At Samantha Gruwell Weddings, your privacy is very important to us, and we are committed to protecting your personal information.

This Privacy Policy describes what information is collected from you on https://www.samanthagruwell.com/ (hereinafter the “website”) and how it is used. The website is owned and operated by Samantha Gruwell Weddings (“Company,” “we”, “our”). This Privacy Policy applies to this website and any products or services that we offer that link to this policy. The term “you” refers to anyone who uses, visits, or views the website.

Your continued use of the website after posting of any changes to our Privacy Policy constitutes your acceptance of those changes and updates. You must not access or use the website if you do not wish to be bound by this Privacy Policy.

This Privacy Policy describes how we collect and use the personal information you provide to us on our Website. It also applies to information we collect on this Website, as well as in email, text, and other electronic messages between you and this Website. It does not apply to information collected by us offline or through any other means, including on any other website operated by Company or any third party. We may update this Privacy Policy to reflect changes to our information practices. We encourage you to periodically review this policy for the latest information on our privacy practices.

WHAT INFORMATION WE COLLECT AND HOW IT IS USED
When you access the website, you may provide certain personally identifiable information including but not limited to your name, email address, phone number, address, avatar image, credit card information when you make a purchase on the website (“personal information”).

This information is collected when you fill out a contact form, pay an invoice, subscribe to a newsletter, contact us, use the search feature on the website, provide comments or any other feedback, or enter any other information on the website to communicate with us. From time to time, we may also collect information that you submit when you participate in any online surveys that we may post on our website. 

Your personal information is used to personalize your experience, improve the website to better serve you, provide customer service support, efficiently process your requests or transactions, tailor advertisements to you, elicit reviews of services or products, provide you offers and promotions, or to follow up with you through correspondence via email or phone.

To opt out of data collection, please contact us at support@samanthagruwell.com.

CONTACT FORMS
To fulfill your contact form requests, we collect the personal information contained in the contact form. The data provided in the account form will be stored in the database until the expiration of the limitation period for claims under the concluded contract.

BROWSING 
To ensure proper use of the Website, we automatically gather information about your computer such as your IP address, time and date of visit, browser type, referring/exit pages and operating system.

To ensure proper use of the Website, we collect the following personal information from you:
• IP address
• Time and date of visit
• Browser and operating system information
• Referring/exit pages
• We may log this information for system administration, order verification, internal marketing, and system troubleshooting purposes.

We may also use this information:
• To present our Website and its contents to you
• To provide you with information, products, or services
• To fulfill any other purpose for which you provide it
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection
• To notify you about changes to our Website

The data collected will be stored in the database until the expiration of the limitation period for claims under the Terms of Use.

SERVERS
To provide use of the Website via the server on which the Website is hosted, we collect the following personal information from you:
• IP address
• Server date and time
• Browser and operating system information

This data is stored on the server until the expiration of the limitation period for claims under the concluded contract. This data is not used by the Company to identify anyone.

COOKIES AND OTHER TRACKING TECHNOLOGIES
We use cookies to ensure proper functionality of the website and for the following purposes:
• Keeping track of your preferences
• Operation of the cart and the ordering process
• Providing a user account
• Recording the acceptance of the Terms of Use
• Providing support
• Tracking website statistics, such as number of visitors, type of operating system and web browser used, time spent on the website, visited subpages, etc.

The data collected will be stored in the database until the expiration of the limitation period for claims under the Terms of Use.

For this purpose, we may use a third-party website. The use of third-party services involves the implementation of the tracking code provided by the third-party service into our website’s code. This code is based on cookies but may also use other tracking technologies. In this regard, collected information is completely anonymous and does not allow your identification.

You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Website.

MOBILE SERVICES
We may also collect non-personal information from your mobile device if you access the Website from your phone. Examples of information that may be collected and used include your geographic location, how you use the mobile site, and type of device. The data collected will be stored in the database until the expiration of the limitation period for claims under the Terms of Use.

CHILDREN’S PRIVACY
We respect the privacy of children and “child” means an individual under the age of 13. This policy is in accordance with the Children's Online Privacy Protection Act (“COPPA”). This website's information and content are only intended for people over the age of 18. This website is not intended for children under the age of 13. Without prior parental or guardian consent, we do not knowingly collect, use, or disclose personal information from children under the age of 13. 

If you believe that personal information was collected without parental or guardian consent from a child under the age of 13, please contact us at support@samanthagruwell.com to have that information deleted. 

DISCLOSURE OF YOUR INFORMATION
As a general rule, we do not sell your personal information to third parties and we do not authorize the collection of our visitors' personally identifiable information by any third parties for the third parties' use.

