Privacy Policy
1. Introduction
At Enchanted Crafts Studios (referred to as "we," "our," or "us"), we hold your privacy in the highest regard
and we are committed to protecting your personal information. This Privacy Policy outlines our approach to
collecting, using, and safeguarding your data when you access our website and services.
We collect only the information necessary to provide you with optimal functionality, enhance your user
experience, and comply with our legal obligations. This may include contact information for communication,
account details for user management, and usage data to analyze and improve our services.
We strictly adhere to globally recognized privacy regulations, including the General Data Protection Regulation
(GDPR), the California Consumer Privacy Act (CCPA), and the Children’s Online Privacy Protection Act (COPPA).
Our practices are designed to meet these standards and ensure that your rights are fully respected.
2. Information We Collect
We collect various types of information to provide and improve our services, ensure a seamless user experience,
and comply with legal requirements. Below is an overview of the categories of data we collect:
a. Personal Information
We collect personal information you provide to us, which may include:
- Name
- Job title
- Industry
- Uploaded files (e.g., resumes or supporting documents)
- Description of the request (for quote inquiries)
- Position applied for (for career applications)
- Additional information (e.g., application details or inquiry descriptions)
b. Technical Data
When you interact with our website, we automatically collect technical data to improve functionality and monitor
performance. This includes:
- IP address
- Browser type and version
- Device information (e.g., operating system, screen resolution)
c. Behavioral Data
To better understand how users engage with our website, we collect behavioral data such as:
- Pages visited
- Time spent on the site
- Clicks and interactions (e.g., downloads, forms)
d. Marketing Data
For promotional purposes, we collect data related to marketing activities, including:
- Newsletter or promotional signup details
- Interaction with email campaigns (e.g., clicks, opens)
- Clicks and interactions (e.g., downloads, forms)
e. Third-Party Tools Data
We may collect information through integrations with third-party services to improve our operations,
communication, and analytics. These include:
I. Google Analytics for Firebase: - Used to analyze user behavior and usage trends on our website. Google aggregates this data to avoid
identifying individual users. While we do not share this data with other third parties, Google may use it for
its own analytics and reporting purposes.
- Opt-out: You can opt out of Google Analytics tracking by using the Google Analytics Opt-Out Browser
Add-on or disabling cookies in your browser settings.
II. EmailOctopus: - Used for managing email communications, including newsletters and promotional updates. Your email address and
interaction with our campaigns (e.g., clicks, opens) may be processed through this platform.
III. ClickUp: - Used for task and workflow management within our team. Data shared via the "Career Application" and "Get a
Quote" forms, such as your name and email address, may be organized and tracked within this tool to ensure
efficient processing of requests.
IV. Embedded Media Interactions: - Interactions with embedded content, such as videos or social media plugins, may collect behavioral data as
outlined by the respective third-party platform's privacy policy.
We ensure that any third-party tools we integrate comply with relevant privacy laws, and we carefully review
their data protection practices.
f. Legal Requests
In the event of legal obligations or requests, we may collect data to verify your identity, including:
- Identity verification details (if users exercise legal rights like data access or deletion)
g. Contact Details
We collect contact details to respond to inquiries and process opt-out requests:
- Email address (for inquiries or opt-out requests)
- Phone number (optional, for support purposes)
3. How We Use Collected Information
We use the information collected from you to enhance your experience, improve our services, and fulfill your
requests. Below are the primary ways in which we utilize the data:
a. Improving Website Functionality and User Experience
- Analyzing user behavior to optimize website performance and design.
- Customizing content and features to better align with user preferences and needs.
- Monitoring and troubleshooting technical issues to ensure smooth functionality.
b. Communicating Updates and Promotional Offers
- Sending newsletters and updates about our latest games, projects, and services.
- Sharing promotional offers or events related to game development, tailored to your interests.
- Providing important notifications such as changes to our policies or terms.
c. Responding to Inquiries and Requests
- Addressing your inquiries submitted through the Get a Quote or Contact Information forms.
- Processing job applications submitted via the Career Application form.
d. Enhancing Marketing and Outreach
- Measuring the effectiveness of email campaigns, newsletters, and other communications.
- Using aggregated data to refine our marketing strategies and reach broader audiences.
e. Ensuring Legal Compliance
- Verifying your identity to process requests related to data access, updates, or deletions under applicable
privacy laws.
- Complying with legal obligations or responding to lawful requests.
