Privacy Policy - The Silver Factory Band

1. Introduction

At The Silver Factory Band, accessible via thesilverfactoryband.com, we are committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, store, disclose, and safeguard your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

We prioritize a privacy-first approach in all our data practices and are dedicated to safeguarding your personal information with the utmost transparency and accountability.

2. Scope of Policy and Role of the Data Controller

This Privacy Policy applies to all users of thesilverfactoryband.com and describes how we, as the Data Controller, collect and process your personal data through our website and services. The term “Data Controller” refers to The Silver Factory Band, which determines the purposes and means of processing your personal data.

This policy applies to all visitors, users, and others who access the website or engage with our digital services.

3. Categories of Personal Data We Process

We may collect and process the following categories of personal data in compliance with legal obligations and business operations:

– Usage Data: Includes information about your interactions with our website such as browser type, IP address, pages visited, session duration, referring URLs, and site navigation paths.

– Account Data: If you create an account or sign up for services (e.g., newsletters, fan clubs), we may collect your name, email address, mailing address, telephone number, and login credentials.

– Profile Data: Includes your stated preferences, feedback, purchase history, artist engagement, and other behavioral or demographic information you provide voluntarily.

– Communication Data: Encompasses data provided when you contact us through emails or forms, including customer service inquiries, messages, and responses.

– Technical Data: Information about your device and connection including device type, operating system, hardware model, IP address, language settings, and time zone.

– Transaction Data: Includes information related to purchases made on or linked from our website (e.g., event tickets, merchandise), including payment method, billing details, delivery information, and order history.

– Preference Data: Refers to marketing and communication preferences you share with us, such as opting into emails or music release notifications, as well as inferred interests in specific products or content.

4. Legal Bases for Processing Personal Data

We rely on the following lawful bases for processing your personal data:

– Consent: Where you have given clear consent for the processing of your personal data for a specific purpose (e.g., subscribing to marketing emails).

– Performance of a Contract: Where processing is necessary to fulfill the terms of a contract or service agreement with you, such as delivering merchandise or responding to inquiries.

– Legal Obligation: Where we are required to comply with legal or regulatory obligations.

– Legitimate Interests: Where processing is necessary for our legitimate interests, and these interests are not overridden by your rights and freedoms. This may include improving our website experience, detecting fraud, or delivering relevant content.

5. Your Rights Under Applicable Laws

Under GDPR, CCPA, and relevant data protection regulations, you have the following rights regarding your personal data:

– Right to Access: You have the right to request a copy of the personal data we hold about you.

– Right to Rectification: You may correct or update any inaccurate or incomplete personal data.

– Right to Erasure: You can request that we delete your personal data where there is no lawful reason for us to retain it.

– Right to Restrict Processing: You may request us to suspend the processing of your personal data under certain conditions.

– Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format.

– Right to Object: You may object to our processing of your data where we rely on legitimate interests or conduct direct marketing.

To exercise any of these rights, you may contact us at [email protected].

6. Security Measures

We take the security of your personal data seriously. We implement appropriate technical and organizational measures including:

– Data encryption during transmission and storage.
– Secure servers with access controls.
– Regular security audits and backup procedures.
– Employee training and confidentiality agreements for those who handle personal data.

7. International Data Transfers

Your personal data may be transferred to and maintained on servers located outside your country of residence. If we transfer data to jurisdictions outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

– Standard Contractual Clauses approved by the European Commission.
– Transfers to jurisdictions recognized by the European Commission as providing adequate data protection.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations.

– Usage & Technical Data: Up to 12 months from the date of collection.
– Account & Profile Data: Retained while the account is active and up to 2 years after inactivity.
– Communication Data: Retained for 3 years for record-keeping and compliance.
– Transaction Data: Retained for 7 years to meet accounting and tax regulations.
– Preference & Marketing Data: Retained until you withdraw consent or opt-out.

9. Cookie Policy

Our website uses cookies and similar technologies to enhance your browsing experience and analyze our website’s performance. The types of cookies we use include:

– Essential Cookies: Necessary for website functionality and access to secure areas.
– Functional Cookies: Help personalize your visit (e.g., remembering location and preferences).
– Analytics Cookies: Allow us to understand visitor interaction on the site for improvement.
– Performance Cookies: Monitor technical performance and load times.

10. Cookie Management and Compliance

On your first visit to thesilverfactoryband.com, a cookie banner appears allowing you to manage your consent preferences. You may accept or reject non-essential cookies at any time by adjusting settings in our cookie management tool or through your browser settings.

In compliance with GDPR and CCPA:

– We do not deploy non-essential cookies without your explicit consent.
– You can exercise your “Do Not Sell My Personal Information” rights by emailing [email protected] or using the applicable website controls.

11. Children’s Privacy

We do not knowingly collect or solicit personal data from children under the age of 13. If you believe that a child under 13 has provided us with personal data without parental consent, please contact us at [email protected] and we will promptly take appropriate action.

12. Policy Updates and Notifications

We may update this Privacy Policy from time to time to reflect changes in legal, regulatory, or operational requirements. Any significant updates will be communicated clearly on thesilverfactoryband.com.

We encourage you to periodically review this page to stay informed of how we are protecting your information.

13. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: [email protected]

We are committed to full compliance with GDPR, CCPA, and other applicable data protection laws. Should you have any privacy-related inquiries, we encourage you to reach out to us at the contact email above.