We do not disclose your personal information to third parties without your consent with the exception of the following circumstances:
• We may disclose your information to our trusted third parties that work with us such as our website hosting partners, email marketing service provider, other service providers that assist in the operation of the website, and any other affiliates and subsidiaries we rely upon to provide you products and services offered here.
• We may disclose your information to contractors or third parties we use to support our business. These parties may use your data only to provide the services requested by us and for no other purpose, and they are bound by contractual obligations to keep your information confidential.
• We may disclose your information in order to comply with state or federal regulations related to copyright infringement lawsuits or any other legal claims related to the website.
• We may disclose your information to enforce our website or product terms and conditions or terms of sale and any other agreements we may have entered into for billing and collection purposes.
• We may disclose your information to our successor and/or acquiring party in the event of a merger, acquisition, restructuring, dissolution or partial sale in the future. However, your personal information will be transferred to the acquiring party in accordance with this privacy policy.

We may also disclose your personal information:
• To our subsidiaries and affiliates
• To contractors, service providers, and other third parties we use to support our business
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Company about our Website users is among the assets transferred
• To fulfill the purpose for which you provide it
• For any other purpose disclosed by us when you provide the information
• To comply with any court order, law, or legal process, including to respond to any government or regulatory request
• To enforce or apply our terms of use and other agreements, including for billing and collection purposes
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Company, our customers, or others

PERSONAL DATA
You have the following rights concerning our processing of your personal data:
• The right to request access to your personal data as well as its rectification, removal or restriction of processing
• The right to object to the processing
• The right to transfer data
• The right to withdraw consent for the processing of personal data for a specific purpose
• The right to bring a complaint to the supervisory authority in connection with the processing of personal data

We may refuse to exercise certain rights from those indicated above in a situation where the implementation of a given right would be in conflict with the legitimate purpose of the data we process. For example, we may refuse to delete personal data specified in your order until the expiration of the limitation period for claims under the concluded contract.

We entrust the processing of personal data to the following entities:
• SQUARESPACE - in order to operate the website, and as an email service provider 
• GOOGLE WORKSPACE - to generate databases in support of contracted services 
• GOOGLE ANALYTICS – to process website analytics
• ASANA - to track project timelines in support of contracted services
• QUICKBOOKS - in order to use the services of an external accounting office which processes the data included in invoices
• SOCIAL MEDIA PROVIDERS - to interact with you online

In connection with the use of these third-party entities, personal data may be transferred to another country.

GOOGLE ANALYTICS 
Just like other websites, this website automatically collects certain information about you through Log Data and Google Analytics. Log Data is information about your computer’s Internet Protocol Address, which is your “IP” address, browser information, Internet Service Provider’s information, your operating system, and your browser type. Similarly, Google Analytics collects certain information about your location, browsing history, the pages you visit, the equipment you used to access the website, traffic patterns, and other general patterns related to your use of the website. 

This information is used to analyze website statistics related to user behavior and interests, improve our performance and your use of the website and to further enhance our products and services offered to you. Please see Google’s Privacy and Terms to learn more about their privacy practices.

COMMENTS AND SOCIAL MEDIA 
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. When you leave a comment, your name, email address and website/organization name is not shared with a third party and may be used to communicate with you.

Social media accounts and sharing options are available on this website. Social media sites (Facebook, Instagram, YouTube, Pinterest, and others) can track your personal information. Should you choose to interact with us on social media, please note that you will be voluntarily disclosing that personal information. This information is no longer private. It becomes public information and can be collected and used by others. We have no control over and take no responsibility for the use, storage or dissemination of such publicly-disclosed personal information by you.

Any such interactions via comments and social media with us do not subject us to any kind of liability related to misuse of your information by others.

USE OF WEB BEACONS AND PIXELS
In conjunction with the use of cookies, third parties may also use web beacons, which are also known as clear GIFs, web bugs or pixel tags to collect general information about your use of our website. They monitor user activity and are used to track customer behavior data. This information may be relevant to third parties such as the ad networks used on our website to tailor the advertising based on your behavior and interests.

We may use social media pixels to track and collect general information about your use in compliance with different social media sites (Facebook, Instagram, Pinterest, and others) for the purpose of promoting products, tracking conversions, re-marketing, running target advertisements and so forth. 

Third parties like Facebook may use their own cookies, web beacons and other technologies to collect and receive information from our website for the purpose of providing target advertisements. You may see our ads on social media sites after you have visited our website.  

