Privacy Policy

Privacy Policy

Last updated: July 19, 2026

This Privacy Policy describes how Enlightened by Design, LLC (“we,” “us,” or “our”) collects, uses, stores, and protects information from visitors to sharkydraws.com and subscribers to SharkyPOD Monitor. By using our website or subscribing to SharkyPOD Monitor, you agree to the terms of this Privacy Policy.

It is our policy to respect your privacy regarding any information we may collect while operating our website.

1. Website Hosting and Platform

Our website is hosted on WordPress. WordPress’s privacy policy is located at https://automattic.com/privacy/

2. Cookies

When you visit our site, cookies may be set or collected by WordPress.com. Their cookie policy is located at https://automattic.com/cookies/

Sharkydraws.com does not collect cookies or track your usage data and does not have access to any personally identifiable information that may be attached to WordPress.com’s cookies.

We use Stripe as a Merchant of Record, and they may set their own cookies as part of the checkout process. Stripe’s privacy policy is located at https://stripe.com/privacy

We do not engage in cross-site tracking and do not respond to Do Not Track browser signals because we do not track visitors across third-party websites.

3. Data We Collect

We collect different types of data depending on how you interact with us:

Website visitors — Contact form
When you submit our contact form, we collect your full name, email address, and any information you choose to include in the message field. This data is used solely to respond to your inquiry. Our contact form is protected by reCAPTCHA, and Google’s privacy policy and terms of service apply when submitting this form

SharkyPOD Monitor subscribers
When you subscribe to SharkyPOD Monitor, we collect the following information:

  • Your email address, used to deliver stock alert notifications and service communications
  • Your Printify API Token, used exclusively to monitor variant availability within your Printify product catalog on your behalf
  • Your billing information, collected and processed by Stripe as Merchant of Record. All payment data is handled by Stripe in accordance with their privacy policy at https://stripe.com/privacy

SharkyPOD Monitor requires access to your Printify account via a Personal Access Token. We require that this token be generated exclusively with the following three read-only scopes:

• shops.read
• products.read
• catalog.read

These scopes permit SharkyPOD Monitor to view your shop and product catalog for the sole purpose of monitoring variant availability. These scopes do not permit any write, edit, publish, delete, or order-related actions on your Printify account.

Enlightened by Design, LLC expressly disclaims any liability arising from a customer granting access scopes beyond those listed above. If a token is generated with broader permissions than required — including but not limited to products.write, orders.write, or full access — and any unauthorized modification to the customer’s Printify account results, Enlightened by Design, LLC bears no responsibility for such modifications. Customers are solely responsible for ensuring their token is generated with only the three specified read-only scopes.

Your Printify API token is collected through a secure third-party form provider and stored in our cloud automation infrastructure, which employs industry-standard encryption at rest. It is used solely to authenticate read-only access to your Printify catalog for the purpose of inventory monitoring. Our service providers maintain GDPR-compliant data handling practices. You may request information about our data sub-processors by contacting us at help@sharkydraws.com

4. How We Use Your Data

We use the data we collect for the following purposes:

  • To operate and deliver the SharkyPOD Monitor service on your behalf
  • To send you email notifications about changes in your Printify product variant availability
  • To send you service communications including onboarding instructions, billing notices, and service updates
  • To respond to inquiries submitted through our contact form
  • To comply with legal obligations

Legal basis for processing (GDPR) For subscribers in the European Union, our legal basis for processing your personal data is performance of a contract — we need your data to provide the service you have subscribed to. For contact form inquiries, our legal basis is legitimate interest in responding to your communication.

5. How We Store and Protect Your Data

Your Printify API credentials and email address are stored securely within our secure cloud infrastructure and are accessible only to authorized personnel responsible for operating the SharkyPOD Monitor service.

Payment processing is handled exclusively by Stripe. Full payment card details are never accessible to Enlightened by Design, LLC — only limited transaction information such as partial card details and billing country are visible to us for the purpose of managing your subscription.

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Who We Share Your Data With

We do not sell your data to any third parties or share it with advertisers. We work with the following trusted third-party service providers who may process your data on our behalf:

  • Stripe — Payment processing and subscription management. Stripe acts as Merchant of Record for all transactions. Stripe Privacy Policy
  • Google — reCAPTCHA is used on our onboarding form to prevent spam and abuse. Google Privacy Policy
  • Email delivery provider — We use a third-party transactional email service to deliver stock alert notifications and service communications to you
  • Form and automation infrastructure — Your onboarding information is collected via a third-party form service and processed through secure cloud automation infrastructure to provision and maintain your subscription

Each of these providers is contractually obligated to handle your data in accordance with applicable privacy laws.

7. International Data Transfers

Your data may be processed and stored on servers located outside your country of residence, including in the United States and the European Union, as a result of our use of the third-party service providers listed above. By subscribing to SharkyPOD Monitor, you consent to these transfers.

8. How Long We Retain Your Data

  • SharkyPOD Monitor subscriber data — Your personal information (including Printify API tokens) are retained for the duration of your active subscription and permanently deleted within 30 days of cancellation or upon written request
  • Contact form submissions — retained indefinitely to facilitate ongoing communication unless you request deletion, which can be achieved by submitting a request through our contact form
  • Billing records — retained as required by law and in accordance with Stripe’s data retention policies

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Right to access — request a copy of the personal data we hold about you
  • Right to correction — request that we correct inaccurate or incomplete data
  • Right to deletion — request that we delete your personal data, subject to legal retention requirements
  • Right to data portability — request that we provide your data in a portable format
  • Right to object — object to our processing of your personal data in certain circumstances
  • Right to withdraw consent — where processing is based on consent, withdraw that consent at any time
  • Right not to be subject to automated decision-making — our automated processing is limited to service delivery (monitoring your Printify catalog and sending alerts) and does not involve profiling or decisions that produce legal or similarly significant effects on you

To exercise any of these rights, please contact us through our contact form at https://sharkydraws.com/get-in-touch/ and we will respond within 30 days.

To request deletion of your contact form data specifically, submit our contact form with the message “Delete My Data” and we will erase all submissions associated with your name and email address.

Supervisory Authority

If you are located in the European Union or European Economic Area and believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your national data protection supervisory authority. A list of EU national data protection authorities can be found at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. We would, however, appreciate the opportunity to address your concerns directly before you approach a supervisory authority — please contact us first at https://sharkydraws.com/get-in-touch/.

10. Children’s Privacy

SharkyPOD Monitor and sharkydraws.com are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify SharkyPOD Monitor subscribers of material changes via email at least 14 days before they take effect. The effective date at the top of this page will always reflect the date of the most recent update. Your continued use of our website or services after a change takes effect constitutes your acceptance of the updated policy.

12. Business Transfers

In the event that Enlightened by Design, LLC or SharkyPOD Monitor is sold, merged, or transferred to another party, or in the unlikely event that Enlightened by Design, LLC ceases operations or enters bankruptcy proceedings, subscriber data and other personal information collected through SharkyPOD Monitor may be transferred to the acquiring or successor party as part of that transaction. Any such transfer will be subject to confidentiality obligations, and the acquiring party will be required to honour the terms of this Privacy Policy with respect to your personal data. You will be notified via email at least 14 days prior to any such transfer taking effect, and you will have the option to request deletion of your data before the transfer occurs.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us through our contact form

Contact us