Privacy Policy

Last Updated: April 29, 2025

1. Introduction

At Levitate With Sound (“we,” “us,” or “our”), we prioritize your privacy while ensuring transparency. This Privacy and Cookie Policy explains how we collect, use, and protect your personal data when you use our website, products, and services. It also outlines your rights under the General Data Protection Regulation (GDPR) and related laws.

By using our services, you agree to the practices described in this Policy. If you do not agree, please refrain from using our services.

2. Data Controller

Levitate With Sound is the data controller for the personal information we collect through our platforms. In limited cases, we may act as a data processor on behalf of third parties.

3. What We Collect

We collect only the data necessary to provide and improve our services:

  • Account Information: Name, email, and credentials when you register or log in.
  • Order and Payment Data: Billing address, email, and order details. Payment details are processed securely by WooPayments (Stripe) and PayPal; we do not store card or PayPal account credentials.
  • Usage Data: IP address, browser/device type, and usage behavior collected through cookies and analytics.
  • Support Data: Information shared through support requests.
  • Marketing Preferences: Your subscription status and communication preferences.
  • Cookie Consent Records: Consent preferences stored via CookieYes.

We may also collect anonymized or aggregated data that cannot be used to identify you.

Note: We do not knowingly collect personal data from individuals under 16. If we learn that we have done so, we will delete it promptly.

4. Legal Bases for Processing

We process personal data based on the following legal bases under Article 6 of the GDPR:

  • Contractual necessity: To process orders, deliver services, and manage your account.
  • Legal obligation: For tax, accounting, and compliance with regulatory requirements.
  • Legitimate interests: To improve and secure our services, where this does not override your rights.
  • Consent: For marketing communications and cookie-based tracking. You may withdraw consent at any time.

5. Cookies and Tracking

We use cookies to enhance site functionality, perform analytics, and manage your consent preferences. Cookies fall into the following categories:

  • Strictly Necessary: Required for basic site functionality. Cannot be disabled.
  • Analytics: Used by tools like Google Analytics to understand user behavior. These are only enabled after you consent.
  • Marketing: (If used) These help deliver relevant ads. Currently not in use.

We use CookieYes to manage cookie consent. You can accept or reject different cookie categories via the banner. Consent is logged for compliance and may be updated at any time via the “Cookie Settings” link in the website footer.

6. Use of Google Analytics

We use Google Analytics to improve the website experience. This tool collects anonymized usage data (e.g., pages visited, device type) only after your consent. IP anonymization is enabled. The legal basis is your consent.

7. Data Sharing and Recipients

We share your data with trusted third parties to provide our services:

  • WooPayments / Stripe: Secure payment processing. Stripe acts as an independent data controller. Privacy Policy
  • PayPal Holdings, Inc.: Provides secure payment processing. PayPal acts as an independent data controller. PayPal Privacy Policy
  • WooCommerce: Our ecommerce platform. Data is stored securely under applicable agreements.
  • Mailchimp (Intuit): Manages newsletters and email marketing. Privacy Policy
  • Google LLC: Analytics provider. IP anonymization is enabled.
  • CookieYes Ltd.: Consent management platform.
  • Authorities: We may disclose data when required by law or to protect our rights.

We do not sell your personal data.

8. International Data Transfers

Some service providers are based outside the European Economic Area (EEA), including Stripe, Mailchimp, Google, and CookieYes. Where this is the case, data transfers are protected using Standard Contractual Clauses and other safeguards such as encryption and access control.

9. Data Retention

We retain personal data only for as long as necessary:

  • Account and Order Data: While your account is active and for 6 years thereafter (for tax/legal reasons).
  • Payment Data: Stored securely by Stripe. We do not store card details.
  • Support Data: Retained for 2 years after closure.
  • Analytics Data: Retained for 26 months and then deleted or aggregated.
  • Consent Records: Retained for 5 years as required for audit purposes.
  • Marketing Preferences: Deleted immediately when you unsubscribe or withdraw consent.

10. Your Rights

Under the GDPR, you have the following rights:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccuracies in your data.
  • Erasure: Request deletion of your data, subject to conditions.
  • Restriction: Limit how your data is used in specific cases.
  • Objection: Object to data processing for legitimate interests or direct marketing.
  • Data Portability: Receive your data in a machine-readable format.
  • Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
  • No Automated Decisions: You will not be subject to decisions based solely on automated processing that significantly affect you, unless permitted by law.

To exercise your rights, contact us at info@levitatewithsound.com. We may reject requests that are excessive or unfounded. We will respond within one month.

You may also lodge a complaint with your local data protection authority. In the EU, you may contact the Irish Data Protection Commission.

11. Security Measures

We implement appropriate technical and organizational measures, including HTTPS encryption, access controls, and secure data storage. Payment data is processed by PCI-DSS Level 1 compliant providers (e.g., Stripe and PayPal).

If a personal data breach occurs that poses a risk to your rights and freedoms, we will notify you and the relevant authorities without undue delay.

12. Updates to This Policy

We may update this Privacy and Cookie Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. Continued use of our services after changes indicates acceptance of the updated policy.

13. Contact Information

For any questions or requests regarding this policy or your personal data:

Email: info@levitatewithsound.com
Postal Address: 25876 The Old Road, Unit 528, Stevenson Ranch, CA 91381