THIRD-PARTY LINKS AND USE 
We may include, offer or advertise third party links, products or services on the website. Once you click on a third-party link and leave this website, you are no longer bound by our Privacy Policy and Terms and Conditions.

Articles on this website may include embedded content (e.g. videos, images, advertisements, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

We may use Google AdSense advertising along with any other third-party advertising on the website. Google is a third party that also uses cookies to serve ads on the website for the purpose of providing a positive user experience. Third-party vendors such as Google use cookies to serve ads based on a user’s prior visits to the website. You can opt-out of Google by visiting their privacy policy and ad settings.

We have no control over these third parties and they have their own privacy policies. Neither are we responsible for the activities and practices of these third parties. You should contact them directly and read their privacy policies for any questions. You also agree that your use of these third-party websites is solely at your risk. 

EMAIL COMMUNICATIONS & MARKETING
We may use your email to deliver a periodical newsletter, as well as for other promotional purposes.

Email messages we send you may contain code that enables our database to track your usage of the emails, including whether the email was opened and what links (if any) were clicked. The data collected will be stored in the database until the expiration of the limitation period for claims under the Terms of Use.

You have the option of opting in or unsubscribing from our email list. By subscribing and opting in, you agree to receive newsletters, updates, messages, promotional materials and any other content related to this website. When you send an email, your email message along with email address and responses are saved for communication purposes with you. This information is kept confidential and we do not share, sell or trade your email information with third parties except as otherwise stated in this privacy policy.

If you are in the European Union and opt-in to receive any of our free products or services and/or purchase any products or services through our website then you will be subscribed to receive our free email newsletter once you affirmatively consent to it. Please see the Opt-Out section below should you wish to “unsubscribe” and not receive any emails from us.

But if you are NOT in the European Union then you will be automatically subscribed to receive our free email newsletter once you opt-in to receive any of our free products or services and/or purchase any products or services through our website. Please see the Opt-Out section below should you wish to “unsubscribe” and not receive any emails from us.

OPT-OUT
We comply with the CAN-SPAM Act of 2003 and do not spam or send misleading information. Should you wish to no longer receive communication from us, you have the option of unsubscribing by clicking “unsubscribe” at the bottom of the email we send to you or by contacting us at support@samanthagruwell.com.

As for third party websites, please contact them directly to unsubscribe and/or opt-out from their communications.

We are in compliance with the GDPR along with the email marketing service we use to collect your data.  

*You acknowledge that it may take up to 10 days for us to process an opt-out request. Please note that you cannot opt out of receiving transactional emails related to your account with us.

GDPR VISITOR RIGHTS (FOR EU AND UK CUSTOMERS AND VISITORS) 
If you are located in the European Union (“EU”) or the United Kingdom (“UK”), you are entitled to certain rights and information listed below under the General Data Protection Regulation (“GDPR).

We will retain any information you choose to provide to us until the earlier of:
• You ask us to delete the information by sending a request to support@samanthagruwell.com. Please note that such requests may result in you no longer being able to access paid or free content previously provided to you.
• Our decision to cease using our existing data providers.
• The Company decides to no longer be in business or continue to offer the services.
• The data is no longer needed to provide you service, is too costly to maintain further retention, or the Company finds it outdated.

You have the right to request access to your data that we store and have the ability to access your personal data.
You have the right to either rectify or erase your personal data. You have the right to verify the accuracy of your personal data and have it corrected or removed completely
You have the right to seek restrictions on the processing of your data. When you restrict the processing of your data, we can store your data but cannot process it further.
You have the right to object to the processing of your data in certain circumstances including but not limited to direct marketing, profiling, scientific or historical research purposes, statistical purposes, automated decision making and profiling and tasks based on legitimate interests or in the public interest/exercise of official authority.
You have the right to the portability of your data. You have the right to request your personal data from us, receive it and transfer it to another controller. 
You have the right to withdraw consent at any time. If you have provided consent to the Company’s processing of your personal data, you have the right to withdraw that consent any time without affecting the lawfulness of processing based upon consent that occurred prior to your withdrawal of consent.
You have the right to lodge a complaint with a supervisory authority that has jurisdiction over issues related to the GDPR.

We require only the information that is reasonably necessary to enter into a contract with you. We will not require you to provide consent for any unnecessary processing as a condition of entering into a contract with us.

