Privacy Policy

Hey there, Kimberly from Thoughts and Designs Here.

Various government entities make websites everywhere have privacy policies. These policies have to be full of all kinds of mandatory information from me to you about what I do with whatever information I collect on this website. I also have to explain what information I collect, and why I collect it.

The way it needs to be written up means no one is going to read and understand it. I am not crazy about that. So I’m doing a plain English version here at the top.

Let me bottom line this for you in plain English before I get into the legal details as required by law, mkay?

I respect your privacy. I don’t like it when someone has my personal information and uses it for nefarious purposes. Like everyone else, I hate robocalls and telemarketers and junk mail and spam for male enhancement products. I hate political ads and political phone calls more.

I’m a big believer in doing unto others as you want them to do unto you. The golden rule. Pretty simple.

With that said, there are a few points where you may have personal information on this site.

The first is if you contact me via my contact page (or in any other way). I obviously have to get back to you on whatever matter you connected me regarding, and thus I get back with you in that way. I think that’s pretty understandable, no? If you ask me a question, I have to know who you are and what your email is in order to get back with you.

The same is true with my scheduler, Calendly. This helps me connect with those interested in talking more about my services.

The second is if you hire me to be your designer. As part of my design process, I will give you access to a client section of this website just for my clients. This will mean I’ll create a username for you so you can log in. Again, I’m not selling this information, but by having the login area, it exists, cookies are used, etc.. But it’s not like I’m keeping tabs on you in some creepy stalker way. Make sense?

Then there’s the newsletter subscription situation I have going on here. Most of my policy is not really mine but the policy of MailChimp, the newsletter service I use. We’re not gathering and selling information. Here’s what I can see:

  • Who subscribed and your email address
  • Whether or not you open the emails (I try not to obsess and get my feelings hurt :-)).
  • Whether or not you click on any links on this email.

These things I monitor not to be a creeper but because, as a business person, it’s important for me to know the state of my content and marketing efforts. If one email does well and another one flops, I need to know how to do better to serve you better and not waste my time. I think that probably makes sense too. I bet you also want to see better emails and less sucky ones.

In the same way, Google Analytics (and Facebook Pixel) are both installed on this website, and they do track you in unidentifiable ways using tracking cookies. Well, I can’t identify you. I’m not sure Mr. Zuckerberg doesn’t have a file on you already, but that’s not on me.

The purpose here is simply to help me have a better understanding of what content is resonating with you (as part of my tribe) and what is flopping. I need to know if there is a page on my site where everyone drops off so I can see if something is wrong. It helps me see what you searched for that brought you to my site. I also can see if you came to my site from a social media platform or a search engine or somewhere else.

Who we are

Our website address is:

What personal data we collect and why we collect it


When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: After approval of your comment, your profile picture is visible to the public in the context of your comment.


If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

When you contact me via this website’s contact page, I obviously have your contact information in order to reply back to you. That’s pretty duh, right?

I’m not selling that information.


If you leave a comment on our site you may opt-in to save your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.


Who we share your data with

The Analytics and Insight services (Google Analytics, Hubspot CRM, Facebook Pixel) are the ones doing the collecting and hosting of this data.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

Your contact information

Additional information

How we protect your data

I’m not storing data on my site apart from login information so you can access downloads you have purchased. Financial information is not stored on this site when you purchase from me, only the login information you have created. This is not publicly available, and I have enacted security around my server and WordPress installation.

What data breach procedures we have in place

I maintain high security on my website and am careful to not request more personal data than is necessary to run this website efficently.

I place a high premium on the correct, lawful and fair handling of all Personal Data, respecting the legal rights, privacy and trust of all individuals with whom I deal.
In the event of a data breach I will work with my web hosting provider to restore security to my website, and contact any customers whose data was affected.

What third parties we receive data from

I only receive data from MailChimp, Facebook Business Manager (through Pixel), Pinterest Business Pixel and Google Analytics. I do not store this data on my site. This data is accessed via each of their sites respectively.

What automated decision making and/or profiling we do with user data

There is no automated decision making or profiling done on this site. Analytics insight data is used to gauge the benefit of each piece of content for my readers and that content is modified accordingly.

Industry regulatory disclosure requirements

My industry, of web and graphic design, does not require further disclosures.

Plugin: Easy Digital Downloads

I sell some digital downloads on this site. If you use this feature the following privacy issues concern you.

I collect information about you during the checkout process on our store. This information may include, but is not limited to, your name, billing address, shipping address, email address, phone number, credit card/payment details and any other details that might be requested from you for the purpose of processing your orders.
Handling this data also allows us to:
– Send you important account/order/service information.
– Respond to your queries, refund requests, or complaints.
– Process payments and to prevent fraudulent transactions. We do this on the basis of our legitimate business interests.
– Set up and administer your account, provide technical and/or customer support, and to verify your identity.

Additionally we may also collect the following information:
– Location and traffic data (including IP address and browser type) if you place an order, or if we need to estimate taxes and shipping costs based on your location.
– Product pages visited and content viewed while your session is active.
– Your comments and product reviews if you choose to leave them on our website.
– Account email/password to allow you to access your account, if you have one.
– If you choose to create an account with us, your name, address, and email address, which will be used to populate the checkout for future orders.

Plugin: Smush

Note: Smush is a plugin that makes my site load faster.

Smush sends images to the WPMU DEV servers to optimize them for web use. This includes the transfer of EXIF data. The EXIF data will either be stripped or returned as it is. It is not stored on the WPMU DEV servers.

Smush uses the Stackpath Content Delivery Network (CDN). Stackpath may store web log information of site visitors, including IPs, UA, referrer, Location and ISP info of site visitors for 7 days. Files and images served by the CDN may be stored and served from countries other than your own. Stackpath’s privacy policy can be found here.

Smush uses a third-party email service (Drip) to send informational emails to the site administrator. The administrator’s email address is sent to Drip and a cookie is set by the service. Only administrator information is collected by Drip.

Scroll to Top