WYNSTOCK PRIVACY POLICY
1. INTRODUCTION AND SCOPE
Lulo Film, Inc., a Florida corporation doing business as Wynstock ("Wynstock," "we," "us," or "our"), respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit wynstock.com, create or use an account, license or download content, make a purchase, submit an inquiry, or otherwise interact with our website and services (collectively, the "Services").
This Policy applies to personal information processed through the Services. It does not apply to third-party websites or services that maintain their own privacy policies.
2. PERSONAL INFORMATION WE COLLECT
Depending on how you use the Services, we may collect the following categories of personal information:
- Contact and account information, including your name, email address, password and authentication information processed through Supabase, company name, phone number, location, and a Wynstock customer number.
- Transaction and licensing information, including products and license types purchased, prices, internal order references, receipts, order items, license records, download links, and download history.
- Payment-related information. Stripe processes payment-card information directly through its hosted checkout. Wynstock receives transaction status and related order information but does not receive or store full payment-card details.
- Profile and preference information, including favorites, language preferences, account settings, and communications preferences.
- Communications and inquiry information, including messages submitted through our contact form and communications with customer support.
- Usage and technical information, including IP address, browser and device information, timestamps, time zone, session identifiers, page views, actions taken on the Site, cookies, security events, and administrative or synchronization logs.
- Search and interaction information, including search terms, cart activity, favorites, and interactions with photos, videos, categories, and download features.
Wynstock's artificial-intelligence features are used for media tagging and visual-similarity functions involving media files. Wynstock does not use customer personal information for automated profiling or decisions that produce legal or similarly significant effects.
3. HOW WE COLLECT INFORMATION
We collect personal information:
- Directly from you when you create an account, continue as a guest, make a purchase, contact us, or otherwise provide information.
- Automatically when you use the Services, through cookies, session technologies, server logs, and first-party analytics.
- From service providers involved in transactions and operations, such as Stripe confirmations and service-delivery records.
4. HOW WE USE PERSONAL INFORMATION
We use personal information to:
- Create and administer accounts, authenticate users, reset passwords, and maintain sessions.
- Process purchases, issue licenses and receipts, provide time-limited download links, and maintain proof of license.
- Provide customer service and respond to inquiries about stock content, licensing, custom production, or technical issues.
- Operate, maintain, secure, troubleshoot, and improve the Services.
- Understand basic Site usage and performance through first-party analytics.
- Send transactional and service communications, including receipts, download links, password resets, and responses to contact-form submissions.
- Detect or prevent fraud, misuse, security incidents, illegal activity, or violations of our Terms of Use or Terms of Service.
- Comply with tax, accounting, legal, regulatory, and recordkeeping obligations and establish or defend legal claims.
5. LEGAL BASES FOR PROCESSING IN THE EEA AND UK
Where European Economic Area or United Kingdom data-protection law applies, we process personal information as necessary to perform a contract with you, take steps at your request before entering a contract, comply with legal obligations, and pursue legitimate interests such as operating and securing the Services, providing support, maintaining licensing records, preventing misuse, and improving Site performance. Where applicable law requires consent, we rely on consent, which you may withdraw at any time without affecting processing that occurred before withdrawal.
6. COOKIES AND ANALYTICS
The Services use cookies and similar technologies for account sessions, authentication, cart functionality, language settings, security, and basic analytics. Our first-party analytics script records limited events such as a timestamp, the action taken (for example, a page view), an anonymous session identifier, and the visitor's time zone. These analytics events are sent to Tinybird.
The analytics script sets a session cookie that expires after approximately 30 minutes. It does not record screens or session replays, track visitors across unrelated websites, or support advertising. We do not currently use Google Analytics, the Meta/Facebook Pixel, advertising-audience tags, remarketing tools, or conversion pixels.
You can control cookies through your browser settings. Blocking certain cookies may prevent account, cart, checkout, language, or other Site features from working properly. If Wynstock introduces advertising or additional nonessential tracking technologies, we will update this Policy and any required cookie controls before using them.
