Privacy Policy

Last updated: February 2026

Graphite Post ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website graphitepost.com and use our subscription service.

1. Data We Collect

We may collect the following personal data:

Identity data: your name, email address, and shipping address
Payment data: processed securely by our payment provider (Lemon Squeezy). We do not store your credit card details.
Usage data: information about how you interact with our website, collected via cookies and analytics tools after your consent
Communication data: your email address when you subscribe to our mailing list

2. How We Use Your Data

We use your personal data for the following purposes:

To process and fulfill your subscription orders
To send you your monthly art package
To communicate with you about your subscription
To send marketing emails (only with your explicit consent)
To analyze website traffic and improve our service
To comply with legal obligations

3. Third-Party Services

We share your data with the following trusted third-party services:

Lemon Squeezy: payment processing and subscription management. Their privacy policy
Kit (ConvertKit): email marketing and mailing list management. Their privacy policy
Google Analytics (GA4): website analytics, activated only after your cookie consent. Their privacy policy
TikTok Pixel: advertising performance measurement, activated only after your cookie consent. Their privacy policy

We do not sell your personal data to third parties.

4. Cookies

Our website uses cookies. We only set analytics and advertising cookies after you give explicit consent via our cookie banner.

Essential cookies: required for basic site functionality (e.g., cookie consent preference, dark mode preference). These do not require consent.
Analytics cookies: Google Analytics — used to understand website traffic. Set only after consent.
Advertising cookies: TikTok Pixel — used to measure ad performance. Set only after consent.

You can withdraw your cookie consent at any time by clearing your browser cookies and revisiting our site.

5. Your Rights

Under the General Data Protection Regulation (GDPR) and other applicable data protection laws, you have the following rights:

Right of access: request a copy of the personal data we hold about you
Right to rectification: request correction of inaccurate or incomplete data
Right to erasure: request deletion of your personal data
Right to restrict processing: request that we limit how we use your data
Right to object: object to our processing of your data for marketing purposes
Right to data portability: request your data in a structured, machine-readable format

To exercise any of these rights, please contact us at julia@graphitepost.com.

6. Data Retention

We retain your personal data for as long as your subscription is active, plus an additional 12 months after cancellation for administrative and legal purposes. After this period, your data will be securely deleted.

Email marketing data is retained until you unsubscribe from our mailing list.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

8. Children's Privacy

Our service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Email: julia@graphitepost.com

Website: graphitepost.com