Last updated: June 12, 2026

1. Who we are

Shovel Studio ("Shovel," "we," "us," or "our") operates [WEBSITE URL] (the "Site"). If you have any questions about this policy or your data, contact us at blaze@shovel.studio

For visitors in the EEA/UK, the data controller is Shovel LLC.

2. What we collect

We collect only what we need to run the Site, respond to you, and (with your consent) understand how the Site is used.

Information you give us directly

• Newsletter sign-up: your email address and, optionally, your phone number.
• Contact & booking enquiries: your name, email, company, role, website (optional), budget range, project objectives, how you heard about us, and any notes you add. When you book a call, we also process your time zone to schedule it.
• Purchases: when you buy a product, your order and payment details are processed by Shopify through its secure checkout. We do not collect or store your full payment card details.

Information collected automatically (only with your consent)

• Usage and device data via analytics tools (see §5), including pages viewed, interactions, approximate location, browser and device type, and — through Microsoft Clarity — anonymized session recordings and heatmaps of how pages are used.

We do not knowingly collect data from anyone under 16.

3. How we use your information

• To send you our newsletter, where you've subscribed (you can unsubscribe at any time).
• To respond to your enquiries and schedule and conduct calls you book.
• To process and fulfill orders placed through our store.
• To protect the Site from spam and abuse (via reCAPTCHA).
• With your consent, to measure and improve the Site's performance and content.

4. Legal bases (EEA/UK)

We rely on: consent (newsletter, analytics cookies); performance of a contract (orders, bookings you request); and legitimate interests (security, responding to enquiries, running our business). You can withdraw consent at any time.

5. Analytics and tracking

We use the following tools, and only after you accept cookies:

• Google Analytics 4 — aggregate usage measurement.
• Meta (Facebook) Pixel — conversion measurement.
• Microsoft Clarity — anonymized session replay and heatmaps.

If you decline, none of these scripts are loaded. See our Cookie Policy for details and how to change your choice.

6. Who we share data with

We share data only with service providers who help us operate, and only as needed:

• Shopify — store, cart, and checkout.
• Mailchimp — newsletter delivery.
• Calendly — scheduling calls you book.
• Google, Meta, Microsoft — analytics (consent-gated).
• Google reCAPTCHA — spam protection.
• Sanity — content management and hosting infrastructure.

We do not sell your personal information. Some providers are located outside your country; where we transfer data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses.

7. How long we keep it

• Newsletter data: until you unsubscribe or ask us to delete it.
• Enquiry and booking data: for as long as needed to respond and for 5 years afterward.
• Order data: as required for tax and legal obligations.
• Analytics data: per each provider's retention settings.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your data, to object to processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including to know, delete, correct, and opt out of "sharing" for cross-context behavioral advertising. To exercise any right, email blaze@shovel.studio. You may also complain to your local data protection authority.

9. Security

We protect your data with appropriate technical and organizational measures: API credentials are held server-side only, contact submissions are validated and escaped, and webhooks are signature-verified. No method of transmission is 100% secure, but we work to safeguard your information.

10. Changes

We may update this policy from time to time. We'll post the new version here with a revised "Last updated" date.