Privacy Policy

1. Introduction

Mamook LLC (“we,” “us,” or “our”) operates mamook.studio, a coastal planning and GIS consultancy site that also offers the PNW Economic Atlas subscription and an art print storefront. This Privacy Policy describes how we collect, use, store, and protect personal information from site visitors, consulting inquiries, Atlas subscribers, and storefront customers.

We take data minimization seriously — we collect only what we need to respond to you, deliver what you've purchased or subscribed to, and meet our legal/accounting obligations.

This policy applies to all visitors to mamook.studio, everyone who submits a contact or intake form, all PNW Economic Atlas subscribers, and all storefront customers. By using the Site, subscribing, or purchasing, you agree to the practices described here.

2. Information We Collect

2.1 Consulting Inquiries

When you submit a contact or intake form for consulting services, we collect the information you provide: name, email, phone (if given), and the details of your inquiry (e.g., project location, project type). We use this solely to respond to your inquiry and, if an engagement proceeds, to prepare a proposal or services agreement.

2.2 PNW Economic Atlas Checkout and Subscription Records

When you subscribe to the PNW Economic Atlas, Stripe's hosted checkout collects your email, name, billing address, and payment method (tokenized by Stripe — we never receive or store your full card number, CVV, or raw payment credentials). Mamook LLC maintains a subscriber database in a self-hosted PostgreSQL instance: email, name, Stripe customer ID (reference token only), subscription tier and status, subscription/renewal dates, and a hashed member portal credential.

2.3 Art Print Storefront Checkout

When you purchase from the storefront, WooCommerce and Stripe collect your email, name, billing address, and payment method (tokenized by Stripe). For physical print orders, we also collect a shipping address, which is shared with our print fulfillment vendor (Printful or a giclée print lab) solely to produce and ship your order. Digital download orders do not require a shipping address.

2.4 Information Collected Automatically

mamook.studio runs on WordPress. WordPress collects standard server access logs (IP address, page requested, timestamp, browser user-agent string) for security and debugging purposes. These logs are not linked to individual accounts and are not sold or shared.

We do not run Google Analytics, Meta Pixel, or any third-party advertising or behavioral tracking scripts. We do not use fingerprinting. We do not serve targeted advertising.

2.5 Cookies

We use only essential first-party cookies (WordPress session/admin authentication, and WooCommerce cart/session cookies needed to process a storefront order). No cookies are set for public visitors beyond these essentials and standard page-cache headers. No consent banner is required for essential-only cookies under GDPR Recital 47, but we're telling you anyway.

3. How We Use Your Information

We do not use your information for behavioral advertising, profiling, or any purpose not listed above. We do not send marketing emails without separate explicit consent.

4. How We Share Your Information

We do not sell, rent, or license your personal information to any third party.

We share information only with the following service providers, for the stated purpose:

Legal requirements. We may disclose your information if required by law, court order, or valid government request. We will make reasonable efforts to notify you before complying, unless prohibited from doing so.

Business transfers. In the event of a merger, acquisition, or sale of Mamook LLC assets, customer/subscriber records may be transferred. We will notify affected individuals by email before such a transfer takes effect.

5. Data Retention

You may request earlier deletion of your personal record (excluding billing/order records required by law) at any time by emailing [email protected]. We will process deletion requests within 30 days.

6. Data Security

We implement the following technical and organizational measures to protect your personal data:

• All data transmitted between your browser and mamook.studio is encrypted via TLS (HTTPS)
• Atlas subscriber database is hosted on a self-managed PostgreSQL server on a private LAN segment, not exposed to the public internet
• Storefront order data is managed within WooCommerce on our hosting provider's infrastructure
• Database credentials are stored in a secrets manager, not in application code or public repositories
• Payment data is processed and stored by Stripe, Inc. under PCI-DSS Level 1 compliance. Mamook LLC never receives or stores raw payment card data
• Access to subscriber and order records is limited to the individual concerned and Mamook LLC's principal (Alex Rau)

No data security system is perfect. If you become aware of any security vulnerability affecting our service, please report it immediately to [email protected].

7. Your Rights Under GDPR (EEA and UK Residents)

If you are located in the European Economic Area or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:

• Right of Access — Request a copy of all personal data we hold about you
• Right to Rectification — Request correction of inaccurate or incomplete data
• Right to Erasure (“Right to be Forgotten”) — Request deletion of your personal data, subject to legal retention requirements
• Right to Restrict Processing — Request that we limit how we use your data while a dispute is resolved
• Right to Data Portability — Receive your personal data in a structured, machine-readable format (CSV)
• Right to Object — Object to processing based on legitimate interests
• Right to Withdraw Consent — Where processing is based on consent, withdraw it at any time without penalty
• Right to Lodge a Complaint — File a complaint with your local Data Protection Authority

To exercise any right, email [email protected] with “GDPR Request” in the subject line. We will respond within 30 days.

The primary legal basis for processing your data is contract performance — we process your email, name, and order/subscription record because they are necessary to deliver what you purchased or subscribed to. Accounting records are retained on a legal obligation basis; consulting inquiries prior to any engagement are processed on a legitimate interest basis.

8. Your Rights Under CCPA/CPRA (California Residents)

California residents have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know — What categories of personal information we collect, use, and disclose
• Right to Delete — Request deletion of personal information we hold about you
• Right to Opt-Out of Sale/Sharing — We do not sell or share personal information for cross-context behavioral advertising
• Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights
• Right to Correct — Request correction of inaccurate personal information

Categories of personal information collected in the past 12 months:

To exercise your CCPA rights, email [email protected] with “CCPA Request” in the subject line. We will respond within 45 days.

9. Children’s Privacy

Mamook LLC's services (consulting, Atlas subscription, and storefront) are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have inadvertently collected information from someone under 18, we will delete it promptly. Please contact [email protected] if you believe a minor has subscribed or made a purchase.

10. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our data practices, legal requirements, or service offerings. For material changes, we will notify current subscribers and recent customers by email at least 30 days before the changes take effect. The “Last Updated” date at the top of this page reflects when the policy was last revised.

Your continued use of the Service after the effective date of a revised policy constitutes acceptance of the changes.

11. Contact

Mamook LLC
PO Box 234, Newport, OR 97365
Email: [email protected]
Website: mamook.studio

For GDPR complaints, you may also contact the relevant supervisory authority in your EU member state. A list of EEA data protection authorities is available at edpb.europa.eu.