Common Garden Privacy Policy

PLEASE READ THIS POLICY CAREFULLY BEFORE USING THIS SITE

Effective: April 2026

Common Garden LLC ("Common Garden," "we," "our," or "us") is committed to protecting and respecting personal privacy.

Common Garden provides a multi-tenant creative platform at cmngrdn.com and dashboard.cmngrdn.com ("Platform") designed to allow independent artists and creative professionals ("Artists") and their community members ("Community Members") to communicate with one another and to share information, news, and offers. This policy (together with our Terms and Conditions and any other documents referred to in this policy) sets out how Common Garden and Artists (collectively, "we," "our," and "us") jointly process Community Member personal data through the Platform in compliance with the California Consumer Privacy Act ("CCPA"), the European General Data Protection Regulation ("GDPR"), the UK Data Protection Act 2018, and other applicable privacy laws.

This policy also covers Common Garden's processing of personal data from Artists, workspace administrators, and other individuals submitting personal data in connection with the Platform.

If you are a Community Member, Common Garden and each Artist whose workspace you have joined are joint controllers of your personal data. This policy covers both Common Garden's and Artists' use of your personal data in connection with the Platform. Artists may also provide you with their own privacy policy. If so, that privacy policy (the "Artist's Privacy Policy") shall, in addition to this Privacy Policy, apply to that Artist's use of your personal data. To the extent that an Artist's Privacy Policy conflicts with this Privacy Policy, the Artist's Privacy Policy shall prevail. If you are not a Community Member (for example, you are an Artist or another individual), Common Garden is a separate and independent controller of your personal data.

Please read the following carefully to understand our practices regarding your personal data and how we will treat it, and to learn how you can exercise your rights with respect to your personal data.

Personal Data We Collect From You

We collect personal data that you voluntarily provide to us through the Platform or otherwise.

Personal data that you provide to us

Community Member data. When you sign up through an Artist's portal page, event page, booking form, or other capture mechanism on the Platform, we may collect your first name, last name, email address, phone number, city, country, date of birth, and any additional information you voluntarily provide.
Artist account data. When you register as an Artist on the Platform, you provide us with information such as your name, email address, workspace name, business information, bank details, financial information, and other contact details necessary to operate your workspace.
Contact information and communications. We may collect your contact information and other personal data such as your name, email address, phone number, or address when you contact us via email, telephone, social media, or by other means with questions or concerns, or when you voluntarily respond to questionnaires or surveys. When you contact us, you also provide us with the content of your communications.
Artist–Community Member interactions. When you communicate with a Community Member or Artist through the Platform, or otherwise interact with the Platform — including by submitting forms, visiting portal pages, engaging with artist pages, booking appointments, or registering interest for an event — we collect the content and metadata of such interactions.
Purchase and payment information. When you purchase products, services, or tickets through the Platform, we collect information about your purchases. We rely on third-party payment processors and do not have direct access to your credit card information.
Booking and scheduling information. When you book an appointment or service through the Platform's scheduling integration, we collect the information you provide during the booking process, including your name, contact details, appointment details, and any notes or preferences you submit.
Marketing information. If you consent to receive marketing communications from an Artist or from Common Garden, we will use your contact information (email address and/or phone number) for that purpose.

Personal data we receive from third parties

Artists. Artists may provide personal data to Common Garden by uploading it to the Platform (for example, importing existing contact lists into their workspace). If so, Artists will make reasonable efforts to notify you. You will be able to opt out.
Purchases. When you purchase items through the Platform, we will receive data about the purchase such as the details of the items, costs, and date and time of the purchase from our third-party payment processor.
SMS text message services. When you reply to an SMS text message sent through the Platform, we will receive data from our SMS service provider about your text, such as the content, date, and time.

Personal data we automatically collect

We collect personal data about you automatically when you use the Platform, including:

Device data, such as your computer's or mobile device's operating system type and version, browser type and version, screen resolution, device type (e.g., phone, tablet, desktop), IP address, unique identifiers, language settings, and mobile device carrier.
Online activity data, such as information about how you access the Platform, pages visited, links clicked, the full URL clickstream to, through, and from our Platform (including date and time), page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from a page.

We collect this information through cookies and similar technologies. Please read the Cookie Policy section below for more information.

