At SongZoo, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website and services, in compliance with the General Data Protection Regulation (GDPR).

1. Data Controller

SongZoo (referred to as “we”, “us”, or “our”) is the data controller responsible for your personal data.

2. Data We Collect

We collect personal data that you voluntarily provide to us when you:

  • Request a personalized song (via our online form).
  • Register for an account.
  • Make a purchase.
  • Contact us for support or inquiries.
  • Subscribe to our newsletter.

This data may include:

  • Contact Information: Name, email address.
  • Song Request Details: Information you provide about the recipient, occasion, themes, memories, or specific requests for your personalized song.
  • Payment Information: For paid packages, we collect billing details. (Note: Actual payment processing is handled by secure third-party payment gateways, and we do not store your full credit card details).
  • Communication Data: Records of your correspondence with us (e.g., emails).
  • Usage Data: Information about how you use our website, such as IP address, browser type, operating system, referral sources, pages visited, and time spent on pages. This is collected via cookies and similar technologies (see Section 5).

3. How We Use Your Data

We use your personal data for the following purposes:

  • To provide our services: To create and deliver your personalized songs, process your requests, and manage your revisions.
  • To process payments: For paid packages.
  • To communicate with you: To send order confirmations, delivery notifications, updates, and respond to your inquiries.
  • To improve our services: To understand how our services are used, gather feedback, and enhance user experience.
  • For marketing purposes: With your consent, to send you promotional offers, newsletters, and information about new services. You can opt-out at any time.
  • For legal compliance: To comply with legal obligations, resolve disputes, and enforce our agreements.

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

  • Contractual Necessity: Processing is necessary for the performance of a contract with you (e.g., creating and delivering your personalized song).
  • Legitimate Interests: Processing is necessary for our legitimate interests (e.g., improving our services, marketing, fraud prevention), provided your rights and freedoms are not overridden.
  • Consent: Where you have given explicit consent for specific processing activities (e.g., receiving marketing communications). You have the right to withdraw your consent at any time.
  • Legal Obligation: Processing is necessary to comply with a legal obligation (e.g., tax regulations).

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track the activity on our website and hold certain information. Cookies are small data files stored on your device.

  • Essential Cookies: Necessary for the website to function (e.g., enabling secure login).
  • Analytical/Performance Cookies: Help us understand how visitors interact with our website by collecting information anonymously.
  • Marketing/Targeting Cookies: Used to deliver relevant advertisements and track ad campaign performance.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

6. Sharing Your Personal Data

We do not sell, trade, or otherwise transfer your personal data to outside parties without your explicit consent, except in the following limited circumstances:

  • Service Providers: We may share data with trusted third-party service providers who assist us in operating our website, conducting our business (e.g., payment processors, hosting providers, email marketing services), or servicing you, provided those parties agree to keep this information confidential and comply with GDPR.
  • Legal Requirements: We may disclose your data when required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
  • Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the new entity.

7. Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by law. This includes retaining data to fulfill orders, resolve disputes, and enforce our legal agreements.

8. Your Data Protection Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

  • Right to Access: You have the right to request copies of your personal data.
  • Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
  • Right to Erasure (“Right to be Forgotten”): You have the right to request that we erase your personal data under certain conditions.
  • Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
  • Right to Object to Processing: You have the right to object to our processing of your personal data under certain conditions.
  • Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
  • Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at mysong@songzoo.me. We will respond to your request within one month.

9. Security of Your Data

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

10. International Data Transfers

As we operate globally, your personal data may be transferred to, and stored at, a destination outside the European Economic Area (EEA) for processing by staff operating outside the EEA who work for us or for one of our service providers. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable data protection laws, including using appropriate safeguards such as standard contractual clauses approved by the European Commission.

11. Links to Other Websites

Our website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

12. Children’s Privacy

Our services are not intended for individuals under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

14. Contact Us Regarding Privacy

If you have any questions about this Privacy Policy or our data protection practices, please contact us by email: mysong@songzoo.me. We aim to respond to all inquiries within 24 hours.