Privacy policy

1. Introduction

The Winslow Family Band ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect when you visit winslowband.com, how we use it, and what rights you have over your data.

By placing an order or using our website, you agree to the practices described in this policy. This policy is governed by the laws of the United States.

2. Information We Collect

Information You Provide

• Contact information: Your name and email address, used to confirm your order and deliver your song.
• Payment information: Processed securely through our payment processor (Shopify Payments). We never store your full credit card number on our servers.
• Song details: The stories, memories, names, occasions, and other personal details you share so we can write and record your custom song.
• Messages: Any communication you send us via our contact page or email.

Information Collected Automatically

• Device & browser data: Browser type, operating system, and device type.
• Usage data: Pages visited, time on site, and how you navigate our website.
• IP address: Used for security and fraud prevention.
• Cookies: See Section 6 for details.

3. How We Use Your Information

• To create and deliver your song: Your order details and story are used exclusively to write and record your custom song and send it to you.
• Order communication: We'll email you to confirm your order, request any missing details, and deliver your finished song.
• Payment processing: To complete your transaction securely.
• Customer support: To respond to questions or resolve issues with your order.
• Service improvement: To understand how visitors use our site and improve the experience.
• Legal compliance: To meet our obligations under applicable US law.

4. Information Sharing

We do not sell your personal information. We share your data only as necessary to operate our service:

• Shopify: Our e-commerce platform processes your order and payment. Shopify's privacy policy applies to data processed through their platform.
• Payment processors: To securely process your payment.
• Email service providers: To send you order confirmations and song delivery emails.
• Legal requirements: We may disclose your information if required by law, court order, or to protect our rights or the safety of others.

All third-party providers are contractually required to protect your data and may only use it for the purposes we specify.

5. Data Retention

• Order data: Retained for up to 7 years for tax and legal compliance.
• Song details & personal stories: Retained for the duration of your order and up to 12 months afterward for quality and support purposes, then deleted.
• Support conversations: Retained for up to 3 years after resolution.
• Marketing data: Until you unsubscribe or request deletion.

You may request deletion of your personal data at any time by contacting us at info@winslowband.com.

6. Cookies

We use cookies to keep your shopping cart working, understand how visitors use our site, and (where applicable) run advertising campaigns. Types of cookies we use:

• Essential cookies: Required for checkout and basic site functionality. These cannot be disabled.
• Analytics cookies: Help us understand site usage so we can improve it.
• Marketing cookies: Used to measure the effectiveness of our advertising (e.g. Facebook/Meta, Google). You can opt out through your browser settings or our cookie consent banner.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling essential cookies may prevent checkout from working.

7. Data Security

We take reasonable steps to protect your personal information:

• All data transmitted between your browser and our site is encrypted via TLS/SSL.
• Payment information is handled exclusively by our PCI-DSS compliant payment processor and never stored on our servers.
• Access to customer data is limited to those who need it to fulfill your order.

While we use industry-standard security practices, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

8. Your Rights

Depending on where you live, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct any inaccurate information.
• Deletion: Request that we delete your personal data.
• Opt-out: Unsubscribe from marketing emails at any time by clicking "unsubscribe" in any email or contacting us directly.

To exercise any of these rights, email us at info@winslowband.com. We will respond within 30 days.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of the "sale" of personal information. We do not sell your personal information. To exercise your CCPA rights, contact us at info@winslowband.com. We will respond within 45 days.

9. Children's Privacy

Our service is intended for users 18 years of age or older. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, please contact us immediately at info@winslowband.com and we will delete it promptly.

10. Third-Party Links

Our website may contain links to other websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please reach out: