Privacy notice
Last updated: 2 November 2026 · Version 2026-11-02-single-opt-in-v1
Who is responsible for your information?
Clearfold Studio is an independent sole trader business. For privacy questions and requests, email clearfoldstudio.team@gmail.com.
Free downloads
When you request a free printable through our website form, we ask for your email address to deliver the game and guide. Downloads are made available after submitting the form; email delivery may also provide the requested files. Marketing is strictly optional, and you may obtain the free resources without selecting the marketing checkbox.
The email address is used to fulfil your request and handle delivery problems. This delivery request does not itself subscribe you to our marketing list. Brevo processes delivery addresses and technical delivery records. Our lawful basis for delivery is our legitimate interest in fulfilling your requested free resource.
Optional email subscriptions
If you actively select the separate, initially unticked marketing checkbox, you ask to receive baby shower hosting ideas, Clearfold Studio product news and occasional Etsy offers. With single opt-in, a new subscription can start immediately without a second confirmation email. This choice is optional and never required to receive your free download.
We use your consent as the lawful basis for marketing. For a new marketing contact we record the consent wording and version, source page, server timestamp and privacy version with Brevo. Existing contact records, including previously unsubscribed contacts, are not automatically re-enrolled or overwritten by this form. You can unsubscribe at any time using a link in each marketing email.
Who provides the services?
Cloudflare hosts and protects this website. Brevo processes transactional delivery and marketing subscriptions through our website backend. Google hosts our contact mailbox. We do not sell our subscriber list.
Service providers may process information internationally under their applicable data-processing terms and transfer safeguards. Read Cloudflare’s privacy policy, Brevo’s privacy policy and Google’s privacy policy.
Security and request limits
We validate submissions, use a hidden anti-spam field and short-lived signed form tokens, and limit requests to protect the service. IP addresses and email addresses are transformed into keyed pseudonymous values for rate limiting; raw values are not used as rate-limit keys. Signed form tokens expire after 15 minutes. Limits apply separately at Cloudflare locations and are approximate. This website does not store form addresses or consent choices in browser storage or cookies.
Website analytics and links
This release does not add Google Analytics, advertising pixels, visitor identifiers or non-essential cookies. Cloudflare may process essential network and security information, including IP addresses and request details, to deliver and protect the site. We rely on our legitimate interests in operating a secure, reliable service for this processing.
Some links contain general campaign labels, such as “welcome email”, to help distinguish traffic sources. These labels do not contain your email address or a personal identifier. Clicking an Etsy link does not tell us whether you bought anything. Etsy handles checkout and its own data processing under its policies. We do not automatically subscribe Etsy buyers to our emails.
Permission to receive marketing is separate from permission for individual email tracking. We do not use your opens or clicks to personalise marketing or build an engagement profile without separate tracking consent. Our email provider may include technical delivery measurement in its messages. Delivery, bounce, subscription and unsubscribe records help us operate the service and honour your choices.
Unsubscribing and how long we keep information
Every marketing email includes an unsubscribe link. The requested delivery email is a service message, with no Etsy promotion; requesting it does not enrol you in the welcome sequence. You can also contact us at the email address above. Withdrawing consent stops future marketing; it does not affect the lawfulness of earlier processing.
We do not keep a separate database of delivery-only requests on the website. Brevo automatically deletes transactional delivery logs after one month. It is configured not to store email previews. These logs support delivery troubleshooting and security; they are not a marketing list. Requests without an active marketing opt-in are not used for marketing. We retain subscription information while you remain subscribed and as reasonably needed to administer your choices or demonstrate consent. We review records when a privacy request is received or the information is no longer needed. After you unsubscribe, we may keep a minimum suppression record so you are not accidentally contacted again, and limited records where required to meet legal obligations. We do not delete suppression records merely to re-add someone as subscribed.
Your rights
Depending on the applicable law and circumstances, you can ask to access, correct, erase or restrict the use of your personal information, request portability, object to processing based on legitimate interests, or withdraw consent. Email us to exercise your rights. You can complain to the UK Information Commissioner’s Office at ico.org.uk.
Who this service is for
Our newsletter is for adults organising celebrations. We do not knowingly seek newsletter subscriptions from children. Contact us if a child has submitted information so we can review and remove it where appropriate.
Changes
We update this notice when our services or data practices change. The revision date above identifies the current version.