Last updated: October 10, 2026
This Privacy Policy explains how Palé Duck Design (“we,” “us,” or “our”), an independent showcase and portfolio website, processes personal data through its online platform. Our website is an e-commerce platform designed to present our creative work, offer updates via our newsletter, and allow visitors to securely purchase and download our digital/physical products directly from our independent store.
1. Data controller and contact information
The operator responsible for personal data is:
- Shop/Brand Name: Palé Duck Design
- Location: Madison, Wisconsin, 53703, USA
- Contact Method: via the official Contact Form on our website
For questions about privacy, personal data, or this Privacy Policy, please reach out to us using the contact form mentioned above.
1.1. Small Business & Good Faith Disclosure
Palé Duck Design is a small, independent, family-owned and operated creative business based in Madison, Wisconsin. Our website is maintained strictly in good faith to connect with art enthusiasts and showcase our original designs. We do not engage in mass data harvesting, automated profiling, or corporate data commercialization. As a micro-enterprise, we strive to comply with applicable privacy principles reasonably within our operational capacity. If you believe any part of this policy or our website functionality inadvertently breaches a specific data regulation, please contact us immediately through our official Contact Form; we are fully committed to evaluating your feedback and implementing prompt, amicable corrective actions in good faith.
2. Personal data we process
2.1. Contact, Inquiry, and Newsletter Information
We do not offer user accounts, registrations, or online checkouts on our website. However, we collect personal data that you voluntarily provide to us through our online forms. This includes:
- Contact Form: Name, email address, and the content of your message when you send us questions or custom requests.
- Newsletter Subscription: Email address and name (if requested) when you sign up to receive our shop updates, newsletters, promotional offers, and marketing communications.
This data is securely managed through our website platform provider’s integrated system solely for communication and direct marketing purposes.
2.2. E-commerce, Order Management, and Payment Processing
When you make a purchase on our website, we collect necessary personal data to process your order and deliver your products. This includes your name, email address, and billing address. If you purchase physical items (such as print-on-demand posters via Gelato), we also collect your physical shipping address and telephone number.
We utilize third-party, secure payment gateways (such as Stripe and PayPal) to handle credit card transactions. Your full credit card numbers, CVV codes, and sensitive financial details are processed and stored entirely by these secure payment providers in an encrypted format. Our website infrastructure (WooCommerce and Hostinger) never stores, sees, or has access to your raw financial account or credit card numbers.
2.3. Technical information and server logs
When you visit our website, our website platform provider automatically processes certain technical information and server logs for operating the service, maintaining network security, and preventing misuse. We do not directly collect or store these logs on our own devices. This technical data may include:
- IP address
- Date and time of access
- Browser type and operating system information
- Requested pages or resources
2.4. Cookies and Analytics
Cookies are small text files that a website may store on your device. We use basic, essential cookies provided natively by our website platform and WooCommerce to support the technical operation, security, shopping cart functionality (to remember items in your cart), and performance of our website.
Additionally, we may utilize web analytics tools to monitor website traffic, analyze general user behavior, and improve our showcase experience. These non-essential analytics cookies are deployed to help us measure general audience trends.
When you first visit our website, a Cookie Consent Banner will present you with choices regarding these non-essential cookies. You can modify your preferences at any time through that banner or via your browser settings.
3. How we use personal data
We use personal data solely to:
- Process, complete, and deliver your direct orders, including sending automated order confirmations, receipts, and secure digital download links via email.
- Respond to your customer inquiries, messages, and custom order feedback via our contact form.
- Send you our newsletter, marketing emails, promotional offers, and updates about our products, provided you have given your consent to join our mailing list.
- Operate, secure, and maintain our website and prevent malicious activities.
- Comply with applicable legal, tax, or administrative obligations.
We do not sell, rent, or trade your personal information or email lists to third parties.
4. Legal bases for processing
Depending on your location and the applicable law, we process personal data on the following legal bases:
- The fulfillment of a contract: To process your orders, deliver downloads, and fulfill purchases you make.
- Your explicit consent: For sending marketing communications, promotional newsletters, and accepting non-essential cookies through our consent banners.
- Taking steps at your request: Prior to entering into an interaction (e.g., answering your product questions).
- Our legitimate interests: In operating, securing, maintaining a functional showcase website, and promoting our creative products.
- Compliance with legal obligations.
5. Who we may share personal data with
We may share personal data only to the extent necessary to operate our website, run our business, or comply with legal obligations. Recipients may include:
- Our web platform, hosting, newsletter distribution, and form infrastructure providers.
- Our integrated print-on-demand fulfillment partners solely to print and ship physical orders to your designated address.
- Our integrated secure payment processors (such as Stripe or PayPal) to complete financial transactions.
- Secure email and technical service providers.
- Legal or professional advisers, if necessary.
- Competent public authorities, law enforcement, or courts, where required by law.
Google Search Console & Analytics
We use standard search console tools to monitor how our website performs in search results. Furthermore, if analytics features are active, analytics tools process website traffic and visitor interactions in accordance with their independent privacy policies to help us measure content relevance.
6. International data transfers
Because our website has visitors from around the world, personal data may be processed by service providers located outside your country. Where such transfers occur, our platform provider utilizes industry-standard safeguards and transfer mechanisms required by applicable data protection laws.
7. Data retention
We retain personal data only for as long as necessary for the purposes for which it was collected, or for as long as required for legal, business continuity, and dispute-resolution purposes.
Our general retention periods are as follows:
| Data category | Retention approach |
| Order and Transaction Records | Retained as required by US and Wisconsin tax regulations (typically up to 7 years for financial records). |
| Contact form inquiries and communications | Retained for the duration necessary to assist with your inquiry or follow-up customer requests. |
| Newsletter / Marketing email subscriptions | Retained until you choose to unsubscribe or withdraw your consent. |
| Website security, server logs, and platform data | Managed and retained entirely by our platform provider in accordance with their standard technical and security retention policies. |
8. Your rights
Depending on your location and applicable law, you may have the right to:
- Request access to the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your personal data (including removal from our contact database or newsletter list).
- Request restriction of or object to certain processing activities (such as direct marketing).
- Opt-out of marketing communications at any time by clicking the “unsubscribe” link in our emails.
- Request a portable copy of your data.
- Withdraw your cookie consent at any time without affecting the website’s basic functionality.
- Lodge a complaint with a competent data protection authority.
To exercise your rights, please submit a request through our official website contact form. We may request reasonable additional information to verify your identity before fulfilling requests.
9. Data security
We seek to use reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. Our website platform includes standard security mechanisms (such as SSL encryption) to protect data transmitted through our forms and during checkout.
10. Children’s privacy
Our website is a general audience showcase and is not directed to children. We do not knowingly collect personal data from children. If you believe that a child has provided personal data to us, please notify us immediately through our contact form.
11. Third-party Services and Infrastructure
While our store runs independently on WooCommerce, our technical infrastructure integrates securely with trusted third-party providers (such as Hostinger and Stripe etc.) to execute transactions and shipping. Your data protection rights are fully respected during these technical interactions.
Our website may contain links to our official Etsy storefront. Once you click on these links and leave our site, please note that we do not have any control over that external website. Therefore, we cannot be responsible for the protection and privacy of any information you provide while visiting such sites, and such sites are governed by their own privacy statements.
12. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in our website features, business operations, or legal requirements. We will publish the current version on this page and update the “Last updated” date at the top.
13. Contact us
For questions or requests regarding this Privacy Policy, please contact us directly through our online system:
- Interactive Form: Contact Form
- Location: Madison, Wisconsin, 53703, USA