In short: we collect what is needed to deliver your purchases, and nothing more. No data is sold. Card details never pass through our servers, and no analytics or advertising tool loads without your consent.
Who processes your data
The data controller is Digital Artisanal, whose details appear in the legal notice. For any question about your data, or to exercise your rights, write to confidentialite@digitalartisnal.com.
What we collect
- Account: display name, e-mail address, password (stored hashed, never readable by us).
- Orders: works purchased, amounts, billing information you enter, download and licence history.
- Payment: a payment reference passed on by Stripe and, if you choose to save your card, its brand, last four digits and expiry date — never its full number nor its security code.
- Messages: what you write to us through the contact form or by e-mail, and the address to reply to.
- Newsletter: your e-mail address, the language you chose and the sign-up date, if you subscribe.
- Creators: identity, payout details and the documents requested before the first payout.
- Technical: server logs (IP address, page requested, date), kept for security and troubleshooting.
- Audience measurement and advertising: only if you accept them, the data described further down, in the section of the same name.
We collect no health data, no opinions, no precise location. Creators see the information they need to follow their sales, never your password nor your payment details.
Why, and on what basis
- Performing the contract: creating the account, delivering files, issuing order receipts and requested invoices, managing licences, paying creators their earnings.
- Legal obligation: keeping accounting records, checking creators’ identity before any payout.
- Legitimate interest: securing the site, preventing fraud and abusive file sharing.
- Consent: newsletter, audience measurement, advertising and conversions; each consent can be withdrawn at any time.
For how long
- Account and purchases: as long as the account exists. Your downloads stay available throughout that period.
- Accounting records (orders, invoices, payouts): 10 years, including after the account is closed.
- Newsletter: until you unsubscribe.
- Evidence in case of fraud or a disputed payment: for as long as the dispute lasts.
- Creators’ identity documents: as long as the creator account is open.
- Contact messages: three years after the last exchange.
- Audience measurement: 14 months at most for Google Analytics data.
- Technical logs: twelve months at most.
Once these periods are over, the data is deleted or made anonymous.
Who else has access
Our providers, only for what they do for us, and bound by confidentiality. Hostinger acts on our instructions alone. Stripe and Google also process some data for their own purposes (Stripe to fight fraud and meet its financial obligations, Google for advertising when you accept it): their own privacy policy then applies.
- Hosting and e-mail delivery: Hostinger International Ltd, 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. It hosts the site, its database and its files, and carries our e-mails — order confirmations, messages about your account, the newsletter — through its Hostinger Email service.
- Payment: Stripe, that is Stripe, Inc. (United States) and its affiliates, depending on the country where the publisher is established. Stripe receives the order amount, your name, your e-mail address and your billing country, the card details you enter in its form, and a technical fingerprint of your device and browser used to detect fraud. Its policy: stripe.com/privacy.
- Audience measurement and advertising: Google, that is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (United States), for Google Tag Manager, Google Analytics 4 and Google Ads — only if the publisher has switched them on, and only with your consent. Its policy: policies.google.com/privacy.
The measurement and advertising tools actually configured on this site are listed below; without your consent, none of them loads.
No audience measurement or advertising tool is set up on this site today: the “Audience measurement” and “Advertising and conversions” categories therefore have no effect, and your choice will simply be applied the day one is added.
No data is sold, and nothing is passed on for advertising without your consent. An authority can obtain your data only in the cases and in the manner the law provides.
Transfers outside your country
Depending on where you live, our providers may process your data in a country other than yours. Hostinger is established in Cyprus, in the European Union. Stripe and Google may process your data in the United States: these transfers are covered by the EU–US Data Privacy Framework and by the European Commission’s standard contractual clauses.
In every case, exchanges are encrypted and access to data is limited to what is strictly necessary. Details of these safeguards are available on request from confidentialite@digitalartisnal.com.
Audience measurement and advertising
In short: nothing loads without your consent. If you accept audience measurement, Google Analytics counts visits; if you also accept advertising, Google Ads measures the purchases that come from our ads. Each consent can be withdrawn in two clicks.
- What is collected: pages viewed, the source of the visit (search engine, link, ad), the steps of a purchase up to the order confirmation, the type of device and browser, your IP address and a cookie identifier specific to your browser. The site does not, of its own accord, pass on your name, your e-mail address or the content of your orders.
- Why: to understand which pages actually help, to measure the results of an advertising campaign, and to report conversions — purchases that follow an ad — to Google Ads and Merchant Center.
- On what basis: your consent, asked for in the cookie banner, separately for audience measurement and for advertising.
- For how long: 14 months at most for Google Analytics data, a period set in the tool that the publisher can shorten; the cookies themselves expire after 13 months at most.
- Withdrawing your consent: at any time, from the Cookies page; the tags immediately stop setting cookies for the category withdrawn.
The two consents are separate: accepting audience measurement does not mean accepting advertising. Until you accept “Advertising and conversions”, no advertising cookie is set; if Google Tag Manager loads for audience measurement alone, it is told that you refused advertising.
To prove to Google that this site belongs to us — a condition for following its presence in search results and for using Merchant Center — a verification tag may appear in the code of the pages. It sets no cookie and sends nothing about you.
Newsletter
You only receive it if you signed up yourself. Every issue contains an unsubscribe link: one click is enough, with no sign-in and no reason to give, and your address is removed from the list straight away.
Minors
The site is not aimed at children. Purchases are reserved for adults, or for minors acting with the consent of a parent or legal guardian. If you believe a minor has sent us data without that consent, write to confidentialite@digitalartisnal.com: we delete it.
Security
Exchanges with the site are encrypted, passwords are stored hashed, download links only work in the buyer’s account, forms are protected against automated submissions, and access to the administration is limited to the people who need it.
Should a data breach put you at risk, we would report it to the competent authority within the time limits set by law, and tell you directly: what happened, the data concerned, the measures taken and what you can do on your side.
Your rights
In short: access, rectification, erasure, portability, objection. One request, one answer within a month. Deleting your account ends access to your downloads: retrieve your files first.
Write to confidentialite@digitalartisnal.com, or use the Contact page. We may ask for something to verify your identity before acting, so that no one else obtains your data in your name.
You can withdraw your consent at any time, without affecting what was done before. If our answer does not satisfy you, you have the right to lodge a complaint with the data protection authority of your country of residence.
Cookies
The site sets the cookies it needs to work and to secure payment; those for audience measurement and advertising wait for your consent. The four categories, the list of cookies and the settings button are on the Cookies page.
Fonts and external resources
Typefaces are hosted on our own servers. Without your consent, displaying a page sends no request to any third-party service, with one exception: Stripe’s payment form, loaded on the cart and on the payment pages. Google’s tools only load after your consent.