Privacy Policy

Elements Clip Art — How We Handle Your Data

Last Updated: August 2024 • Version 1.0

            🛡️ TL;DR: We collect the absolute minimum data needed to deliver your digital clip art. Your email is used once to send your access code, then immediately discarded. We never store it. Your access codes never expire. We never use your data for marketing.
        

1. Data Controller

Elements Clip Art (operating as hedge-monkey.com)

Contact: privacy@hedge-monkey.com

2. What Data We Collect

Data	Collected?	Retention	Purpose
Buyer email (from Etsy)	Transient only (in-memory)	0 seconds — discarded after fulfillment email sent	Single fulfillment email with access code
Access code (hashed)	Yes	Permanent (no expiry)	Order fulfillment & download tracking
Order ID	Yes	4 years (tax compliance)	Legal obligation
Pack ID	Yes	Permanent	Service delivery
Download logs (IP, User-Agent)	Yes	7 years	Security & audit
Marketing data	Never	Never	Prohibited by policy

3. Legal Basis (GDPR Article 6)

Article 6(1)(b) — Contract Performance: Delivering your purchased digital clip art (access code, downloads, portal access)
Article 6(1)(c) — Legal Obligation: Retaining order IDs for 4 years for tax/compliance
Article 6(1)(f) — Legitimate Interest: Security audit logs, fraud prevention, platform integrity
No consent-based processing: We do not use consent as a legal basis because we don't do marketing

4. What We Do NOT Do

                ❌ Never store your email — used once for fulfillment email, then discarded
❌ Never use your data for marketing — no newsletters, no promotions, no third-party sharing
❌ Never expire your access codes — you can re-download forever
❌ Never sell or rent your data — not our business model
❌ Never use tracking cookies — no analytics, no fingerprinting

            

5. Data Sharing

Recipient	Purpose	Data Shared
Etsy	Marketplace operations, order management	Order details (via Etsy webhook)
Mailgun	Transactional email delivery	Email (transient), access code, pack name
Payment processors	Handled entirely by Etsy	None (we never see payment data)
Shipping carriers	N/A — digital delivery only	None

We do not share data with advertising networks, analytics providers, or data brokers.

6. Your Rights (GDPR Articles 15-22)

You can exercise these rights via our automated API or by emailing privacy@hedge-monkey.com:

Access (Art. 15): Get a copy of all data we hold — POST /api/v1/gdpr/access
Rectification (Art. 16): Correct inaccurate data — POST /api/v1/gdpr/rectification
Erasure (Art. 17): Request deletion (anonymization) — POST /api/v1/gdpr/deletion
Portability (Art. 20): Receive your data in JSON — POST /api/v1/gdpr/portability
Objection (Art. 21): Object to processing — email us
Restriction (Art. 18): Restrict processing — email us

6. Retention Schedule

Data Type	Retention	Reason
Order data / tax records	4 years	Legal obligation (tax compliance)
Access codes (hashed)	Permanent	No expiry — permanent buyer access
Fulfillment logs	2 years	Customer support reference
Audit/security logs	7 years	Security, fraud prevention
Marketing consent	Never collected	We don't do marketing

7. Security Measures

Encryption at rest: AES-256 (database)
Encryption in transit: TLS 1.3
Authentication: Passkey/WebAuthn (no passwords stored)
Rate limiting: 100 req/min per IP on all endpoints
Audit logging: Immutable, 7-year retention
No email in logs, database, or backups

8. International Transfers

Our infrastructure is hosted in the EU/US. When data leaves the EEA, we rely on Standard Contractual Clauses (SCCs) and providers with adequacy decisions (Mailgun, cloud providers).

9. Children's Privacy

Our digital clip art is not directed at children under 13 (or 16 in the EU). We do not knowingly collect data from children. If you believe we have, contact us immediately.

10. Changes to This Policy

We'll notify you of material changes via the email used for fulfillment (if still available) or via a prominent notice on our portal. Last updated: August 2024.

11. Contact Us

Privacy inquiries: privacy@hedge-monkey.com
General support: support@hedge-monkey.com
Postal: Elements Clip Art, [Business Address]