Privacy Policy

Effective October 23, 2026

This Privacy Policy applies to thira.co (the “Website”), operated by Sakae Holdings LLC (“we,” “us,” or “our”), the parent company of Thira. It explains how we collect, use, and protect personal data in accordance with applicable data protection laws. By using the Website, you agree to the practices described below.

This policy complies with the General Data Protection Regulation (EU GDPR), the United Kingdom GDPR (UK GDPR), the UK Privacy and Electronic Communications Regulations (PECR), and where applicable, the California Consumer Privacy Act (CCPA).

1. Information We Collect

1.1 Browsing the Website

Visitors can explore much of the Website without creating an account. However, we may collect non-personally identifiable information through automated technologies, such as:

  • Device Information: The type of device used (mobile, tablet, or desktop), operating system, and browser type.
  • IP Address: Used to estimate general location (e.g., city or country) for performance optimization and fraud detection.
  • Website Usage Data: Page views, time on site, and referral sources, collected via analytics tools.
  • Cookies and Tracking Technologies: Managed through our consent-based banner. Details are available in our Cookie Policy.

1.2 The Brief

When you sign up for The Brief, we collect your email address and the date and source of your sign-up, as a record of your consent. You may unsubscribe at any time using the link in any email.

1.3 Purchases

To purchase a Guide or an Edition, users must provide:

  • Full Name (for access and shipping)
  • Email Address (for login, updates, and confirmations)
  • Shipping and Billing Address (for fulfillment and verification)
  • Phone Number (optional, for delivery coordination)
  • Payment Information (processed securely via third-party services; we do not store card details)
  • Login Credentials (for registered accounts, stored securely)

1.4 Private Sessions

When you book a Private Session, we collect your name, email address, phone number, payment information, and the names of any guests in your booking. You may also choose to share accessibility needs or other details relevant to your visit. This information is used to confirm and arrange the session, and guest names are shared with the host gallery, studio, or venue only as needed for access.

1.5 Communication and Support

If you contact us for any other reason, we may retain the information you voluntarily share for reference and quality assurance.

2. How We Use Your Information

We process personal data only when we have a valid legal basis, including:

  • Consent: For The Brief, other email marketing, and cookies.
  • Contract: To process purchases and bookings and fulfill obligations.
  • Legal Obligation: For tax, accounting, or compliance with laws.
  • Legitimate Interest: To protect against fraud, analyze site performance, and improve user experience.

Your information is used to:

  • Deliver content, fulfill purchases, and manage your account.
  • Send The Brief and occasional announcements to those who have signed up.
  • Arrange and confirm Private Sessions.
  • Send transactional communications (e.g., order and booking confirmations, account updates).
  • Analyze site usage to improve layout and performance.
  • Detect fraudulent or unauthorized activity.

Sakae Holdings LLC does not sell personal data or use it for third-party advertising purposes.

3. Data Storage and Retention

Personal data from purchases, bookings, and accounts is stored securely for as long as the relevant account, transaction, or booking requires and for a reasonable period afterward. Email addresses for The Brief are kept until you unsubscribe, after which we retain only what is needed to honor your unsubscribe request. Where a longer retention period is required by law—for tax or accounting purposes, for example—we retain data for that period.

4. Age Restrictions

The Website is intended for users aged 18 and above. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data, it will be deleted promptly. Parents or guardians may contact us at hello@thira.co with any concerns.

5. Data Sharing and Third-Party Services

We share data only with trusted third parties who help us operate the Website and deliver our services:

  • Payment Processing: Stripe—for secure transaction handling
  • Email: Brevo—for The Brief, customer communications, and transactional email
  • Analytics: Google Analytics—for visitor behavior insights
  • Delivery Partners: Used only when physical products are shipped
  • Artists and Studios: Where an Edition is dispatched directly from the artist’s or maker’s studio, your name, shipping address, and phone number are shared with that studio for delivery only
  • Host Venues: Galleries, studios, and venues hosting a Private Session receive guest names and booking details only as needed for access
  • Legal Authorities: If required by law, regulation, or legal process

All service providers are required to follow applicable privacy laws and implement appropriate security practices. We do not permit third parties to use personal data for their own marketing purposes.

6. Cookies and Tracking Technologies

We use cookies to manage preferences, enhance your experience, and understand traffic patterns. Non-essential cookies require your explicit consent and can be managed at any time via our cookie banner. For full details on the cookies we use and how to control them, see our Cookie Policy.

7. Your Rights and Choices

Depending on your location, you have the right to:

  • Access your data and request a copy
  • Correct inaccurate or outdated information
  • Request deletion of your data (subject to legal exceptions)
  • Withdraw consent where processing is based on consent
  • Object to the use of your data for analytics or tracking
  • Data portability—request your data in a structured, machine-readable format (EU and UK users)
  • Lodge a complaint with your local supervisory authority (EU and UK users)

California residents have additional rights under the CCPA, as amended by the CPRA, including the right to know what categories of personal data we collect, the right to correct inaccurate data, the right to request deletion, and the right to non-discrimination for exercising these rights.

EU and UK residents may contact their national data protection authority if they believe their rights have not been respected. Sakae Holdings LLC processes EU and UK personal data on the basis of contract, consent, and legitimate interest as described in Section 2.

To exercise any of these rights, contact us at hello@thira.co with “Privacy Policy” in the subject line. We will respond within 30 days.

8. International Data Transfers

Sakae Holdings LLC is based in New York, United States. If you are accessing the Website from the EU, UK, or elsewhere, your data may be transferred to and processed in the United States. Where required by law, we ensure appropriate safeguards are in place for such transfers, including reliance on standard contractual clauses or other lawful transfer mechanisms under GDPR and UK GDPR.

9. Data Security Measures

We implement industry-standard measures including:

  • Secure data encryption (SSL/TLS)
  • Limited access controls for sensitive data
  • Secure third-party services for payment and email handling

While no method of transmission is 100% secure, we continually review and improve our security practices. In the event of a data breach that affects your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law.

10. Policy Updates

We may update this Privacy Policy to reflect changes in our services or legal obligations. The current version will always be available at thira.co/privacy-policy/ with the effective date noted above. For material changes, we will make reasonable efforts to notify customers and subscribers by email. Continued use of the Website after any update indicates acceptance of the revised policy.

11. Contact

For any privacy-related inquiries, data access requests, or concerns, contact us at hello@thira.co with “Privacy Policy” in the subject line. We will respond within 30 days.