Privacy Policy

A. Age Verification Statement

By accessing this Site, you affirm under penalty of perjury that you are at least 18 years of age. We employ age verification measures and reserve the right to require additional verification at any time. Any attempt by a minor to access this Site is strictly prohibited.

B. Information We Collect

1. Information You Provide Directly

• Account Information: Username, email address, password (encrypted), and profile details.
• Payment Information: Billing name, address, and payment card details (processed securely by third-party payment processors; we do not store full card numbers).
• Communication Data: Messages, booking inquiries, customer support requests, and any content you submit.
• Identity Verification: Government-issued ID for age verification or performer verification purposes.
• Marketing Preferences: Newsletter subscriptions and communication preferences.

2. Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers, and hardware settings.
• Usage Data: Pages viewed, time spent on pages, click patterns, referring URLs, and navigation paths.
• Location Data: Approximate geographic location based on IP address.
• Cookies & Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar technologies.

3. Information from Third Parties

• Payment Processors: Transaction status and fraud prevention data.
• Identity Verification Services: Age verification results.
• Analytics Providers: Aggregated usage statistics.

C. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our services, process transactions, and fulfill orders.
• Account Management: To create and manage your account, verify your identity and age.
• Communications: To respond to inquiries, send service-related notices, and provide customer support.
• Marketing: To send promotional materials (with your consent), including newsletters and special offers.
• Personalization: To customize your experience and provide relevant content recommendations.
• Security: To detect, prevent, and address fraud, abuse, and security issues.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Analytics: To understand how users interact with our Site and improve our services.

D. Legal Bases for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data under the following legal bases:

• Contract Performance: Processing necessary to fulfill our agreement with you.
• Legitimate Interests: Processing for our legitimate business interests, such as fraud prevention and security.
• Legal Obligation: Processing required by law, including age verification and record-keeping.
• Consent: Processing based on your explicit consent, which you may withdraw at any time.

E. Information Sharing

We may share your information with:

• Service Providers: Third parties who assist in operating our Site, including payment processors, hosting providers, email services, and analytics providers.
• Legal Authorities: When required by law, subpoena, court order, or to protect our rights, safety, or property.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• With Your Consent: When you explicitly authorize sharing.

WE DO NOT SELL YOUR PERSONAL INFORMATION TO THIRD PARTIES.

F. Cookies & Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for Site functionality, including authentication and security.
• Performance Cookies: Help us understand how visitors use the Site to improve performance.
• Functional Cookies: Remember your preferences and settings.
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Site functionality.

G. Data Security

We implement industry-standard security measures to protect your information:

• SSL/TLS encryption for all data transmission
• Encrypted password storage using bcrypt hashing
• Regular security audits and vulnerability assessments
• Access controls limiting employee access to personal data
• Secure data centers with physical and electronic safeguards
• PCI-DSS compliant payment processing

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

H. Data Retention

We retain your information for as long as necessary to:

• Provide services and maintain your account
• Comply with legal obligations (including 2257 record-keeping requirements)
• Resolve disputes and enforce agreements
• Support business operations and analytics

When data is no longer needed, we securely delete or anonymize it.

I. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain processing activities.
• Restriction: Request restriction of processing under certain circumstances.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Opt-Out of Marketing: Unsubscribe from marketing communications at any time.

To exercise these rights, contact us at privacy@stormymarie.com.

J. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: What personal information is collected, used, shared, or sold.
• Right to Delete: Request deletion of personal information.
• Right to Opt-Out: Opt-out of the sale or sharing of personal information (we do not sell personal information).
• Right to Non-Discrimination: Not be discriminated against for exercising privacy rights.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Limit: Limit use of sensitive personal information.

California residents may designate an authorized agent to make requests on their behalf.

K. International Data Transfers

If you access the Site from outside the United States, your data may be transferred to, stored, and processed in the United States. By using the Site, you consent to this transfer. We take appropriate safeguards to protect data transferred internationally, including Standard Contractual Clauses where applicable.

L. Children's Privacy

We do not knowingly collect personal information from anyone under the age of 18. If we discover that we have inadvertently collected information from a minor, we will immediately delete such information. If you believe a minor has provided us with personal information, please contact us immediately.

M. Third-Party Links

The Site may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

N. Do Not Track Signals

Some browsers offer "Do Not Track" (DNT) signals. Our Site does not currently respond to DNT signals. You can manage tracking preferences through cookie settings and opt-out mechanisms provided by advertising networks.

O. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Significant changes may be communicated via email or Site notification. Your continued use of the Site after changes constitutes acceptance of the updated Policy.

P. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

For GDPR-related inquiries, you may also contact our Data Protection contact at the email address above. You have the right to lodge a complaint with a supervisory authority in your jurisdiction.