How We Use Personal Data

We use personal data for the following purposes:

To provide the Platform. We use personal data to operate, maintain, and provide you with our Platform, including to allow you to join an Artist's community, interact with Artists and their content, book appointments, process your payments, and deliver communications you have opted into. We use personal data to enter into a contract with you or to perform our contractual obligations under our Terms and Conditions.
To communicate with you. We use your personal data to respond to your inquiries, comments, feedback, or questions. We do so to perform our contract with you or where it is in our legitimate business interests.
To send administrative information to you. For example, we may send you information regarding the Platform and changes to our terms, conditions, and policies.
To deliver transmissions. When you opt into an Artist's communications, we use your email address and/or phone number to deliver email and SMS messages ("Transmissions") on behalf of that Artist through our email and SMS infrastructure.
For analytics and product improvement. Where it is in our legitimate business interests, we use your personal data for data analysis, identifying usage trends, improving the content and functionality of the Platform, developing new features, personalizing the Platform experience, and evaluating and improving our Platform and your experience. In most cases, we will aggregate your personal data and use only aggregated information, such as statistics, which does not directly identify you, for these purposes.
For AI-assisted features. The Platform may use third-party AI services to provide interpretive, analytical, or conversational features. Personal data processed by AI features is used solely to generate responses within the Platform context and is not used to train third-party AI models. AI-generated responses are not stored beyond the session unless explicitly logged as an interaction event.
To protect our Platform. It is in our legitimate business interests to prevent fraud, criminal activity, or misuse of our Platform, and to ensure the security of our IT systems, architecture, and networks.
For compliance and legal reasons. We may use personal data to comply with legal obligations, and it is in our legitimate business interests to use your personal data to defend against legal claims or disputes, including to: protect our, your, or others' rights, privacy, safety, or property (including by making and defending legal claims); audit our internal processes for compliance with legal and contractual requirements; enforce the Terms and Conditions that govern the Platform; and comply with applicable laws, lawful requests, and legal process.
To send you marketing. We and/or Artists may use your personal data for marketing purposes and to tell you about products, services, releases, or events we believe may be of interest to you. Where we seek your consent, you may withdraw your consent at any time.

How We Disclose Your Personal Data

Artists. We may disclose your personal data to Artists (and their authorized workspace administrators) once you have joined that Artist's community through the Platform. Artists may export your personal data from their workspace. If so, the Artist becomes the separate and independent controller of that personal data, which will be subject to the Artist's Privacy Policy.
Community Members. If you interact with content or other Community Members on the Platform, the content of your interactions may be visible to other Community Members within that Artist's workspace context.
Vendors and service providers. We may disclose your personal data to third-party service providers who access your personal data in the context of providing their services, including: payment processing and artist payment collection providers; SMS and messaging service providers; email delivery service providers; database hosting and authentication providers; application hosting providers; DNS, CDN, and security service providers; scheduling and appointment service providers; AI service providers used for Platform features; and analytics providers that assist us in the improvement and optimization of the Platform.
Professional advisors. We may disclose your personal data to professional advisors, such as lawyers, auditors, bankers, and insurers, where necessary in the course of the professional services they render to us.
Business transfers. In the event that we sell or buy any business or assets, or during negotiations for such transactions — including a merger, consolidation, acquisition, reorganization, sale, or other disposition of all or any portion of Common Garden — we may disclose your personal data to the prospective seller or buyer of such business or assets.
Authorities and others. We may disclose your personal data if we are under a duty to do so in order to comply with any legal obligation, or in order to enforce or apply our Terms and Conditions or other agreements, or to protect the rights, property, or safety of Common Garden, our users, or others.

Data Storage and International Data Transfers

The personal data we collect from you is stored on cloud services based in the United States. Your personal data may be transferred to service providers or other third parties in countries outside your country of residence, which may not provide the same protections as the data protection laws where you are based.

Artists you have joined may also export your personal data for use on another platform, which may be located in a different jurisdiction.

When we transfer your personal data internationally, we will ensure that relevant safeguards are in place to afford adequate protection for your personal data and we will comply with applicable data protection laws. For more information about how we transfer personal data internationally, please contact us as set out in the "Contact Us" section below.

How We Keep Your Personal Data Secure

We use reasonable organizational, technical, and administrative measures designed to protect against unauthorized access, misuse, loss, disclosure, alteration, and destruction of personal data we process. These measures include encryption in transit and at rest, role-based access controls, and regular security reviews of our infrastructure.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our Platform; any transmission is at your own risk. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Platform, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Data Retention

We retain personal data only for as long as is necessary to fulfill the purposes for which it was collected and processed, in accordance with our retention policies, and in accordance with applicable laws and regulatory obligations, or until you withdraw your consent (where applicable).

