Privacy Policy
Effective date: June 2026 Last updated: June 2026
Who We Are
Dripatch is an AI-enabled design agency offering design subscriptions, social media content services, and fixed-cost product builds for funded startups and growing businesses. This policy explains what personal data Dripatch collects, why it is collected, how it is used, and what rights you have over it.
Contact: [email protected]
What Data We Collect
Data you provide directly
When you use our contact form, book a discovery call, or purchase a subscription, we collect:
- Name
- Email address
- Company or project name
- Service interest
- Message content
- Payment information (processed by Stripe — see Third-Party Processors below)
When you become a client, we also collect:
- Brand guidelines and visual assets you share with us
- Project briefs, copy, and reference material
- Design feedback and revision instructions
Data collected automatically
When you visit dripatch.com, we collect:
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent
- Referring URL
- Device type
This data is collected through cookies and tracking technologies. See the Cookies section below for detail on what is set and how to control it.
Why We Collect It and the Legal Basis for Processing
We process personal data for the following purposes and under the following legal bases under GDPR:
| Purpose | Legal Basis |
|---|---|
| Responding to contact form enquiries | Legitimate interest |
| Delivering Design Subscription, Social Autopilot, and MVP Build services | Performance of contract |
| Processing payments through WooCommerce and Stripe | Performance of contract |
| Managing client projects and design delivery | Performance of contract |
| Sending transactional emails (receipts, onboarding, delivery notifications) | Performance of contract |
| Sending marketing communications (newsletter, promotional updates) | Consent |
| Analysing site performance and user behaviour | Consent (via cookie preference) |
| Serving targeted advertising | Consent (via cookie preference) |
| Preventing fraud and ensuring platform security | Legitimate interest / Legal obligation |
If you are located in California, USA, see the CCPA section below for additional rights.
How We Use Your Data
Service delivery We use the information you provide to deliver the service you have purchased or enquired about. This includes managing design requests through Slack, storing brand assets and project files in Google Drive, and managing project tasks in Trello and Asana.
Communication We use your email address to send service updates, delivery notifications, billing communications, and where you have opted in, marketing content about Dripatch products and updates.
Analytics and improvement We use aggregated and anonymised analytics data to understand how visitors use dripatch.com, which pages perform well, and where we can improve the experience.
Advertising Where you have given consent, we use Facebook Pixel and Meta Conversions API data to measure the performance of advertising campaigns and to show Dripatch ads to relevant audiences.
Third-Party Processors
We share data with the following third-party service providers who process data on our behalf. Each is bound by their own privacy policy and data processing agreements.
| Provider | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Stripe | Payment processing | Name, email, billing details | stripe.com/privacy |
| WooCommerce / Automattic | Subscription management | Order and account data | automattic.com/privacy |
| Mailchimp (Intuit) | Email marketing | Name, email address | mailchimp.com/legal/privacy |
| Slack Technologies | Client project communication | Names, project messages (retained 30 days on free plan) | slack.com/privacy |
| Google (GA4, Drive) | Analytics and file storage | Usage data, brand assets, project files | policies.google.com/privacy |
| Meta (Facebook Pixel, CAPI) | Advertising measurement | Hashed contact data, page events | facebook.com/privacy/policy |
| Microsoft (Clarity) | Session recording and heatmaps | Anonymised interaction data | privacy.microsoft.com |
| Trello (Atlassian) | Project and task management | Project briefs, design drafts | atlassian.com/legal/privacy-policy |
| Asana | Project and task management | Project briefs, design drafts | asana.com/terms#privacy-policy |
| Cloudflare | CDN and security | IP addresses, traffic data | cloudflare.com/privacypolicy |
| Pressidium | Website hosting | All site data (server-level) | pressidium.com/privacy-policy |
| Google Tag Manager | Tag management | Manages consent and tracking scripts | policies.google.com/privacy |
We do not sell your personal data to any third party.
