Last updated: 29/08/2025

This Privacy Policy describes how Scream Designs™ (“we”, “us”, or “our”) collects, uses, and protects your personal data in compliance with:

• the General Data Protection Regulation (GDPR – EU Regulation 2016/679)

• the Italian Personal Data Protection Code (Legislative Decree no. 196/2003, as amended)

• the California Consumer Privacy Act (CCPA)

• and other relevant international privacy laws.

1. Data Controller

• Name: Scream Designs™

• Jurisdiction: Italy

• Email: info@screamdesigns.shop

2. Types of Personal Data Collected

We collect the following categories of personal data:

• Identification data: full name, email address

• Transaction data: payment method, transaction ID (via Mollie Payments, Stripe, PayPal)

• Technical data: IP address, browser type, device type, download logs

• Usage data: interaction with our website, analytics data, advertising interactions

3. Legal Bases for Processing

We process your data based on:

• Contractual necessity: to fulfill your orders and provide services

• Consent: for marketing communications (where required)

• Legal obligations: tax and accounting compliance

• Legitimate interest: fraud prevention, security, improving our services

4. Purposes of Data Processing

Your data is processed to:

• Complete and manage purchases of digital STL files

• Deliver download links (via direct links or cloud hosting)

• Prevent fraud and misuse of licenses

• Provide customer support and respond to inquiries

• Send newsletters and product updates (if subscribed)

• Improve website functionality and user experience through analytics

5. Third-Party Services

We may share limited data with trusted third parties, including:

Core Services

• Mollie Payments, Stripe, PayPal → payment processing

• Systeme.io / Shopify → e-commerce platform and checkout management

• Google Drive / Cloud hosting → file delivery

• Meta (Facebook, Instagram), Meta Events Manager, Meta Ads Pixel → advertising & conversion tracking

• Google Analytics & Google Tag Manager → website analytics and event tracking

• Microsoft Clarity → session replay & user interaction analytics

• Amazon CloudFront → content delivery network (CDN)

Additional Services (when applicable)

• Amazon Web Services (AWS) → hosting and storage solutions

• GoDaddy Web Hosting, GoDaddy Professional Email, GoDaddy Digital Marketing Suite → website hosting, email services, and marketing

• Sectigo CodeGuard → backup & website security

• Bunny CDN → content delivery optimization

• Vertigo Media → marketing & advertising services

6. Cookies & Tracking Technologies

We use cookies, pixels, and similar technologies to:

• Ensure the website functions properly

• Analyze usage patterns

• Display targeted advertising

You can manage cookie preferences through your browser settings. See our Cookie Policy for full details.

7. Data Retention

We retain personal data as long as necessary to:

• Fulfill contractual and legal obligations

• Provide customer support

• Maintain business records (up to 10 years for accounting)

• Retain marketing data until consent is withdrawn

8. International Data Transfers

We comply with GDPR rules for international transfers by using:

• Standard Contractual Clauses (SCCs) where required

• Adequacy decisions by the European Commission

9. Your Rights under GDPR (EU/EEA & Italy)

If you are located in the European Union (EU) or European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR) and the Italian Personal Data Protection Code:

• Right of Access – obtain confirmation and a copy of the personal data we hold about you.

• Right to Rectification – request correction of inaccurate or incomplete data.

• Right to Erasure (“Right to be Forgotten”) – request deletion of your personal data.

• Right to Restrict Processing – request limitation of how your data is processed.

• Right to Object – object to processing of your personal data in certain situations.

• Right to Data Portability – receive your data in a structured, commonly used, machine-readable format.

• Right to Withdraw Consent – withdraw your consent at any time (where processing is based on consent).

Authorities to lodge a complaint with:

• Italy: Garante per la Protezione dei Dati Personali – www.garanteprivacy.it

• EU: Any competent Data Protection Authority

10. Your Rights under CCPA/CPRA (California, USA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know – request details about the categories and specific personal data we have collected.

• Right to Delete – request deletion of personal information, subject to certain exceptions.

• Right to Correct – request correction of inaccurate personal information.

• Right to Opt-Out of Sale/Sharing – we do not sell or share your personal data. If this changes, you will be notified and given the right to opt out.

• Right to Limit Use of Sensitive Personal Information – restrict the use of sensitive personal information.

• Right to Non-Discrimination – you will not be discriminated against for exercising your rights.

11. How to Exercise Your Rights

To exercise your rights, contact us at:

info@screamdesigns.shop

12. Data Security

We implement technical and organizational measures including:

• Encrypted payment processing

• Secure server environments

• Access control and monitoring

13. Children’s Privacy

Our products and services are not intended for children under 16 (EU) or 13 (US). We do not knowingly collect data from minors.

14. Business Transfers

In case of sale, merger, or acquisition, your data may be transferred to the acquiring entity. You will be informed if your rights are affected.

15. Policy Updates

We may update this Privacy Policy to reflect legal or operational changes. The latest revision date is always displayed at the top.

16. Italian Version of Privacy Policy

This Privacy Policy is also available in Italian to ensure compliance with Italian law (Codice Privacy, D.Lgs. 196/2003 e s.m.i. e GDPR).

If you are an Italian resident, please refer to the Italian version for the legally binding text.