4. Sharing and Disclosure of Information
We take your privacy seriously and limit the sharing of your information to what is necessary for the purposes
outlined in this Privacy Policy. Below are the circumstances under which we may share your information:
a. Situations Where Information May Be Shared
I. With Service Providers: - We may share your information with trusted third-party service providers who assist us in operating our
website, analyzing user data, sending communications, or improving our services. For example:
- Analytics providers like Google Analytics for usage trends and website performance analysis.
- Email marketing platforms for sending newsletters or promotional updates.
II. To Comply with Legal Obligations: - We may disclose your information if required to do so by law, regulation, or a legal request (e.g., to comply
with GDPR, CCPA, COPPA and other requirements).
III. In Connection with Business Transactions: - In the event of a merger, acquisition, or sale of our business assets, your information may be transferred as
part of the transaction. You will be notified of such changes as required by law.
b. No Sale of User Data
We do not sell, rent, or trade your personal information to third parties under any circumstances. Your trust is
important to us, and we are committed to ensuring your data is used responsibly and ethically.
c. Safeguarding Your Information
Whenever we share information with service providers, we ensure that they are bound by strict confidentiality
obligations and comply with relevant privacy laws, using the data solely for the purposes specified by us.
5. Third-Party Services and Links
Our website integrates with third-party services to enhance functionality and streamline our operations. Below,
we outline how these services are used and provide a disclaimer for external links:
a. Integrations with Third-Party Tools
We rely on trusted third-party tools to support various aspects of our website, including:
I. Email Marketing via EmailOctopus: - We use EmailOctopus to manage newsletters, promotional updates, and other email communications. Your name and
email address may be stored on this platform for these purposes.
II. Project Management via ClickUp: - ClickUp is utilized for internal organization and task management. While user data is not directly stored on
ClickUp, it aids in managing workflows tied to user requests or inquiries.
III. Analytics Services: - Google Analytics for Firebase collects aggregated data about website usage, helping us understand user
behavior and improve functionality. For more on Google Analytics, see their Privacy Policy.
IV. Hosting Services: - Our website operates on secure hosting platforms that may process technical data to ensure performance and
reliability.
These tools are selected carefully, and we ensure compliance with relevant privacy laws. We recommend reviewing
the privacy policies of these third-party services for further details on their data handling practices.
b. External Links Disclaimer
Our website may contain links to external websites or platforms, such as embedded media or partner resources.
Please note:
- We do not control these external sites and are not responsible for their privacy practices.
- We encourage you to review their privacy policies to understand how they handle your data.
By using our website, you acknowledge that third-party tools and external links are subject to their own terms
and privacy policies.
6. Data Security
We are committed to protecting your personal information and have implemented measures to ensure its security.
These include:
- Encryption: Data is encrypted during transmission and storage, with encryption services provided by
trusted third-party providers, including Google Analytics, EmailOctopus, and ClickUp.
- Secure Infrastructure: Information is stored on secure servers with restricted access to authorized
personnel only.
While we take significant steps to protect your data, please note that no system can guarantee absolute
security. We encourage you to take precautions, such as using strong passwords and securing your devices.
In the event of a data breach, we will notify affected users promptly, as required by law, and provide guidance
on protective steps.
7. User Rights and Choices
We value your control over your personal information and strive to provide transparency and options for managing
your data. Below are your rights and the ways you can exercise them:
a. Access, Correction, and Deletion
You have the right to:
- Access: Request a copy of the personal information we have collected about you.
- Correction: Update or correct any inaccuracies in your personal information.
- Deletion: Request that we delete your personal data, subject to legal or contractual obligations
requiring retention.
To exercise these rights, please contact us using the details provided in the Contact Information section of
this policy. We will respond to your request within the timeframe required by applicable laws.
b. Opting Out of Communications
You can opt out of receiving promotional emails or newsletters by:
- Clicking the “unsubscribe” link included at the bottom of any email communication.
- Contacting us directly with your request to opt out.
- Deletion: Request that we delete your personal data, subject to legal or contractual obligations
requiring retention.
Please note that even if you opt out of promotional emails, we may still send you service-related
communications, such as updates related to your inquiries or transactions.
c. Managing Data Collection Practices
To control the collection of data through analytics tools, you can:
- Use the Google Analytics Opt-Out Browser Add-on to prevent data collection through Google Analytics.
d. Additional Rights Under Specific Laws
Depending on your location, you may have additional rights under laws such as the GDPR, CCPA, or other
applicable regulations. These rights may include data portability or restrictions on data processing.
If you believe your rights have not been fully respected, you also have the right to lodge a complaint with the
relevant supervisory authority in your jurisdiction.
8. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or other
operational needs.
a. Notification of Changes
When significant changes are made to this policy, we will notify users by:
- Posting an updated version on our website with the revised date clearly indicated.
