Skip to main content
Analog Elk

Legal

Privacy Policy

Last updated: [EFFECTIVE DATE]

This document is a template and has not yet been reviewed by legal counsel. It is provided for transparency and does not constitute legal advice.

This Privacy Policy explains how [LEGAL ENTITY NAME] (“Analog Elk,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards your information when you visit analogelk.com, use our client portal, or otherwise engage our creative and production services (collectively, the “Services”). By using the Services, you agree to the practices described here.

1. Information We Collect

We collect the following categories of information:

  • Information you provide directly. Your name, email address, phone number, company, billing details, project briefs, and any content or files you share when you contact us, request a proposal, or work with us through the client portal.
  • Account & portal data. Credentials and project records associated with your client portal account, including invoices, deliverables, and communications.
  • Payment information. When you pay an invoice, your payment is processed by our payment processor (see Payment Processing below). We do not store full card numbers on our servers.
  • Usage & device data. Privacy-respecting analytics such as pages visited, referring URLs, approximate region, and device/browser type, collected via our self-hosted analytics (see Cookies & Analytics below).

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the Services;
  • Communicate with you about projects, proposals, and support;
  • Process payments and send invoices and receipts;
  • Maintain the security and integrity of the client portal;
  • Understand how our site is used so we can improve content and performance; and
  • Comply with legal obligations and enforce our agreements.

3. Cookies & Analytics

We use Matomo, a privacy-respecting, self-hosted analytics platform, to understand how visitors use our site. Matomo allows us to measure traffic without sharing your data with third-party advertising networks. We configure Matomo to minimize the personal data collected (for example, by anonymizing IP addresses where feasible). We use only the cookies necessary to operate the site and measure aggregate usage; we do not use third-party advertising or cross-site tracking cookies. You can control cookies through your browser settings.

4. Payment Processing

Payments are processed by Stripe, Inc., a PCI-DSS compliant payment processor. When you make a payment, your card and billing details are submitted directly to Stripe and handled under Stripe’s privacy policy. We receive limited information from Stripe (such as the last four digits of your card, payment status, and billing metadata) to manage invoices and our financial records. We do not store complete payment card numbers.

5. How We Share Information (Service Providers)

We do not sell your personal information. We share information only with trusted service providers who process data on our behalf and under contract, including:

  • Stripe for payment processing;
  • Matomo (self-hosted) for website analytics;
  • Directus for content management, used to store project and site content; and
  • Hosting, email, and infrastructure providers necessary to operate the Services.

We may also disclose information when required by law, to protect our rights, or in connection with a business transfer such as a merger or acquisition.

6. Data Retention

We retain personal information for as long as necessary to provide the Services, maintain business and financial records, resolve disputes, and comply with our legal obligations. When information is no longer needed, we delete or anonymize it. Retention periods for tax and financial records are governed by applicable law in [STATE/JURISDICTION].

7. Your Privacy Rights

Depending on where you live, you may have rights under laws such as the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA), including the right to:

  • Access the personal information we hold about you;
  • Request correction of inaccurate information;
  • Request deletion of your information;
  • Object to or restrict certain processing;
  • Request a portable copy of your information; and
  • Opt out of the “sale” or “sharing” of personal information (note: we do not sell personal information).

To exercise any of these rights, contact us at mike@analogelk.com. We will not discriminate against you for exercising your rights, and we will respond within the timeframes required by applicable law.

8. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect your information, including encrypted connections (HTTPS), access controls on the client portal, and reliance on PCI-compliant payment infrastructure. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

9. Children’s Privacy

Our Services are intended for businesses and individuals aged 18 and older. We do not knowingly collect personal information from children under 13 (or the minimum age in your jurisdiction). If you believe a child has provided us information, please contact us so we can delete it.

10. International Visitors

We operate from [STATE/JURISDICTION], United States. If you access the Services from outside the United States, you understand that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes may be communicated through the Services or by email. Your continued use of the Services after an update constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

See also our Terms of Service.