Privacy Policy

Last updated: July 3, 2026

WHO WE ARE

Grey Street Press is the publishing imprint of Seraphina Grey, operated by JJE LLC. We sell digital downloads and print-on-demand products through greystreetpress.com.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights regarding your data.

Contact:

Email: [email protected]

Mail: Grey Street Press, PO BOX 2600, Peoria, AZ 85345, United States

WHAT WE COLLECT

We collect personal information when you browse our site, create an account, or place an order.

Information You Provide

- Account information — Name, email address, and password when you create an account

- Order information — Name, email address, billing address, and shipping address (for physical products) when you place an order

- Payment information — Credit or debit card details, processed securely by Stripe. We do not store your card information on our servers.

- Newsletter subscription — Your email address (and name, if provided) when you sign up for our newsletter or updates

- Communications — Any information you provide when you contact us via email

Information Collected Automatically

- Usage data — Pages visited, referring site, browser type, device type, and general location (country/region). Collected through Vercel Analytics for site performance purposes. This data is aggregated and does not personally identify you.

- Order activity — Download history, order status, and fulfillment records associated with your account or email address

HOW WE USE YOUR INFORMATION

We use your personal information only for the following purposes:

| Purpose | Legal Basis (GDPR) |

|---------|-------------------|

| Process and fulfill your orders | Performance of a contract |

| Deliver digital download links | Performance of a contract |

| Send order confirmations and shipping updates | Performance of a contract |

| Create and manage your account | Performance of a contract |

| Send our newsletter and occasional updates | Consent |

| Respond to your questions or support requests | Legitimate interest |

| Prevent fraud and secure our site | Legitimate interest |

| Improve site performance and user experience | Legitimate interest |

| Comply with legal and tax obligations | Legal obligation |

We do not use your information for:

- Selling or renting your personal data to third parties

- Targeted advertising or behavioral profiling

- Automated decision-making that produces legal effects

- Machine learning, artificial intelligence training, or dataset creation

WHO WE SHARE YOUR INFORMATION WITH

We share your personal information only with the following service providers, and only to the extent necessary to fulfill your order or operate our site:

| Provider | Purpose | Data Shared |

|----------|---------|-------------|

| Stripe | Payment processing | Name, email, billing address, payment card details |

| Printify | Print-on-demand production and shipping | Name, shipping address, order details |

| SMTP2GO | Transactional email delivery (order confirmations, download links) | Name, email address, order details |

| Klaviyo | Email marketing & newsletter delivery | Name, email address |

| Vercel | Website hosting and analytics | Aggregated usage data, IP address (anonymized) |

| Neon | Database hosting | Account and order records (encrypted at rest) |

We do not sell or share your personal information with data brokers, advertisers, or any unrelated third parties.

We may also disclose your information if required by law, legal process, or government request, or to protect the rights, property, or safety of Grey Street Press, our customers, or the public.

DATA RETENTION

We retain your personal information for as long as necessary to:

- Maintain your account (until you request deletion)

- Fulfill legal, tax, and accounting obligations (typically 7 years for financial records)

- Resolve disputes and enforce our agreements

Download link tokens expire automatically after a limited period. Expired tokens are not associated with your personal information.

If you request deletion of your account, we will remove your personal data within 30 days, except where retention is required by law.

DATA SECURITY

We take reasonable measures to protect your personal information, including:

- All data transmitted between your browser and our site is encrypted via HTTPS/TLS

- Payment information is processed by Stripe (PCI Level 1 certified) and never touches our servers

- Database records are encrypted at rest

- Access to personal data is limited to authorized systems

No method of transmission or storage is 100% secure. If you become aware of a security vulnerability, please contact us immediately at [email protected].

YOUR RIGHTS

All Customers

You have the right to:

- Access your personal information we hold

- Correct inaccurate personal information

- Delete your account and personal information (subject to legal retention requirements)

- Request a copy of your data in a portable format

- Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

- Right to know what personal information we collect, use, and disclose

- Right to delete your personal information

- Right to opt-out of the sale or sharing of personal information. We do not sell or share your personal information as defined by the CCPA.

- Right to non-discrimination for exercising your privacy rights

To submit a request, email [email protected] with the subject line "CCPA Request." We will verify your identity before processing your request and respond within 45 days.

European Economic Area / United Kingdom (GDPR)

If you are located in the EEA or UK, you have the rights listed above plus:

- Right to restrict processing of your personal information

- Right to object to processing based on legitimate interests

- Right to lodge a complaint with your local data protection authority

Our lawful bases for processing are described in the "How We Use Your Information" section above.

INTERNATIONAL DATA TRANSFERS

Grey Street Press is based in the United States. If you are accessing our site from outside the US, your personal information will be transferred to and processed in the United States.

For customers in the EEA or UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and the UK International Data Transfer Addendum, as applicable, to ensure appropriate safeguards for any international data transfers through our service providers.

AGE RESTRICTION

Grey Street Press is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from someone under 18, please contact us immediately at [email protected], and we will delete that information.

COOKIES AND TRACKING

Grey Street Press uses Vercel Analytics for aggregated site performance data. Vercel Analytics is designed to be privacy-friendly and does not use cookies for tracking purposes.

We do not use:

- Third-party advertising cookies

- Social media tracking pixels

- Cross-site tracking technologies

If we change our analytics or tracking practices in the future, we will update this policy accordingly.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.

Your continued use of the site after changes are posted constitutes acceptance of the updated policy.

CONTACT

For questions about this Privacy Policy or to exercise your data rights, contact:

Email: [email protected]

Mail: Grey Street Press

PO BOX 2600

Peoria, AZ 85345

United States