LEGAL BASIS FOR PROCESSING DATA UNDER THE GDPR
Under the GDPR, we may process your data under the following legal basis:
• Consent: when you give us clear consent to process your personal data for one or more specific purpose. 
• Contractual Necessity: when processing your personal data is necessary to fulfill a contract with you.
• Legal Obligation: when processing of your personal data is necessary to comply with the law such as data related to taxes or employee records.
•Vital Interests: when processing of your personal data is necessary to protect your life or health.  
• Public Interests: when processing of your personal data is necessary for the performance of a task carried out in the public interest or for official functions.
• Legitimate Interests: when processing of your personal data is necessary to further our legitimate interests such as marketing activities. 

YOUR STATE PRIVACY RIGHTS
State consumer privacy laws may give their residents additional rights in terms of how we use their personal information. These privacy rights vary depending on the local laws that apply to you.

California, Colorado, Connecticut, Virginia, and Utah each provide their state residents with rights to:
• Confirm whether we process their personal information.
• Access and delete certain personal information.
• Data portability.
• Opt-out of personal data processing for targeted advertising and sales.

California, Colorado, Connecticut, and Virginia also provide their state residents with rights to:
• Correct inaccuracies in their personal information, taking into account the information's nature processing purpose.
• Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects. 

Nevada provides its residents with a limited right to opt-out of certain types of personal information being sold by a business. The opt-out option does not apply to all types of data, however; it does protect sensitive medical or financial data, for example. Please note that we do not currently sell data that triggers the opt-out requirements of that statute.

To exercise any of these rights above under different states, please contact us with your request at support@samanthagruwell.com and please include your name, email address, and mailing address.

CALIFORNIA CONSUMER PRIVACY ACT (CCPA) AND CALIFORNIA PRIVACY RIGHTS ACT (CPRA) COMPLIANCE AND YOUR LEGAL RIGHTS
If you live in California, you have additional rights under California law, and we comply with the CCPA and CPRA because we may have visitors from California on our website. Here are your legal rights under CCPA/CPRA:
• You have the right to know the categories of personal information we have collected, sold or disclosed about you to third parties. 
• You have the right to opt-out of the sale and sharing of your personal information with third parties. If you are under the age of 16, you have the right to opt in to such sales, or to have a parent or guardian opt in on your behalf.
• You also have the right to access your personal information, which we will provide within 30 days of such request. 
• You have the right to know what personal information is collected from you and how it is used, which we explained in this Privacy Policy.
• You have the right to correct your personal information. 
• You have the right to have your personal information deleted, subject to some exceptions.
• You have the right to equal service, price and no discrimination
• You have the right to data portability and right to request your personal information and use it for your own purposes.
• You have the right to consent and/or limit the use and disclosure of your sensitive personal information.

CATEGORIES OF PERSONAL INFORMATION COLLECTED AND DISCLOSED FOR A BUSINESS PURPOSE
The types of personal information we collect and how we use it have already been listed above, but under the CCPA/CPRA, the following categories of personal information may have been collected and disclosed for business purposes in the previous 12 months: 
• Identifiers such as your name, address, phone number, email address and other similar identifiers
• Protected classification characteristics such as your age, gender, religion and disability information 
• Commercial information such as your use of our products and services 
• Internet/Network information such as your IP address, search history, browser and device information
• Geolocation data such as the information about your physical location or movements
• Sensory information such as audio, electronic, photos or other visual information 
• Professional or Employment Information such as your job history including previous employer and performance evaluations 
• Biometric information such as fingerprints, faceprints, voiceprints, genetic and physiological activity patterns. We do not collect any biometric information from you. 
• Education information such as records related to your educational institution (grades, transcripts, class lists, student schedules and so forth). We do not collect any such education information. 
• Inferences such as information reflecting your interests, preferences, characteristics, physiological trends, and abilities. 
• Other Personal Information such as information provided by you directly when you fill a form on our website, register for an event scheduled by us, post a comment on our website or social media, make a purchase from us, your account login or credentials allowing you to access a product or account, telephone number, and any other information you provide to us.  
• Sensitive personal information such as your social security, driver’s license, state identification card or passport number. We do not collect this sensitive personal information from you. 

HOW WE COLLECT YOUR PERSONAL INFORMATION AND FOR WHAT PURPOSE
We collect this personal information directly from you, from your browser or device, use of cookies, service providers, our business partners, affiliates, or from third parties. We do not sell your personal information to third parties. 

