC signal, we treat it as a request to opt out of the sale or sharing of your personal information and of targeted advertising for that browser. The Marketing category is turned off and locked, and the related advertising signals are set to denied.

Because there is no common standard for older "Do Not Track" browser signals, we respond to GPC rather than to Do Not Track. You can also opt out manually through Your Privacy Choices in the footer, which is our "Do Not Sell or Share My Personal Information" control.

If you are located in the European Economic Area or the United Kingdom, you have the following rights, subject to the limits in applicable law:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: correct inaccurate personal data.
• Right to erasure: request deletion of your personal data ("right to be forgotten").
• Right to restrict processing: limit how we use your data in certain cases.
• Right to data portability: receive data you provided in a commonly used, machine-readable format.
• Right to object: object to processing based on legitimate interests.
• Right to withdraw consent: withdraw consent at any time, as easily as you gave it, using Cookie Settings or by contacting us.
• Right to lodge a complaint: file a complaint with your local data protection authority. In the UK that is the Information Commissioner’s Office. In the EEA it is the authority in your country of residence.

To exercise these rights, email hello@multiversalpolymathcreative.com or call +1 (360) 994-1062. We will respond within 30 days. If a request is complex we may extend that period by up to two further months and will tell you why.

If you are a California resident, and subject to any threshold or exemption that applies, you have the rights listed below. Residents of other U.S. states with consumer privacy laws (including, where those laws apply, Virginia, Colorado, Connecticut, Utah, Oregon, Texas, and similar statutes) have comparable rights to know, delete, correct, and opt out. We honor those rights when they apply to you.

• Right to know: what personal information we collect, use, disclose, and (if ever) sell or share.
• Right to delete: request deletion of personal information we hold about you, subject to records we must keep.
• Right to correct: request correction of inaccurate personal information.
• Right to opt out of sale or sharing and of targeted advertising: use Your Privacy Choices, send a GPC signal, email us, or call us.
• Right to limit use of sensitive personal information: we do not use sensitive personal information to infer characteristics about you.
• Right to non-discrimination: we will not deny goods or services, charge a different price, or provide a different level of service because you exercised a privacy right.
• Right to use an authorized agent: you may designate an agent to make a request, with proof of authorization that the law requires.

We do not offer financial-incentive or loyalty programs that trade discounts for personal information. We do not have actual knowledge that we sell or share the personal information of consumers under 16.

Categories collected in the past 12 months

To exercise any right, email hello@multiversalpolymathcreative.com or call +1 (360) 994-1062. Those are two independent methods. We may need to verify your identity, for example by confirming control of the email address or phone number tied to the request. We will respond within 45 days, or tell you if we need up to 45 additional days.

We keep personal information only as long as we need it for the purposes in this policy, including legal, tax, and accounting duties. When it is no longer needed we delete it or remove the details that identify you.

We use administrative, technical, and organizational measures designed to protect personal information, including encryption of data in transit over the public internet (HTTPS/TLS), access limited to what is needed to run a project, unique credentials, and multi-factor authentication where the tools we use support it. Card payments are handled by a payment provider that maintains PCI-DSS compliance. We do not store full card numbers on our servers.

No method of transmission or storage is perfectly secure. Our Trust & Security page describes our approach in more detail, including how we handle a security incident.

We operate from the United States. If you contact us or use our services from outside the United States, your information will be processed in the United States and in other countries where our service providers operate. Those countries may have different data-protection rules than your own.

Where a transfer from the EEA, the UK, or Switzerland requires a safeguard, we rely on one or more of: an adequacy decision by the relevant authority; the European Commission’s Standard Contractual Clauses (and the UK international data-transfer addendum where it applies); and data-processing terms with the providers that handle the information.

Our website and services are intended for businesses and adults. They are not directed to children, and we do not knowingly collect personal information from children under 16 (or under 13 where COPPA is the relevant standard). If you believe a child has provided us information, contact us and we will delete it promptly.

If you send a quote request or engage us, we will email or call you about that inquiry or project. Those messages are transactional. We include our legal name and operating address in commercial email as required by the U.S. CAN-SPAM Act.

We do not add website visitors to a promotional mailing list by default, and the quote form does not use a pre-checked marketing box. If you later ask for optional studio updates, you can unsubscribe in any such message or by emailing us. Unsubscribing from promotional mail does not stop invoices, project correspondence, or legally required notices.

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date above. If a change is material and we have an email address for you, we will also send a notice. Your continued use of the site after an update means you accept the revised policy, except where the law requires a different form of consent.

Privacy questions, access requests, deletion requests, and opt-out requests go to the studio directly. For formal notices, use the operating address below.

• Multiverse Works LLC, a Wyoming limited liability company
• Formed in Wyoming, USA
• Operating address: 547 NE Eliason St, Poulsbo, WA 98370, USA
• Email: hello@multiversalpolymathcreative.com
• Phone: +1 (360) 994-1062

EEA and UK residents may also contact their local data protection authority. California residents may also submit a request by phone at the number above. We do not currently maintain a separate toll-free number.