Privacy Policy

1. Overview & Data Controller

This Privacy Policy explains how personal information is collected, used, disclosed, and protected when you visit penciland.com (the "Website"), request free sample materials, or purchase our printable digital coloring publications.

Data Controller Identity: The Website and the digital brand Penciland are operated by Penciland Creative Studio, an independent digital publishing studio established in the Dominican Republic and serving an international audience of colorists across North America, Europe, the United Kingdom, Latin America, and globally.

We act as the Data Controller responsible for personal information directly collected through our Website. For any privacy-related inquiries, data rights requests, or questions regarding this Policy, contact us directly at support@penciland.com.

2. Categories of Information We Collect

We adhere to the international principle of data minimization. We only collect personal information that is reasonably necessary to fulfill your orders, provide technical support, secure our service, and communicate updates you choose to receive:

3. Legal Grounds for Processing (GDPR Compliance)

For individuals located in the European Economic Area (EEA), the United Kingdom, or jurisdictions with similar legal frameworks, we process your personal data under the following specific lawful bases (Article 6 of the GDPR):

4. Service Providers and Data Sharing

We do not operate our own physical servers or proprietary payment gateways. We engage reputable third-party infrastructure providers that process data on our behalf subject to confidentiality obligations:

5. We Do Not Sell Your Personal Information

Penciland operates solely as a creator-supported digital publishing studio funded by direct sales of our coloring books.

6. Defined Data Retention Schedule

In compliance with the GDPR principle of storage limitation, personal data is retained only for the duration necessary to satisfy the specific purpose for which it was collected:

7. International Data Transfers

Because our infrastructure partners (including Cloudflare and Whop) operate distributed global networks, personal data collected through penciland.com may be transferred to, stored, and processed in the United States and other jurisdictions outside your country of residence.

Where personal data originating in the European Economic Area (EEA), United Kingdom, or Switzerland is transferred internationally, we rely on recognized transfer mechanisms approved by the European Commission, including:

• Adequacy Decisions: Where the European Commission has determined that the recipient jurisdiction ensures an adequate level of data protection.
• Standard Contractual Clauses (SCCs): Contractual safeguards adopted by our service providers that obligate recipients to protect European personal data in accordance with EU standards.
• Commercial Data Privacy Frameworks: Where applicable to certified US enterprise processors.

8. Your Privacy Rights & Timeframes

Depending on your location and applicable privacy statutes (including GDPR, UK Data Protection Act, CCPA/CPRA, and PIPEDA), you hold specific enforceable statutory rights:

• Right of Access: Request confirmation and an export copy of personal data we maintain about you.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete contact information.
• Right to Erasure ("Right to be Forgotten"): Request permanent deletion of personal data, subject to statutory retention exceptions for accounting and tax records.
• Right to Restrict or Object: Object to processing for direct email marketing at any time.
• Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Withdraw marketing consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

9. Children's Online Privacy & Family Use

While our coloring books feature heartwarming, family-friendly designs created for colorists of all ages, our commercial storefront and newsletter subscriptions are directed exclusively to adults, parents, and caregivers aged 18 and older.

We do not knowingly collect personal identifiable information directly from children under the age of 13 (or under 16 where required by EEA/UK law). If you are a parent or legal guardian and believe that your child has submitted an email address on our website, please contact us at support@penciland.com and we will promptly purge the record from our active databases.

10. Cookies, Technical Telemetry & Amendments

We do not deploy invasive cross-site advertising trackers or third-party marketing pixels on penciland.com. We utilize only essential and functional technical cookies required for storefront navigation, security verification (Turnstile), and checkout delivery. For complete details, consult our standalone Cookie & Tracking Policy.

We may update this Privacy Policy periodically to reflect technological adjustments, operational developments, or statutory amendments. When changes are made, the "Last Updated" date at the top of this document will be modified. In the event of material modifications impacting your rights, we will provide conspicuous notice on our Website homepage.