Privacy Policy

Who we are

WorkNest Studio is responsible for the personal information described in this policy.

Information we collect

When you buy

• Order information: the products you buy, prices, sales tax, order reference, date and time, and the status of your payment and of any refund.
• Email address and name: entered on the payment page, so we can send your receipt and identify your order if you contact us.
• Billing details: such as your billing country and ZIP or postal code, used to process the payment and work out any sales tax.
• Payment-related information: you enter your card or other payment details directly on Stripe's payment page. We don't receive or store your full card number. We may receive limited details from Stripe, such as the card brand, the last four digits and the expiration date.
• Checkout confirmations: a record that you accepted the Terms of Service and acknowledged the digital delivery terms, with the time.

When you contact us

Your name, email address or phone number and whatever you tell us in your message.

When you browse the website

Our hosting provider processes technical information needed to deliver and protect the website, such as your IP address, browser type, the pages you request and when. We don't use analytics tools, advertising networks, social media pixels or other tracking technologies.

How we use your information

We don't sell your personal information, share it for cross-context behavioral advertising, use it for targeted advertising or profiling, or send you marketing emails.

If you're in the European Economic Area, the United Kingdom or Switzerland, our legal bases are: performing our contract with you (orders, delivery, support), complying with legal obligations (tax records), and our legitimate interests in preventing fraud, securing our services and helping customers.

Payments and Stripe

We use Stripe for payment, analytics, and other business services. Stripe collects identifying information about the devices that connect to its services, including via cookies and similar technologies. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection, authentication, and analytics related to the performance of its services. You can learn more about Stripe and read its privacy policy at https://stripe.com/privacy.

Stripe collects this information on its own payment page when you pay. Our website itself doesn't load Stripe scripts or set Stripe cookies.

Who we share information with

We share personal information only with service providers that help us run the store, and only as needed for the purposes above:

• Stripe: payment processing, receipts and fraud prevention, as described above.
• Cloudflare, Inc.: website hosting, security and storage of the product files. See Cloudflare's privacy policy.
• Our email provider: sending and receiving support emails.
• Professional advisers and authorities: accountants, lawyers or government authorities when required by law, or to establish or defend legal claims.

If our business is ever sold or transferred, customer information may be transferred as part of that transaction, subject to this policy.

How long we keep information

• Order, payment and tax records: as long as tax and accounting laws require (generally up to seven years).
• Support emails: as long as needed to resolve your request, and normally no longer than three years after our last contact.
• Technical logs: kept by our hosting provider for a limited period for security and operations.
• Your cart: stays in your own browser until you remove the items, finish your purchase or clear your browser's site data.

Security

The whole website uses encrypted HTTPS connections. Card payments are entered on Stripe's payment page, and Stripe is certified as a PCI Service Provider Level 1. Product files are stored privately and can only be downloaded from an order page linked to a completed payment. Access to our business accounts is restricted and protected. No system is completely secure, but we take reasonable steps to protect the information we hold.

Your US state privacy rights

Depending on where you live (for example California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon or another state with a consumer privacy law), you may have the right to:

• know what personal information we collect, use and disclose, and get a copy of it;
• correct inaccurate personal information;
• delete personal information, subject to exceptions such as tax records we must keep;
• opt out of the sale or sharing of personal information, targeted advertising and profiling (we don't do any of these); and
• not be treated differently for exercising your rights.

California residents: in the last 12 months we collected identifiers (name, email address, IP address), commercial information (products purchased) and limited payment information, from you and from Stripe, for the business purposes described in this policy. We disclosed them only to the service providers listed above. We haven't sold or shared personal information, and we don't knowingly sell or share the personal information of consumers under 16.

Global Privacy Control and Do Not Track: we don't track visitors across websites. We treat a Global Privacy Control signal as a request to opt out of sale or sharing, which we already don't do.

To make a request, email support@decoyclaw.com or call +1 (417) 398-2273. We'll confirm your identity (usually by asking you to write from the email address on your order) and respond within the time the law requires, normally 45 days. An authorized agent can make a request for you with your written permission. If we decline your request, you can appeal by replying to our decision.

Visitors outside the United States

WorkNest Studio is based in the United States, and our service providers may process information in the United States and other countries. If you're in the EEA, the UK or Switzerland, you can also ask to restrict or object to processing, ask for your data in a portable format, and complain to your local data protection authority. Where personal information is transferred from those regions, our providers rely on recognized safeguards, such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework, where applicable.

Children

The website and our products are for adults. They aren't directed to children under 13, and we don't knowingly collect personal information from children under 13 (or under 16 where local law sets a higher age). If you think a child has given us personal information, contact us and we'll delete it.

Changes to this policy

We may update this policy from time to time. The current version is always on this page with the date it was last updated. If we make a significant change, we'll make it clear on this page.

Contact

Questions or requests about your personal information: