[ PRIVACY NOTICE / LIVE SALES ]
ONLY WHAT
WE NEED.
Purchase data is limited to payment, delivery, one brief service-feedback invitation, support, fraud prevention and the records required by law.
WHO CONTROLS THE DATA
The data controller is Christian Eliseo Martull Aguín, trading as Chris Raw Studio / itsrawchris, self-employed professional (autónomo). Tax ID (NIF): 43221580A. Business and postal address: C/ Estel n.º 6, 1.º A, 07400 Alcúdia, Illes Balears, Spain. Privacy and support contact: contact@rawchris.com.
WHAT IS USED
Stripe processes your name, billing address, tax details where supplied, email, payment method information and transaction data, and generates the corresponding invoice. This site keeps Stripe order and invoice identifiers, product version, payment status, country, price, tax, consent records, a one way hash of the delivery email and an opaque individual licence ID. A private feedback link is associated with the order without adding the readable checkout email to the commerce database; if the buyer chooses to respond, the rating, selected product area and optional improvement note are stored. For download security, IP address and browser information are converted into keyed, non-public hashes before storage; raw values are not written to the commerce database. Project enquiries store the submitted contact details, project answers, reference links and any optional reference files. Privacy-first site measurement stores the event, page, external referrer domain, campaign tags, broad device class, active time and scroll depth. A random per-tab session token is kept in session storage and converted into a one-way hash before it reaches the analytics database, allowing aggregate session and engagement measurement without recognising a person across browser sessions. It uses no analytics cookies, raw IP address, full referrer URL, account identity or browser fingerprint. A readable email is added to the marketing list only after separate optional consent. This site does not store full card details.
WHY
The data is used to review and answer project enquiries, understand supplied creative references, perform the purchase contract, prove the licence accepted at checkout, deliver an identified copy, send one brief purchase-related feedback invitation approximately 48 hours after delivery, improve the product, apply download limits, detect unusual sharing, revoke access after refunds or disputes, answer support requests and meet accounting, tax and consumer law duties. A new project enquiry sends the studio mailbox a limited alert containing the contact and project summary; the complete brief and private files remain in the protected Studio database. The feedback request is optional and contains no promotion. Marketing email is separate and requires an optional consent that is never a condition of purchase.
OPTIONAL DISCOVERY ANSWER
If you choose to answer how you found Chris Raw, that answer is stored with your project enquiry and included in the studio notification. It is used to understand which channels bring enquiries, follows the same enquiry retention period and can be left blank. It does not enable browser analytics or subscribe you to marketing.
WHO RECEIVES IT
Stripe handles payment and invoice generation. OpenAI Sites and Cloudflare provide the site, database, feedback form and private file infrastructure. Google Workspace sends the transactional delivery email and the single delayed feedback invitation, and Google Drive stores a restricted accounting copy of each issued invoice. These providers process only the data needed for their role and use their applicable contractual and international transfer safeguards.
RETENTION AND RIGHTS
Accounting, contract, consent and licence records are retained for the period required to meet legal duties and establish or defend claims. Project enquiries and their private reference files are kept for up to 12 months and automatically removed at that point unless an active engagement or legal claim requires longer retention; you may request earlier deletion. Unattached or abandoned uploads are expired automatically. Download access expires after 72 hours. A queued feedback email keeps the delivery address only until the invitation is sent; the commerce database retains only the one way email hash, private invitation state and any optional response. Keyed download-security hashes and event outcomes are automatically removed after 90 days unless a documented fraud or infringement investigation requires evidence to be preserved. Privacy-first site-measurement events, hashed sessions and aggregate page engagement are retained for 13 months and then deleted or aggregated. The per-tab token disappears with the browser session and is not used for advertising or cross-session profiling. The identified ZIP contains an opaque licence ID and proof, not the buyer's name or email. Optional marketing emails include an unsubscribe route. You may request access, correction, deletion, restriction, objection or portability where those rights apply, and complain to the Spanish Data Protection Agency or your local authority.
OPTIONAL ANALYTICS & ESSENTIAL STORAGE
From 8 September 2026, optional site analytics starts only after you select Accept analytics. Rejecting does not restrict the website, project forms or purchases. Use Privacy settings at the bottom of any page to change your choice; withdrawal stops future analytics and clears the active tab token. The essential consent preference is stored locally for up to 180 days without automatically extending it on each visit. If storage is unavailable, analytics stays off. The analytics token renews after 30 minutes of inactivity. Older measurement records remain subject to the retention period above. The requested language preference and private access or checkout state are functional storage, separate from optional measurement. No advertising pixels or cross-site profiling are used. You may request deletion of previously collected information by contacting the studio; withdrawing analytics does not erase records needed for your purchase or enquiry.
ANONYMOUS SERVER TOTALS
Separately from optional browser analytics, from 8 September 2026 the site maintains anonymous daily counters of successful public HTML page responses to operate the site and understand content demand. Each counter contains only a UTC date, a public page path and a total. It stores no event-level record, exact time, IP address, user agent, referrer, campaign tag, account or session identifier. It writes no cookies or browser storage and is never joined to orders, enquiries or optional analytics. Known automated requests, prefetches and authenticated internal requests are excluded where detectable. These counters do not identify people or reconstruct browsing journeys. They remain active if you reject optional analytics and are retained for up to 397 days, with older buckets removed during subsequent counting. Hosting providers still process requests to deliver and secure the website as described above. Contact the studio with any privacy questions.