1. Who we are
This website, https://laurenphillips.vip/, is run by Gleam Entertainment Corp, based in Clearwater, Florida, United States (“we”, “us”). We are the controller of the personal data described in this policy. You can contact us at lauren@laurenphillips.vip. The website runs on a platform operated by Automate Horizon, which processes data on our behalf.
Where you live matters. This policy applies to everyone. Section 9 has a part for each region: United States and Canada, the United Kingdom and the European Union. Read the part for where you live. Section 10 covers the state where you live, if the site has state-specific terms.
2. Age Restrictions
This website is only for adults aged 18 or over, or the age of majority where you live if that is higher. Where we ask you to confirm your age, we record your confirmation (an attestation that you are old enough). We do not check your age against an identity document, and we do not knowingly collect or process data from anyone under that age. If you are under that age, do not use this website or give us any personal information.
3. What we collect and why
- When you contact us through the contact form: your name, email address, the type of enquiry and your message, plus the time you sent it, your IP address and the consent wording shown, so we can show what you agreed to. We use this to reply to you. Lawful basis: our legitimate interest in answering messages sent to us.
- When you join our mailing list: your email address, your confirmation that you are 18 or older, and a record of your agreement: the words you agreed to, the page you were on, the time and your IP address, so we can show what you agreed to. We use your address to send you news and updates. Lawful basis: your consent, which you can withdraw at any time with the unsubscribe link in every email.
- Emails we send you: whether each one was delivered, bounced or reported as spam, whether you unsubscribed, which links you click (a click passes through our email delivery provider first so it can be recorded), and how many times each email is opened, kept as a total for that email and never as who opened it. We use this to stop emailing addresses that should not get email and to see which emails and links are useful. Lawful basis: legitimate interests (sending email responsibly).
- When you place an order: your name, contact and delivery details and what you ordered, to fulfil your order and meet our legal and tax obligations. Payments are taken by CCBill; we do not see or store your card details. Lawful bases: performing our contract with you, and legal obligation.
- When you visit: our web server records your IP address, browser type and the pages you request, for security and to keep the site working. Lawful basis: legitimate interests (security and running the site).
- Link clicks: when you click a link to another site, we record which link, the page it was on, the referring page, your browser type and the time. We do not record your IP address with it. Lawful basis: legitimate interests (understanding which links are useful).
- Analytics: if you accept analytics cookies, we use Google Analytics to understand how the site is used. Lawful basis: your consent, which you can withdraw at any time from the cookie settings link on every page.
We do not sell your personal information for money. We do not use your personal information to make automated decisions about you.
4. Cookies
Strictly necessary cookies keep the site working and remember your cookie choice (hz_consent); they do not need your consent.
When you shop, the store uses cookies to keep your basket.
Analytics cookies (_ga and _ga_TFPDRC9BF4) are set only if you accept them.
You can change your choice at any time from the cookie settings link. Our Cookie Policy lists the cookies in full.
5. Third-party content and links
Links to other services, such as streaming and social platforms, take you to those services, and their own privacy policies then apply.
6. Who we share it with
Only the providers that help us run the site, under contracts that require them to protect your data:
- our website platform (Automate Horizon);
- our hosting provider (Hostinger);
- Cloudflare, for security and delivery of the site;
- Mailgun, which sends our mailing-list emails, and Supabase, which stores the list, both through our website platform;
- Google, for Google Analytics (only if you accept it);
- the email service that receives contact form messages;
- CCBill (payments) and our order fulfilment provider, the company that prints and ships your item, and the carrier that delivers it;
We may also disclose data if the law requires it.
7. International transfers
Our website is hosted on servers in the United States, and some of our providers process data outside the country where you live. Where your data leaves the United Kingdom or the European Economic Area, we rely on the safeguards that data protection law allows, such as an adequacy decision, the UK Extension to the EU-US Data Privacy Framework for certified providers, the European Commission’s standard contractual clauses, or the UK International Data Transfer Addendum, in our providers’ data processing terms.
8. How long we keep each type of data
- Order records: 6 years, for tax purposes.
- Contact messages: kept until you ask us to delete them.
- Server logs (IP address, pages requested): 14 days.
- Link-click records: kept until you ask us to delete them.
