Last updated: 26/11/2025

This Privacy Policy explains how ShedCraft Co. (“we”, “us”, or “our”) collects, uses, and protects your personal data in compliance with:

• the General Data Protection Regulation (GDPR – EU Regulation 2016/679)

• the Italian Personal Data Protection Code (Legislative Decree no. 196/2003, as amended)

• the California Consumer Privacy Act (CCPA)

• and other applicable international privacy laws

1. Data Controller

Name: ShedCraft Co.

Jurisdiction: Italy

Email: info@shedcraftco.com

The Data Controller is responsible for deciding how and why your personal data is processed.

2. Types of Personal Data Collected

We collect and process the following categories of data:

Identification data

• Name, email address

Transaction data

• Order details, transaction ID, purchase confirmation

• Payment information is processed by third-party checkout providers (e.g., Stripe, PayPal, ThriveCart, Gumroad). We do not store credit card numbers.

Technical data

• IP address, browser type, device type, approximate location

• Security and download logs, including timestamp of file access

Usage data

• Pages visited, funnel steps completed, clicks on CTA buttons, engagement with marketing campaigns and ads

We do not intentionally collect sensitive personal data unless voluntarily provided (e.g., in support emails).

3. Legal Bases for Processing

We process your personal data based on:

• Contractual Necessity: To deliver purchased products, send download links, and provide support

• Consent: For marketing communications, newsletters, and retargeting (only if opted-in)

• Legal Obligations: To comply with tax, accounting, or legal reporting duties

• Legitimate Interest: To prevent fraud, secure our website and downloads, improve product experience, and protect our IP

4. Purposes of Data Processing

Your data is processed to:

• Complete purchases of digital materials and resources

• Deliver download links and access instructions via email

• Provide customer support

• Monitor unauthorized sharing of paid content and protect IP

• Send product updates, new resources, and improvements (if opted-in)

• Improve website performance, messaging clarity, and user experience

We do not use personal data to make automated decisions with legal or similarly significant effects.

5. Third-Party Services

ShedCraft Co. partners with trusted third parties to process payments, deliver digital files, and run analytics.

Core Services (examples):

• Stripe / PayPal / other payment processors → checkout and payment handling

• Email delivery platforms → sending download links, receipts, and access instructions

• Cloud storage / file delivery platforms → secure hosting of PDFs, worksheets, and bonus materials

• Meta (Facebook / Instagram), Meta Ads Manager, Meta Pixel → advertising analytics, retargeting, conversion tracking

• Google Analytics / Google Tag Manager → performance tracking, traffic insights

Additional Services (examples):

• Domain and email hosting providers

• Session analytics and heatmap tools

We do not sell or rent personal data. Where required, we sign Data Processing Agreements (DPAs) and use safeguards.

6. Cookies & Tracking Technologies

We use cookies, pixels, and similar tools to:

• Keep website and checkout functional

• Remember user choices (currency, region)

• Analyze page performance and conversions

• Show relevant advertising, including Facebook/Instagram retargeting

You can manage or disable cookies in browser settings. Some features may not function optimally if cookies are rejected.

7. Data Retention

We keep data only as long as needed to:

• Deliver orders and provide access to digital materials

• Offer customer support

• Satisfy legal and tax obligations (typically up to 10 years)

• Maintain marketing permissions until consent is withdrawn

Afterward, data is securely deleted or anonymized.

8. International Data Transfers

Your data may be transferred outside the EU/EEA (e.g., email providers or payment processors in the US).

Appropriate safeguards include:

• Standard Contractual Clauses (SCCs)

• Adequacy decisions by the European Commission

• Vendor compliance with GDPR-level protections

9. Your Rights under GDPR (EU/EEA & Italy)

If located in the EU/EEA (including Italy), you have the right to:

• Access personal data

• Correct inaccurate or incomplete data

• Request deletion (“right to be forgotten”)

• Restrict or object to certain processing

• Request data portability

• Withdraw consent for marketing communications

You can also lodge a complaint with your local Data Protection Authority (Italy: Garante Privacy).

10. Your Rights under CCPA (California, USA)

California residents can:

• Know what personal data we collect and how it is used

• Request deletion of personal data (subject to legal limitations)

• Request correction of inaccurate data

• Opt out of certain data sharing practices

ShedCraft Co. does not sell personal data and will not discriminate for exercising privacy rights.

11. Exercising Your Rights

Contact us at: info@shedcraftco.com

Include the email used at checkout to locate your record. Verification may be required.

12. Data Security

We implement reasonable technical and organizational measures:

• Encrypted payment processing

• SSL/TLS secure transmission

• Access controls and monitoring

• Download protection and abuse monitoring

No online system is 100% risk-free; by purchasing, you acknowledge inherent transmission risks.

13. Children’s Privacy

Products are intended for adults.

• EU/EEA: we do not knowingly collect data from anyone under 16

• US: we do not knowingly collect data from anyone under 13

Contact info@shedcraftco.com if a minor has provided data.

14. Business Transfers

If ShedCraft Co. merges, is acquired, or sells assets, customer data may be transferred. Notification will be provided.

15. Policy Updates

We may update this Privacy Policy to reflect law, operations, or technology changes. The Last updated date shows the most recent version. Material changes will be communicated.

16. Language and Jurisdiction

This Privacy Policy is provided in English. For EU/Italian customers, an Italian version may also be provided. Local legal requirements prevail.

© 2025 ShedCraft Co. — All Rights Reserved