Privacy Policy

Welcome to Ellment Creative ("we," "us," or "our"). We are a website design business located in Minnesota, United States. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit ellmentcreative.com and use our client portal, including payment processing through Stripe.

By using our website and client portal, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our services.

We use the information we collect to:

• Provide, manage, and improve our web design services
• Process payments and send invoices, statements of work, and receipts
• Communicate with you about your projects, questions, and account
• Send administrative notices (e.g., policy updates, security alerts)
• Comply with legal obligations
• Protect against fraud, unauthorized access, and other harmful activity

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

All payment transactions are processed through Stripe, Inc. When you submit payment information, it is transmitted directly to Stripe using secure encryption. Ellment Creative does not store your full credit card number, CVV, or bank account details on our servers.

Stripe's use of your information is governed by their Privacy Policy, available at stripe.com/privacy. By making a payment through our portal, you also agree to Stripe's Terms of Service.

We may share your personal information only in the following limited circumstances:

• Service Providers: With trusted third-party vendors who help us operate our business (e.g., Stripe for payments, hosting providers, email platforms). These parties are contractually obligated to keep your information confidential.
• Legal Requirements: When required by law, court order, or government authority.
• Business Transfers: In the event of a merger, acquisition, or sale of our business assets, your information may be transferred as part of that transaction.
• With Your Consent: We may share information for other purposes with your explicit permission.

We implement industry-standard technical and organizational security measures to protect your personal information, including:

• SSL/TLS encryption for all data transmitted to and from our website and portal
• Secure, access-controlled servers for data storage
• Limited employee access to client data on a need-to-know basis
• Regular review of our security practices

While we take these precautions seriously, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your portal account.

In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

Our website may use cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device.

We may use:

• Essential cookies: Required for the portal to function (e.g., keeping you logged in)
• Analytics cookies: To understand how visitors use our site (e.g., Google Analytics)
• Preference cookies: To remember your settings

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our portal. A cookie consent banner is displayed on your first visit to allow you to manage your preferences.

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including:

• Active client records: Retained for the duration of our business relationship plus 7 years (for tax and legal compliance)
• Inactive accounts: Reviewed periodically; you may request deletion at any time
• Payment records: Retained as required by law and Stripe's policies

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal data (subject to legal retention requirements)
• Opt-Out: Opt out of any marketing communications at any time

To exercise any of these rights, please contact us at the address below. We will respond within 30 days.

California Residents: If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). Please contact us for more information.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately.

Our website or portal may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing any personal information.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through the portal. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

This document was prepared for general informational purposes. Ellment Creative recommends consulting a licensed attorney to ensure this policy complies with all applicable laws and regulations for your specific business circumstances.