- Mailing list: kept while you are on the list. If you unsubscribe, we keep your address and the record of your agreement only for as long as we need to stop emailing you and to show that you agreed.
- Google Analytics data: 2 months (Google’s standard setting).
- Backups: overwritten on a rolling basis.
When a period above ends, we delete the data or remove the link between the data and you.
9. Your rights where you live
United States and Canada
Depending on the state, province or territory where you live, you may have the right to ask what personal information we hold about you, to have it corrected or deleted, and to opt out of certain uses. We do not sell your personal information for money. To make a request, email lauren@laurenphillips.vip. We will not treat you differently for using these rights. If you live in Canada, you can also contact the Office of the Privacy Commissioner of Canada, or your provincial privacy commissioner.
California residents. The California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, “CCPA”), gives you these rights:
- to know the categories of personal information we collect, the sources, the purposes, and the categories of third parties we share it with;
- to request a copy of the specific pieces of personal information we hold about you;
- to request correction or deletion of your personal information, subject to the exceptions in the law (for example, records we must keep for tax purposes);
- to opt out of the sale or sharing of your personal information. We do not sell your personal information for money.
- to opt out of sharing for cross-context behavioural advertising. Google Analytics may be treated as sharing under California law. You can opt out by declining analytics cookies in the cookie settings link on every page.
- to limit the use of sensitive personal information, where we use it for purposes beyond those the law allows without a request. We do not use sensitive personal information for those purposes.
- not to be discriminated against for using these rights.
To use these rights, email lauren@laurenphillips.vip. We will verify your request before we act on it, and we will respond within 45 days, or tell you why we need longer. An authorised agent may make a request for you with proof of authority.
United Kingdom
If you live in the United Kingdom, the UK GDPR and the Data Protection Act 2018 apply to how we use your personal information.
- Who is responsible: Gleam Entertainment Corp is the controller of your personal information. Contact: lauren@laurenphillips.vip.
- Why we use it (our lawful bases): to perform our contract with you when you place an order; our legitimate interests in running, securing and improving the website; your consent for marketing emails and for non-essential cookies, which you can withdraw at any time; and to meet our legal obligations, such as keeping tax records.
- Transfers: our providers may process your information outside the United Kingdom, including in the United States. Where they do, we rely on the safeguards UK law allows, such as approved contract terms or an adequacy decision.
- How long we keep it: as set out in section 8.
- Your rights: you can ask for a copy of your information, have it corrected or deleted, restrict or object to how we use it, ask us to transfer it, and withdraw consent at any time. Email lauren@laurenphillips.vip. We will reply within one month.
- Complaints: you can complain to the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to deal with your concern first.
European Union
If you live in the European Union, the General Data Protection Regulation (GDPR) applies to how we use your personal information.
- Who is responsible: Gleam Entertainment Corp is the controller of your personal information. Contact: lauren@laurenphillips.vip.
- Why we use it (our lawful bases): to perform our contract with you when you place an order; our legitimate interests in running, securing and improving the website; your consent for marketing emails and for non-essential cookies, which you can withdraw at any time; and to meet our legal obligations, such as keeping tax records.
- Transfers: our providers may process your information outside the European Economic Area, including in the United States. Where they do, we rely on the safeguards the GDPR allows, such as the European Commission’s standard contractual clauses or an adequacy decision.
- How long we keep it: as set out in section 8.
- Your rights: you can ask for a copy of your information, have it corrected or deleted, restrict or object to how we use it, ask us to transfer it, and withdraw consent at any time. Email lauren@laurenphillips.vip. We will reply within one month.
- Complaints: you can complain to the data protection authority in the EU country where you live. We would appreciate the chance to deal with your concern first.
10. State-specific terms
These parts apply only to stores in the state named in their heading. Other stores do not show them.
11. Security
The site is served over HTTPS and protected by Cloudflare, and access to stored data is restricted. Email and payment details are handled through the providers named in section 6. No system is completely secure, but we take reasonable steps to protect your data.
12. Children
This website is only for adults aged 18 or over, and we do not knowingly collect data from anyone younger.
13. Changes to this policy
We will update this policy when what we do changes, or when the law requires it.
14. Contact
If you have questions or concerns about this policy, or want to use any right above, email lauren@laurenphillips.vip.
