Privacy Policy

1. Introduction

Wrapped In Song ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide when you:

• Place an Order: Name, email address, phone number, billing address, and payment information
• Create Your Song: Personal stories, names, dates, occasions, preferences, and any other information you share to personalise your song
• Contact Us: Name, email address, and any information included in your message
• Sign Up for Updates: Email address and communication preferences

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address and location data
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• Cookies and similar tracking technologies (see our Cookie Policy below)

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Delivery

• To create your personalised song based on the information you provide
• To process your order and payment
• To communicate with you about your order
• To deliver your song files and any physical products
• To provide customer support

3.2 Business Operations

• To maintain and improve our website and services
• To analyse website usage and customer preferences
• To prevent fraud and enhance security
• To comply with legal obligations

3.3 Marketing (with your consent)

• To send you promotional emails about new services, special offers, or updates
• To personalise your experience on our website

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract Performance: Processing necessary to fulfill our contract with you (creating and delivering your song)
• Consent: When you provide consent for marketing communications
• Legitimate Interests: For business operations, fraud prevention, and website improvement
• Legal Obligation: To comply with applicable laws and regulations

5. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Payment processing
• Email delivery
• Website hosting
• Physical product shipping (if applicable)

These providers are contractually obligated to protect your data and use it only for the specified purposes.

5.2 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal processes or government requests
• Enforce our terms and conditions
• Protect our rights, privacy, safety, or property
• Prevent or investigate fraud or security issues

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

• Order Information: Retained for 7 years for accounting and legal purposes
• Song Content: Retained for the duration necessary to deliver your song and provide support
• Marketing Data: Retained until you withdraw consent or request deletion

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent at any time (without affecting prior processing)

To exercise any of these rights, please contact us using the details provided at the end of this policy.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

These measures include:

• Encrypted data transmission (SSL/TLS)
• Secure payment processing
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience. Cookies are small text files stored on your device.

Types of Cookies We Use:

• Essential Cookies: Required for the website to function properly
• Analytics Cookies: Help us understand how visitors use our website
• Marketing Cookies: Track your activity to deliver relevant advertisements

You can control cookie settings through your browser preferences. Please note that disabling certain cookies may affect website functionality.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries outside the UK. When we do so, we ensure appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated revision date.

We encourage you to review this policy periodically for any changes.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: music@wrappedinsong.co.uk
Website: www.wrappedinsong.co.uk

15. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: www.ico.org.uk