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data, the purposes for which we use personal data, and whether we can achieve those purposes through other means, and the applicable legal and regulatory requirements.

When you unsubscribe from an Artist's communications, your contact relationship with that Artist's workspace is deactivated but your master identity record may be retained if you maintain active relationships with other Artist workspaces on the Platform.

Your Rights

Opt out of marketing communications. You may opt out of marketing-related communications by following the opt-out or unsubscribe instructions contained in the email or SMS communications we and/or the Artist send you, or by contacting us as provided in the "Contact Us" section below. When opting out of marketing from one Artist, you may still receive marketing communications from other Artists whose communities you have joined. You may also continue to receive Platform-related and other non-marketing communications.

Your rights under applicable law. As provided under the CCPA, the European GDPR, the UK Data Protection Act, and other applicable privacy laws, and subject to any limitations in such laws, you may:

Ask us for access to the personal data we hold about you;
Request corrections and/or deletions of your personal data;
Request to restrict the processing of your personal data, or object to that processing;
Withdraw your consent (where we are processing your personal data based on your consent) to the processing of your personal data;
Request the receipt or transfer to another organization, in a machine-readable form, of the personal data that you have provided to us; and
Complain to your local data protection authority regarding a violation of your privacy rights, or suffering as a result of unlawful processing of your personal data.

We do not sell personal data as defined under the CCPA and other applicable U.S. state privacy laws.

Please note that, prior to any response to the exercise of such rights, we may require you to verify your identity. Depending on where you reside, you may be entitled to empower an "authorized agent" to submit requests on your behalf. We will require authorized agents to confirm their identity and authority in accordance with applicable laws. You are entitled to exercise the rights described above free from discrimination.

In addition, we may have valid legal reasons to refuse your request, and will inform you if that is the case. If you would like to exercise your rights, or for more information, please contact us using the details in the "Contact Us" section below.

Children's Privacy

Our Platform is not directed at children under the age of 13. We do not knowingly collect personal data from children under the age of 13. If you have reason to believe that a child under the age of 13 has provided personal data to us through the Platform without required parental consent, please contact us and we will delete that information from our Platform.

Links to Other Websites

The Platform may contain links to other websites not operated or controlled by Common Garden, including social media services, streaming platforms, and third-party scheduling or payment services ("Third-Party Sites"). The information that you share with Third-Party Sites will be governed by the specific privacy policies and terms of service of those Third-Party Sites and not by this Privacy Policy. By providing these links, we do not imply that we endorse or have reviewed these sites. Please contact the Third-Party Sites directly for information on their privacy practices and policies.

Cookie Policy

What are cookies?

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently, to provide a better user experience, and to provide information to the owners of the site.

How we use cookies

We use cookies and similar technologies on the Platform for the following purposes:

Strictly necessary cookies. These cookies are essential for the Platform to function properly, including authentication, session management, and security. You cannot opt out of these cookies as the Platform will not function without them.
Analytics cookies. We use analytics cookies to understand how visitors interact with the Platform, which pages are visited most frequently, and how users navigate through the site. This information helps us improve the Platform's functionality and user experience. Analytics data is aggregated and does not directly identify individual users.
Preference cookies. These cookies allow the Platform to remember choices you make (such as your preferred language or workspace settings) and provide enhanced, personalized features.

Third-party cookies

Our Platform may include integrations with third-party services (such as Stripe for payment processing, embedded content from streaming platforms, or social media sharing features) that may set their own cookies. We do not control these third-party cookies. Please refer to the respective third-party privacy policies for more information.

Managing cookies

Most web browsers allow you to control cookies through their settings. You can usually set your browser to notify you when you receive a cookie, giving you the chance to decide whether to accept it. You can also set your browser to refuse all cookies. However, if you block or delete cookies, some features of the Platform may not function properly.

For more information about cookies and how to manage them, visit www.allaboutcookies.org.

Changes to Our Privacy Policy

Any changes we may make to our Privacy Policy will be posted on this page and, where appropriate, notified to you by email, text message, or other appropriate method. Please check back frequently to see any updates or changes to our Privacy Policy.

Contact Us

Questions, comments, and requests regarding this Privacy Policy are welcomed and should be addressed to:

Common Garden LLC
Email: contact@cmngrdn.com
Website: cmngrdn.com