This webpage contains two versions of our European Data Privacy Addendum for people in the EEA and the UK. If you are a young user, keep reading for the teen and tween-friendly version. If you are an adult user, or the parent or guardian of a young user, please see the full European Data Privacy Addendum.
European Privacy Notice for Young Users
Last Updated: January 12, 2026
Who are we?
FrameShare LLC is a US company designed to help art therapists and art educators extend the impact of their work.
We offer a unique digital space for art therapy and creative expression to users of all ages—we call this a Session. When you join a Session, you can use a variety of tools to get creative on the crafting table and share your creation in real time with others. You can also communicate and collaborate with others in the Session while you create.
What is a privacy notice?
A privacy notice tells you what personal data we collect about you, how we use it, and your legal rights. This privacy notice is designed to be read by young people. If you want to know more about why we need your personal data and how we use it, you should ask an adult to read the full European Data Privacy Policy with you to help you understand the details.
Typically, FrameShare makes all the important decisions about how to collect, use, and secure your personal data—this is called being a Data Controller. This notice tells you about what we do with your personal data when we are a Data Controller.
Sometimes, however, another user is the Data Controller for your personal data. This can happen when, for example, you meet with an art therapist through our service and they give us instructions about how to store and use certain information about you. We may still be able to help you get in touch with your art therapist if you have a question or request about the personal data they control.
What is personal data?
Any information that we can use to identify you is personal data. Personal data includes things like your name, email address, date of birth, and picture.
Why do we need your personal data?
The main reason we need your personal data is to make FrameShare's digital space and creative tools available to you. For example, we need your personal data to allow you to create, collaborate, and communicate with others in a Session. We collect your personal data to achieve these legitimate interests, so long as you don't have other greater interests or rights.
We also need your personal data to offer a service that is age appropriate and to protect you and other users from bad actors misusing our website. We use your personal data to carry out these tasks when they are substantially in the public interest.
We may also use your personal data when we need it to follow the law or to protect someone's life or physical safety. For example, we might provide law enforcement or emergency services with your personal data in urgent situations.
If we don't have another reason to collect your personal data, we will ask for your consent. For example, we ask for consent to turn on certain features during a Session, like your computer camera and microphone. Depending on your age, your parent/guardian may need to approve first. Whenever we collect your personal data based on consent, you or your parent/guardian can take it back at any time. For example, you can turn off video and audio features during a Session to stop us from collecting any more.
How do we collect your personal data?
Generally, we get your personal data from you, your device, or your parent/guardian when you access our website.
Sometimes, we also get personal data about you from another user, like your art therapist, who wants to interact with you, or has already interacted with you, through our services.
What personal data do we collect?
We only collect your personal data when we need it to help us do our job or to follow the law. For example, your personal data may include:
- Name
- Age
- Physical address (generally at the state or country-level only, unless you or your Provider decides to share more)
- Picture (if you enable video during a Session)
- Voice (if you enable audio during a Session)
- Details about your creation
What you create and share during a Session may sometimes lead to us collecting especially sensitive information about you. This can be personal data that tells us about your health, for example. We follow stricter rules for this kind of data.
We will ask you to confirm your age before we let you join a Session. If we need to, we may ask for personal data about your parent or guardian to get in touch with them. For example, this may include sharing your parent/guardian's:
- Full name
- Age
- Email address
Who can see your personal data?
We will only share your personal data with others if that's part of our job or if the law tells us to. For example, sometimes we need to share your creation or other details from a Session that contain your personal data with our staff to check that it does not go against our rules.
At other times, we need to share your personal data with other companies that we work with to keep our service running smoothly. Some examples of people who might need to see your personal data include our website and IT support providers. We are careful when we share your personal data for these purposes and impose special rules on those people.
Because our digital spaces are designed for creative collaboration and communication, we allow you to share things with other people during a Session. Be careful when you upload or create something, because other people can see it. Also be careful before turning on a feature, like video or audio, or sending messages in the chat, because other people may be on the receiving end. If you aren't sure who's in a Session with you, talk to your parent/guardian before sharing any revealing information.
How long do we keep your personal data?
We are only allowed to keep your personal data for as long as we need it to do a specific task or comply with the law. Depending on the circumstances, this period can vary. As long as we keep it, we will store your personal data in the US.
How do we look after your personal data?
We use security measures to protect your personal data against any unlawful use or unauthorized access. For example, use encryptions that turn your personal data into gibberish to make it hard for us and anyone else to read. This helps keep your personal data confidential when it travels to us and when we store it. Our employees are also trained to make sure that we follow the law to keep your personal data safe.
What are your rights?
You have legal rights over the personal data we have about you. You or your parent/guardian can:
- Ask to see and receive a copy of your personal data.
- Ask us to change personal data you think is wrong.
- Ask us to delete personal data when it's not needed anymore.
- Ask us to use your personal data only in certain ways.
- Tell us you don't want your personal data to be processed anymore.
- Ask us to send your personal data to you or someone else, in certain situations.
Get in touch with us!
You can contact us at support@frameshare.org if you have questions or want to find out more about your rights.
If you have a concern about the way we handled your personal data, you can complain to the supervisory authority in your country. In the UK, this is the Information Commissioner's Office (ICO).
Updates
We will update this privacy notice if there are big changes to how we use your personal data. Check out the date at the top to make sure you have read the latest version.