Cookies and Tracking Technologies
Dripatch uses cookies and similar technologies to operate the website, analyse traffic, and where you give consent, to serve and measure advertising.
When you first visit dripatch.com, a cookie consent banner appears. You can choose to accept all cookies, configure your preferences by category, or accept only the essential cookies required for the site to function.
Cookie categories:
Essential cookies Required for the website to function. These cannot be disabled. They include session management, security tokens, and WooCommerce cart and checkout functionality.
Analytics cookies Used to understand how visitors interact with the site. Includes Google Analytics (GA4) and Microsoft Clarity. Collected only with your consent.
Advertising cookies Used to measure ad campaign performance and serve relevant ads on third-party platforms. Includes Facebook Pixel and Meta Conversions API. Collected only with your consent.
Functionality cookies Used to remember your preferences and improve your experience on repeat visits.
You can update your cookie preferences at any time by clicking the cookie preferences link in the site footer.
Data Retention
We retain your data for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
| Data Type | Retention Period |
|---|---|
| Contact form enquiries | 2 years from last contact |
| Client account data | Duration of subscription plus 3 years |
| Payment records | 7 years (legal and tax obligation) |
| Project files and brand assets | Duration of engagement plus 1 year, then deleted on request |
| Slack messages | 30 days (Slack free plan automatic deletion) |
| Analytics data (GA4) | 14 months (default GA4 retention setting) |
| Cookie consent records | 182 days |
When data is no longer required, it is deleted or anonymised.
International Data Transfers
Dripatch serves clients in the USA, GCC (UAE and Saudi Arabia), UK, and EU. Some of the third-party processors listed above transfer and store data outside the European Economic Area. Where this occurs, we rely on adequacy decisions, Standard Contractual Clauses, or other legally recognised transfer mechanisms to ensure your data receives an equivalent level of protection.
For questions about international transfers, contact [email protected].
Your Rights Under GDPR (EU and UK Residents)
If you are located in the European Union or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:
Right to access You can request a copy of the personal data Dripatch holds about you.
Right to rectification You can request correction of inaccurate or incomplete personal data.
Right to erasure You can request deletion of your personal data where there is no legitimate reason for us to continue holding it.
Right to restriction You can request that we restrict the processing of your data in certain circumstances.
Right to data portability You can request a machine-readable copy of the data you have provided to us.
Right to object You can object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent Where processing is based on your consent, you can withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact [email protected]. We will respond within 30 days.
If you are unsatisfied with how we handle your request, you have the right to lodge a complaint with your local data protection authority.
Your Rights Under CCPA (California Residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:
Right to know You can request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collecting it, and the third parties with whom it has been shared.
Right to delete You can request deletion of personal information we have collected from you, subject to certain exceptions.
Right to opt out of sale Dripatch does not sell personal information.
Right to non-discrimination We will not discriminate against you for exercising your CCPA rights.
To submit a CCPA request, contact [email protected]. We will respond within 45 days.
Children’s Privacy
Dripatch services are intended for business use and are directed at adults. We do not knowingly collect personal data from anyone under the age of 16. If you believe a minor has submitted personal information to us, contact [email protected] and we will delete it promptly.
Security
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. These include encrypted connections (HTTPS), access controls on all project systems, and Stripe’s PCI-DSS compliant payment infrastructure.
No method of transmission over the internet is fully secure. If you have concerns about the security of your data, contact [email protected].
Third-Party Links
dripatch.com may contain links to third-party websites. This privacy policy applies only to dripatch.com. We are not responsible for the privacy practices of external sites.
Changes to This Policy
We may update this policy from time to time. When we do, the revised version will be posted on this page with an updated effective date. For significant changes, we will notify active subscribers via email.
Your continued use of dripatch.com after a policy update constitutes acceptance of the revised policy.
Contact
For any questions, data requests, or complaints regarding this privacy policy or how Dripatch handles personal data:
Email: [email protected]
We aim to respond to all privacy enquiries within 5 business days.
This policy was last reviewed in June 2026.