1. Data Controller Information
PrintCursive ("we", "us", or "our"), an educational software platform operated under dexoesim digital educational initiatives (https://printcursive.com), serves as the Data Controller responsible for the processing of personal data under the European General Data Protection Regulation (GDPR) and related data protection laws. For any data protection inquiries, you may contact our lead administration at admin@printcursive.com.
2. Personal Data We Collect
We adhere strictly to the principle of data minimization. The data we handle is categorized as follows:
- Client-Side Worksheet Inputs (Zero Server Storage): Practice sentences, student names, and tracing texts entered into our generator are processed exclusively in your local browser memory using vector JavaScript algorithms. We do NOT transmit, inspect, or store student names or practice content on remote databases.
- Directly Provided Information: When you contact customer support or purchase educational workbooks, we collect your email address, correspondence records, and transaction receipts to fulfill orders.
- Payment Information: All payment card transactions are handled exclusively by our authorized PCI-DSS Level 1 Merchant of Record partner, Waffo Pancake. PrintCursive never accesses, collects, or stores your credit/debit card numbers or CVV codes.
- Automatically Collected Technical Data: When you access our website, standard web server logs collect non-identifying technical data including IP address (anonymized), browser user agent, device operating system, screen dimensions, and referral URLs for stability and security monitoring.
3. Purposes and Legal Bases for Processing (GDPR Article 6)
In compliance with GDPR Article 6, we process your personal data only when an established lawful basis exists:
| Processing Purpose | Lawful Basis (GDPR Art. 6) |
|---|---|
| Delivery of downloadable PDF bundles and order fulfillment | Performance of Contract (Art. 6(1)(b)) |
| Payment verification and invoicing via Waffo Pancake | Performance of Contract (Art. 6(1)(b)) |
| Customer service, inquiries, and technical troubleshooting | Legitimate Interests / Contract (Art. 6(1)(f)/(b)) |
| Network security, fraud prevention, and DDoS protection | Legitimate Interests (Art. 6(1)(f)) |
| Aggregated anonymized website traffic analytics (GA4) | Legitimate Interests (Art. 6(1)(f)) |
| Statutory accounting and tax compliance | Legal Obligation (Art. 6(1)(c)) |
5. Data Sharing and Third-Party Processors
We do not sell personal data to data brokers or third parties. We share limited data strictly with vetted infrastructure partners who operate under binding data processing agreements:
- Payment Processing: Waffo Pancake (Waffo Technology Pte. Ltd.) serves as our authorized Merchant of Record (MoR) to process payments under PCI-DSS Level 1 compliance.
- Content Delivery & Security: Cloudflare Inc. provides SSL encryption, DDoS mitigation, and global edge caching.
- Analytics: Google LLC (Google Analytics 4) processes anonymized usage data.
6. Security Safeguards & 72-Hour Breach Notification
We implement rigorous administrative and technical safeguards, including mandatory TLS 1.3 HTTPS encryption for all network traffic and least-privilege administrative access. In the unlikely event of a confirmed security incident impacting your rights, we will notify affected users and competent regulatory authorities within 72 hours of becoming aware, in accordance with GDPR Article 33.
7. Data Retention Schedule
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:
| Data Category | Retention Period | End-of-Life Handling |
|---|---|---|
| Billing records and transaction logs | 5 to 7 years | Retained as required by statutory tax and corporate bookkeeping laws, then deleted. |
| Customer support correspondence and emails | 2 years from resolution | Securely purged from email systems after limitation period. |
| Client-side worksheet drafts and settings | Persistent in user browser | Stored only in local storage; cleared instantly when browser cache is deleted. |
8. Your GDPR & International Data Rights
Under European GDPR, UK GDPR, and California CCPA/CPRA, you are entitled to exercise the following fundamental rights regarding your personal data:
- Right to Access (Art. 15): Request confirmation of whether your data is processed and receive a copy.
- Right to Rectification (Art. 16): Request correction of inaccurate personal data.
- Right to Erasure (Art. 17): Request the permanent deletion of your data where lawful grounds exist.
- Right to Restriction (Art. 18): Request limits on how we process your data under certain conditions.
- Right to Data Portability (Art. 20): Obtain your data in a structured, machine-readable format.
- Right to Object (Art. 21): Object to processing based on legitimate interests.
- Right to Lodge a Complaint: You have the right to lodge a complaint with your national Data Protection Authority (DPA).
- Response SLA: To exercise any of these rights, email admin@printcursive.com. We verify and respond to all lawful requests within 30 calendar days at no charge.
9. Children’s Privacy (COPPA & GDPR Article 8 Compliance)
PrintCursive is an educational tool designed for educators, teachers, and parents. We do NOT knowingly solicit or collect personal identifiable information from children under 13 (or under 16 in the European Union). Because our handwriting worksheet generator operates 100% client-side in the browser, children’s names and practice words are never collected by our servers, ensuring complete compliance with the US Children’s Online Privacy Protection Act (COPPA).
10. Policy Modifications and Contact Channel
We may periodically update this Privacy Policy to reflect evolving legal standards. Material modifications will be signaled by updating the "Last Updated" date atop this document. If you have questions or privacy concerns, please contact our lead data administration team at admin@printcursive.com.