Privacy Policy.

Effective Date: June 11, 2026 · Grim Grin Graphics LLC · Lexington, Kentucky

1. Kentucky Privacy Law Disclosures

In strict compliance with Kentucky's privacy laws, we define "personal data" as any information that is linked or reasonably linkable to an identified or identifiable natural person. To maintain complete transparency, we disclose the following regarding your data:

• Types of Personal Data Processed: We process names, email addresses, project details, and IP addresses.
• Reasons for Processing: This data is processed exclusively to provide requested graphic design and marketing services, facilitate project communication, and maintain legally binding logs of your acceptance of our Terms of Service and Privacy Policy.
• Third-Party Data Sharing & Categories: We share necessary routing data exclusively with Hostinger, our web hosting and server security provider, to ensure secure data transmission.
• Sale of Personal Data: Grim Grin Graphics LLC does not, under any circumstances, sell your personal data. You may officially opt out of any future data sale by contacting us directly.
• Targeted Advertising: We do not currently use your contact form data for targeted third-party advertising. You retain the right to opt out of any future targeted advertising initiatives.
• Exercising Your Rights & Appeals: You maintain the right to access, correct, or delete your personal data. Furthermore, you have the explicit right to appeal any privacy rights decision we make. To submit a request or file an appeal, you must use our secure channel by emailing Social.media@grimgringraphics.com.

2. Client Asset & Retention Policy

Your intellectual property and internal business data remain strictly yours. Grim Grin Graphics enforces a ruthless retention protocol to protect your brand:

• No AI Ingestion: Client work, brand kits, and strategic documents are never fed into Artificial Intelligence generators or large language models for training.
• Strict Isolation: Your files are never shared with, utilized for, or exposed to other clients.
• Post-Project Destruction: Upon the completion of our working agreement and final delivery of assets, all files pertaining to your project will be securely destroyed.
• Active Client Vaulting: We securely hold and continuously work from brand kits and files only for ongoing, active clients in a safe, legally compliant manner.

3. Third-Party Vendor Disclosures & Form Routing

When you submit a project inquiry through our website, we execute a precise, closed-loop data handoff:

• Secure Transmission: Data submitted via our contact form is encrypted and protected by Hostinger's server security protocols during transmission.
• Delivery: The data is routed directly to Social.media@grimgringraphics.com.
• The Acceptance Log: Upon receipt, your Name, Date, Email, and Project Description are transferred into a secure internal log. This log is retained permanently as our official record of your acceptance of our Privacy Policy, Terms of Service, and legal standings.
• Email Destruction: Once your data is logged and our initial response is dispatched, the original transmission email is permanently destroyed to minimize exposure points.

4. Cookies & Analytics

This site sets no analytics or marketing cookies without your consent. See our Cookie Declaration for the full list, your current consent status, and controls to change or withdraw consent at any time.

5. Data Breach Notification Protocol

If Hostinger servers or our internal email infrastructure is ever compromised, every person recorded in the Acceptance Log will be notified within 72 hours using a legally structured Notice of Data Breach. That notice will identify what happened, what information was involved, what we are doing about it, and the concrete steps you can take to protect yourself, including:

• Placing a free fraud alert with any of the three major credit bureaus — Equifax (1-800-685-1111), Experian (1-888-397-3742), or TransUnion (1-888-909-8872). As soon as one bureau confirms your fraud alert, the others are notified.
• Requesting free credit reports after the alert is placed and reviewing them for accounts or inquiries you don't recognize.
• Reporting any misuse of your information at IdentityTheft.gov and following the FTC's recovery steps.
• Considering a free credit freeze, which prevents potential creditors from accessing your credit report until you lift it.