PRIVACY Policy.

Creating an account and placing an order involves the following data:

• Account details: your name and email address.
• Order details: the service and package you purchased, your project requirements, reference files you upload, and messages exchanged about the order.
• Payment confirmation from Stripe (your card details are entered directly into Stripe and never reach our servers or database).

We use this data to create and deliver your order, communicate with you about its progress, send you transactional emails (order confirmation, delivery, messages), and process payment through Stripe. We don't sell your data. Optional analytics and advertising measurement are described below and only run with your consent.

• Account and order records are stored in our database.
• Uploaded reference files and delivered design files are stored on Cloudflare R2, accessed through time-limited secure links.
• Payments are processed and stored by Stripe under its own privacy policy.
• Transactional emails are sent through Resend.

We keep order records for as long as needed to support you after delivery (revisions, re-downloads, invoicing) and to meet our own accounting obligations. You can ask us to delete your account and associated data at any time, subject to what we're legally required to keep for tax and accounting purposes.

If you're in the EU/EEA or UK, you have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing, under the GDPR. To exercise any of these rights, message us from your order page or contact us through colonfilm.com.

Essential cookies keep you signed in and remember your cookie choice for 180 days. With your consent, Google Analytics measures visits and purchases. We store campaign attribution and analytics identifiers in your browser for up to 90 days and associate them with your payment to measure which campaigns generate orders. Advertising click identifiers are stored only if you also accept advertising measurement. We do not send your name, email, messages or project files to Analytics. You can accept, reject or withdraw optional cookies through Cookie preferences at the bottom of the page. Rejecting them does not prevent purchases.

If this policy changes materially, we'll update the date above and, for significant changes, let existing clients know via email.