- Sending an email notification if you have subscribed to our communications or provided contact details.
We encourage you to review these updates to stay informed about how we handle your personal data.
b. Reviewing the Policy
It is important to review this Privacy Policy periodically to ensure you are aware of any changes that may
affect you. By continuing to use our website or services after updates are made, you acknowledge and accept the
revised terms.
If you have any concerns or questions about changes to this policy, you can contact us using the details
provided in the Contact Information section.
9. Legal Compliance
Our website is committed to adhering to the highest standards of legal compliance, ensuring the privacy,
security, and accessibility of our users worldwide. Below, we outline the key regulations we comply with and the
measures we take to meet these requirements.
a. Applicable Laws and Regulations We recognize the importance of adhering to legal frameworks that govern user privacy, data protection, and
website functionality. Below is a more detailed explanation of the regulations we comply with:
I. General Data Protection Regulation (GDPR): - Applicable to residents of the European Union (EU) and the European Economic Area (EEA), this regulation
mandates stringent controls on data collection, processing, and storage. It also ensures user rights such as
data access, correction, portability, and erasure.
II. California Consumer Privacy Act (CCPA): - Designed to protect the privacy of California residents, the CCPA grants users rights over their personal
data, including the ability to know what data is collected, request deletion, and opt out of data sales.
III. Children’s Online Privacy Protection Act (COPPA): - A U.S. regulation ensuring children under 13 are protected online. We comply by avoiding the collection of
data from minors without verifiable parental consent.
IV. Americans with Disabilities Act (ADA): - This U.S. law ensures our website is accessible to users with disabilities. We incorporate features like
screen reader compatibility, keyboard navigation, and appropriate contrast ratios to enhance accessibility.
V. Digital Millennium Copyright Act (DMCA): - We respect copyright protections and comply with takedown requests for any content that infringes intellectual
property rights.
VI. Personal Information Protection and Electronic Documents Act (PIPEDA): - This Canadian law governs how businesses handle personal information. We comply by ensuring transparency, user
consent, and secure handling of personal data for Canadian users.
VII. Privacy and Electronic Communications Regulations (PECR): - Enforced in the UK, PECR complements the GDPR by addressing the use of cookies and electronic communications,
including email and marketing.
VIII. Lei Geral de Proteção de Dados (LGPD): - This Brazilian law mandates data protection measures similar to GDPR, ensuring the rights of individuals and
requiring lawful bases for data processing.
IX. Personal Data Protection Act (PDPA): - Applicable in Singapore, the PDPA provides a framework for organizations to collect, use, and disclose
personal data responsibly.
X. China Cybersecurity Law (CCL): - Focused on cybersecurity and data protection, this law requires transparent practices and safeguards for
handling personal and sensitive information.
XI. Impressum Requirements: - In countries like Germany and Austria, websites must include mandatory legal disclosures, such as company
details and contact information. We ensure compliance with these requirements for users in applicable
jurisdictions.
b. Ensuring Compliance
To comply with these laws, we have implemented the following measures:
- Privacy Practices : Clearly outlining how user data is collected, used, stored, and shared in
accordance with global regulations.
- User Rights: Providing mechanisms for users to access, correct, or delete their data, as required by
regulations like GDPR and CCPA.
- Parental Consent: Ensuring compliance with COPPA by not knowingly collecting data from children under
the age of 13 without verifiable parental consent.
- Accessibility: Designing our website to meet ADA standards, including compatibility with assistive
technologies.
- Copyright Protections: Responding to DMCA takedown notices and respecting intellectual property rights.
- Cookie Management: Implementing cookie consent banners where applicable in line with GDPR, PECR, and
similar regulations.
- Global Data Security: Encrypting data and maintaining secure storage and transmission practices to meet
the standards of laws like LGPD, PDPA, and PIPEDA.
c. Updates and Oversight
We regularly review and update our policies and procedures to stay compliant with evolving legal requirements.
By maintaining transparency and prioritizing user trust, we ensure that our website aligns with global standards
of privacy, accessibility, and security.
If you have any questions about our compliance practices, feel free to contact us using the details provided in
the Contact Information section.
10. Contact Information
If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal
information, please feel free to contact us through any of the following methods:
We are committed to responding to your inquiries promptly and ensuring that your privacy rights are respected.
Responsible Entity
Enchanted Crafts Studios SRL is the entity responsible for processing your personal data in compliance with this
Privacy Policy and applicable laws. Our team ensures that all data is handled securely and in alignment with the
commitments outlined here.