Legal

Privacy Policy

How we collect, use, and protect your personal information.

Last updated: March 15, 2026  ·  Effective: March 15, 2026
This Privacy Policy explains how The Creative Record ("we," "us," or "our") collects, uses, and protects information when you visit thecreativerecord.com or purchase our products. We keep it short and plain.

1. Information We Collect

Information You Provide

When you purchase a product or create an account, we collect:

  • Email address -- for account creation, order confirmation, and product delivery
  • Name -- for order records and personalization
  • Payment information -- handled directly and securely by Stripe; we never see or store your full card details

Information Collected Automatically

When you visit our Site, we may automatically collect:

  • Browser type and version
  • Device type and operating system
  • IP address (anonymized where possible)
  • Pages visited and time spent on each page
  • Referring URL (how you found us)

This data is used to understand how our Site is used and to improve the experience. We do not sell this data.

2. How We Use Your Data

Purpose Data Used
Process and fulfill orders Email, name, payment info (via Stripe)
Deliver purchased products Email address
Send transactional emails (receipts, download links) Email address
Send newsletter and product updates (with consent) Email address
Respond to support requests Email, name, message content
Improve our Site and products Anonymized usage data
Comply with legal obligations As required by law

We do not use your data for advertising targeting on third-party platforms, and we do not sell your personal information to any third party.

3. Cookies and Tracking

Our Site uses cookies -- small text files stored on your device -- to improve functionality and understand usage. Types of cookies we may use:

  • Essential cookies: Required for the Site to function (session management, checkout). Cannot be disabled.
  • Analytics cookies: Help us understand how visitors use the Site (e.g., which pages are popular). Data is anonymized.
  • Preference cookies: Remember your settings across visits.

You can disable non-essential cookies through your browser settings. Note that disabling cookies may affect some Site functionality.

4. Third-Party Service Providers

We work with a small number of trusted third-party services to operate our business. Each has their own privacy policy governing how they handle data:

Stripe (Payment Processing)

We use Stripe to process all payments. When you complete a purchase, you interact directly with Stripe's secure payment system. We do not store your credit card number, CVV, or full payment details. Stripe is PCI DSS compliant.

Stripe Privacy Policy →

ConvertKit (Email Delivery)

We use ConvertKit to send transactional emails (order confirmations, download links) and newsletter communications. Your email address is shared with ConvertKit for this purpose. You can unsubscribe from marketing emails at any time via the unsubscribe link in any email.

ConvertKit Privacy Policy →

Hosting and Infrastructure

Our Site is hosted on standard web hosting infrastructure. Server logs may capture IP addresses and access patterns as part of normal operation.

We do not share your data with any other third parties unless required by law.

5. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this policy:

  • Purchase records: Retained for 7 years to comply with financial and tax regulations
  • Account data: Retained while your account is active, plus 90 days after deletion request
  • Email list: Until you unsubscribe or request removal
  • Support communications: Retained for 2 years
  • Analytics data: Retained in anonymized form for up to 24 months

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data (subject to legal retention requirements)
  • Portability: Request your data in a portable format
  • Opt-out: Unsubscribe from marketing communications at any time
  • Restriction: Request that we restrict processing of your data in certain circumstances

To exercise any of these rights, email us at sadie@goodostudios.com. We will respond within 30 days.

7. Data Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • HTTPS encryption across the entire Site
  • Secure, PCI-compliant payment processing via Stripe
  • Access controls limiting who can access personal data
  • Regular review of our security practices

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we take this seriously and will notify affected users of any breach as required by law.

8. Children's Privacy

Our Site and Products are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

9. International Users

Our Site is operated from the United States. If you are located outside the US, your data may be transferred to and processed in the US. By using our Site, you consent to this transfer. We take steps to ensure data is handled according to this Privacy Policy regardless of where it is processed.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. For significant changes, we may notify you by email. Continued use of the Site after changes constitutes acceptance of the updated policy.

11. Contact

For privacy questions, data requests, or concerns:

We aim to respond to all privacy requests within 30 days.