Mystic Forest Studio ("we", "us", or "our") operates irenpins.com. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have. Please read it carefully.
1. Information We Collect
Automatically collected
When you visit this site, our server and third-party tools may automatically record:
- IP address (anonymised where possible)
- Browser type and version, operating system
- Referring URL and exit pages
- Pages visited, time on page, scroll depth
- Device type (desktop, mobile, tablet)
This data is collected in aggregate to understand how visitors use the site. It is not used to identify you individually.
Information you give us
If you subscribe to our newsletter or download free resources, we collect your email address. We use this only to deliver the content you requested. We do not sell, rent, or share your email with third parties for marketing purposes.
Contact form submissions
If you contact us via a form, we collect your name and email address in order to respond. These are stored only as long as necessary to handle your enquiry.
Cookies and local storage
We use cookies and browser storage for analytics, session management, and affiliate tracking. See our Cookie Policy for full details.
2. Affiliate Links & Third-Party Merchants
This site links to third-party digital marketplaces, primarily Creative Fabrica, using affiliate tracking URLs. We do not process or store any payment information — all transactions happen directly on the merchant's platform.
When you click an affiliate link and visit a merchant's site, that merchant may set their own cookies, collect your IP address, and process your personal data in order to complete your purchase and track the referral. Their privacy policy governs what they collect. We encourage you to review it before purchasing.
Because all products featured here are digital goods (fonts, clipart, brushes, printables, SVG files, and similar), no shipping address or physical delivery information is involved.
3. Analytics
We use Google Analytics to understand aggregate traffic patterns — which content is popular, how visitors arrive, and how they navigate the site. Google Analytics sets cookies (_ga, _gid, and similar) on your browser. Data is anonymised; we cannot identify you from it.
Google may process this data on servers outside your country. By using this site, you consent to this processing. You can opt out at any time by installing the Google Analytics Opt-out Browser Add-on or by adjusting your cookie preferences.
4. Pinterest
We maintain a Pinterest account and may embed Pinterest content on this site. If you interact with embedded Pinterest elements, Pinterest may collect data about your visit in accordance with their own privacy policy. We do not receive personally identifiable data from these interactions.
5. How We Use Your Information
- To deliver newsletters and free downloads you have requested
- To respond to enquiries submitted via our contact form
- To understand how visitors use the site so we can improve it
- To detect and prevent spam, abuse, or fraudulent use of our contact forms
- To comply with legal obligations
We do not use your data for advertising profiling, sell it to data brokers, or share it with third parties for their marketing purposes.
6. Legal Basis for Processing (GDPR)
If you are in the European Economic Area or the UK, we process your data on the following legal bases:
- Consent — for newsletter subscriptions and analytics cookies (you can withdraw at any time)
- Legitimate interests — for server logs and spam prevention
- Legal obligation — where required by applicable law
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data ("right to be forgotten")
- Restriction — ask us to limit how we process your data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — unsubscribe at any time via the link in any email we send
To exercise any of these rights, contact us via the contact page. We will respond within 30 days.
8. Data Retention
- Email addresses (newsletter): kept until you unsubscribe
- Contact form data: deleted within 90 days of resolving your enquiry
- Google Analytics data: retained for 26 months per Google's default settings
- Server logs: retained for up to 90 days
9. Data Security
This site is served over HTTPS. We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10. Children's Privacy
This site is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. For material changes, we will post a notice on the site. Continued use of the site after changes constitutes acceptance of the revised policy.
12. Contact
Questions about this policy? Reach us via the contact page.