Privacy policy

Overview

Artifact Factory operates a website that provides digital documentation products and related resources designed to support organizations preparing for CMMC Level 2 compliance.

This Privacy Policy explains how personal information is collected, used, and protected when you visit the website, make a purchase, or contact us.

We take a practical, minimal approach to data collection. Information is collected only when necessary to operate the site, process transactions, deliver digital products, and provide support.

 

Information We Collect

We collect only the information needed to run the business and deliver the product effectively.

When you interact with the site, this may include:

Information you provide directly

  • Name
  • Email address
  • Billing address
  • Payment information (processed securely through third-party providers)
  • Any information submitted through contact forms or support requests

Transaction-related information

  • Products purchased
  • Order history
  • Payment confirmations

Technical and usage data

  • IP address
  • Browser and device information
  • Pages visited and general interaction with the site
  • Basic analytics used to improve performance and usability

We do not require account creation to access purchased materials.

 

How Your Information Is Used

Your information is used for a limited and specific set of purposes:

  • Processing purchases and delivering digital products
  • Providing access to purchased files
  • Responding to support requests
  • Maintaining and improving the website
  • Detecting or preventing fraud, abuse, or unauthorized access
  • Meeting legal or regulatory requirements

You may receive essential service-related communications, such as order confirmations, delivery instructions, or important updates.

Marketing communication, if used at all, is limited and optional. You can opt out at any time.

 

A Note on Data Use

Artifact Factory is not built around data collection or advertising.

Personal information is used to operate the business and deliver the product — not to build advertising profiles or sell user data.

We do not sell personal information.

We do not use your activity to track you across other websites.

 

Digital Product Delivery

All products offered by Artifact Factory are delivered digitally.

Customer information is used strictly to process payment, provide access to purchased materials, and ensure successful delivery.

No physical shipping or fulfillment processes are involved.

 

How Information Is Shared

We share information only when it is necessary to operate the website and complete transactions.

 

This may include:

  • Payment processors (to securely process transactions)
  • Website hosting and platform providers (such as Shopify)
  • Email and communication tools
  • Analytics providers used to understand and improve site performance

These providers are given access only to the information required to perform their function.

We may also disclose information if required by law, or if necessary to protect the rights, security, or integrity of Artifact Factory or its users.

 

Shopify and Service Providers

Artifact Factory uses third-party services, including Shopify, to operate the website and process payments.

These providers may process personal information as needed to support core functionality, including checkout, payment processing, and delivery of digital content.

Your information is handled according to their applicable privacy practices where relevant.

 

Cookies and Analytics

The site uses standard cookies and similar technologies to ensure the website functions properly and to understand how visitors use the site.

These tools help improve performance and user experience over time.

We do not use cookies to build cross-site advertising profiles.

You can control or disable cookies through your browser settings if you prefer.

 

Data Retention

Personal information is retained only as long as necessary to:

  • complete transactions
  • provide access to purchased products
  • maintain business and financial records
  • comply with legal obligations

Data Security

Artifact Factory uses reasonable administrative, technical, and organizational measures to protect personal information.

While no system is completely secure, we take practical steps to safeguard the information we collect and limit access to what is necessary to operate the business.

 

Your Rights

Depending on your location, you may have the right to:

  • request access to your personal information
  • request correction of inaccurate data
  • request deletion of your information (where applicable)
  • opt out of marketing communications

To make a request, contact us using the information below.

 

Children’s Data

This website is not intended for children under the age of 18, and we do not knowingly collect personal information from minors.

 

Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in how the site operates, legal requirements, or business practices.

Any updates will be posted on this page with a revised effective date.

 

Contact

If you have any questions about this Privacy Policy or how your information is handled, you can reach out at:

📧 hello@artifact-factory.com