We use the information we collect for various purposes depending on how you interact with us. These purposes include: 
• To provide our services or products to you including invoices and statements
• To create, maintain or secure your account with us
• To process your requests, purchases, transactions and payments
• To communicate with you about your account and our products/services 
• To market or advertise our new products and promotions to you via email or other social media, to answer your questions, and to understand your needs and preferences.
• To improve our website, products, services, content and advertising and personalize them to your interests and preferences 
• To better understand the demographics of our users, analyze data and usage trends
• To help you share our content, products, services, and your experience working with us with your friends and followers on social media  
• To hire or evaluate you as a candidate when you seek employment with us
• To protect our website, products and services from misuse and to ensure security 
• To process payments or to prevent theft and fraud 
• To transfer business in any merger, acquisition, reorganization, sale of assets, bankruptcy where we may sell, transfer or share some of our business assets including information related to our customers. In those instances, you will be notified of such ownership changes as well as the rights you have regarding your personal information.
• To comply with legal requirements and to enforce our terms and agreements with you 
• To assess or carry out a merger, dissolution, restructuring, reorganization, or other sale or transfer of some or all of our assets, whether as part of a bankruptcy or similar proceeding, in which personal information about our website users, including our email list, is one of the assets transferred.

We may also use your information in other ways for which we provide specific notice at the time of collection. We may combine different types of information that we collect about you for any of the purposes described above.

Please be advised we DO NOT SELL YOUR PERSONAL INFORMATION to third parties and have never sold your personal information. We do not intend to sell your personal information in the future either. 

Under the CCPA and CPRA, you still have the right to opt-out of sharing your personal information and send us a “do not sell or share my personal information” request. If you would like to exercise any of your rights under California law, please submit a verifiable consumer request to us by sending us an email at support@samanthagruwell.com.

Only you, as the person registered with the California Secretary of State, or someone you authorize to act on your behalf, can make such verifiable consumer requests related to your personal information.

Your verifiable consumer request must provide sufficient information that allows us to verify that you are the person you are claiming to be or that you are the authorized representative of such person about whom we had collected personal information. You must describe your request with enough details such as your first and last name, address and your country that allow us to properly understand the request and respond to it. Please note we cannot respond to your request or provide you with personal information unless we first verify your identity or authority to make such a request and confirm that the personal information relates to you. We will make all attempts to respond to your request within 30 days of receipt. 

The above-mentioned California privacy rights are not absolutely guaranteed because there are some exceptions that allow us to refuse your request. We are only required to respect these rights if we are acting as a business under the CCPA/CPRA and the requested rights have been granted and applied to you under the CCPA/CPRA.

CALIFORNIA’S “SHINE THE LIGHT” ACT
Pursuant to California’s “Shine the Light Act,” you are permitted to request information about the manner in which we share certain categories of information with third parties for their marketing use. We may disclose your personal information to our affiliates or other related third parties such as service providers, vendors for their use in marketing to you, so we can provide the products and/or services offered on this website to you. When we disclose such information, your personal information is still kept confidential and between us and that third party. It is not used for any other purpose that’s not permitted under the laws.

DO NOT TRACK SIGNALS
This privacy notice for California residents supplements the information included in the previous sections of this privacy policy. California and Delaware law also requires us to state whether we honor “Do Not Track” settings in your browser regarding targeted advertising, and please note we do not monitor or respond to Do Not Track browser requests. 

You can also enable or disable Do not Track in your browser. This is a setting that tells websites not to track your online activities. To enable or disable it, go to the "Privacy" or "Security" tab in your browser's settings menu. Depending on which browser you're using, you may find the option under "Do Not Track Requests" or something similar.

DATA RETENTION
We will retain your information as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. We may also retain and use your information to continue offering you our products and services, comply with our legal and accounting obligations, resolve disputes and enforce our agreements.

SECURITY
The security of your personal information is important to us, and we strive to follow generally commercial industry standards to protect your personal information submitted to us voluntarily and automatically. However, no method of transmission over the Internet is 100% secure and we cannot guarantee the absolute security of your information. When you make a credit card purchase or purchase through any means on the website, you will be directed to a third-party vendor to complete the transaction. Any information you provide during the checkout process is not stored on our website but instead provided to the third-party vendor that completes the purchase transaction.

By using this website, you agree to hold us harmless for any security breach and for any unauthorized use of your personal information by third parties. You also agree that we cannot be held responsible for any disclosure of your information through our website without our knowledge and consent. 

PRIVACY POLICY UPDATES 
This privacy policy is effective as of 10/4/24 and will be updated and modified as needed. You are responsible for visiting this page periodically to check for future updates to this policy. Any modifications to this privacy policy will be effective upon our publishing of the new terms, and your continued use of our website after the posting of any updates constitutes your acceptance of our modified privacy policy.

CONTACTING US  
If you have any questions or comments about this Privacy Policy, please contact us at support@samanthagruwell.com.

Last Updated: 10/4/24