7. HOW WE DISCLOSE PERSONAL INFORMATION
We disclose personal information only as reasonably necessary to operate the Services, complete transactions, comply with law, or protect rights and security. Categories of recipients include:
- Vercel, for website hosting and delivery through its global edge network.
- Supabase, for account authentication, session management, customer and order databases, administrative records, and media storage. Wynstock's Supabase environment is hosted in the AWS US East (Ohio) region.
- Stripe, for hosted payment processing and payment-related fraud checks. Stripe receives the customer's email address, item titles, license type, prices, and an internal order reference. Payment-card details are entered directly with Stripe.
- Resend, for transactional and service emails sent from Wynstock, including receipts, download links, password resets, and contact-form communications.
- Tinybird, for limited first-party analytics event storage.
- Vimeo, for hosting and streaming video previews.
- Dropbox, for storing high-quality master files and supporting time-limited delivery links.
- Google, for delivery of web fonts used on the Site.
- Professional advisers, regulators, courts, law-enforcement authorities, or other parties when disclosure is required by law or reasonably necessary to protect Wynstock, our users, or others.
- A buyer, successor, or adviser in connection with a proposed or completed merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business, subject to appropriate confidentiality protections.
Service providers process personal information on Wynstock's behalf and are expected to use it only for the services they provide or as otherwise permitted by law. Each provider may also process information under its own applicable privacy notice where it acts independently.
8. NO SALE OR TARGETED ADVERTISING
Wynstock does not sell or rent personal information. We do not share personal information for targeted or cross-context behavioral advertising and do not use personal information to build advertising audiences. If these practices change, we will update this Policy and provide any notice and opt-out mechanism required by applicable law before implementing the change.
9. DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including the following approved retention periods:
- Accounts and profiles are retained while the account remains open. Upon an approved deletion request, login credentials, profile details, and favorites are removed, subject to the exceptions below.
- Transaction, receipt, order, and license records are retained for seven years for tax, accounting, audit, legal-compliance, and proof-of-license purposes. These records may remain after an account closes because the purchased license survives account closure.
- Contact and customer-support inquiries are generally retained for up to three years.
- Download links are time-limited and expire automatically; the underlying transaction and license records remain for the period described above.
- The analytics session cookie expires after approximately 30 minutes. Analytics events may be retained in aggregated, deidentified, or session-level form for as long as reasonably necessary to measure and improve Site performance.
- Administrative, security, and synchronization logs are retained as reasonably necessary for security and operational troubleshooting and are periodically cleared.
We may retain information longer when required by law, necessary to resolve a dispute, enforce an agreement, prevent fraud or abuse, or establish, exercise, or defend legal claims.
10. DATA SECURITY
We use reasonable administrative, technical, and physical safeguards designed to protect personal information. These measures include restricted administrative access and database row-level security designed to limit customers to their own records. No transmission or storage system is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
11. YOUR PRIVACY RIGHTS AND CHOICES
Depending on your location and applicable law, you may have the right to request access to personal information, obtain a copy, correct inaccuracies, request deletion, restrict or object to processing, request portability, withdraw consent, or opt out of the sale of personal information, targeted advertising, or certain profiling. Wynstock does not currently sell personal information, use it for targeted advertising, or conduct customer profiling that produces legal or similarly significant effects.
To exercise a privacy right, email info@wynstock.com and describe your request. We may request information reasonably necessary to verify your identity and authority. Where permitted by law, an authorized agent may submit a request on your behalf, subject to verification. You do not need to create a new account to submit a request.
We will respond within the period required by applicable law. If we deny a request and applicable law provides an appeal right, you may appeal by emailing info@wynstock.com with the subject line “Privacy Appeal” and explaining the basis for the appeal. You may also have the right to lodge a complaint with your local data-protection or supervisory authority.
Wynstock will not unlawfully discriminate against you for exercising an applicable privacy right. Certain information may be exempt from a request, including transaction and license records that must be retained for tax, accounting, legal, security, or proof-of-license purposes.
12. INTERNATIONAL DATA TRANSFERS
Wynstock primarily processes and stores personal information in the United States. Information may also be accessed from Canada as part of business operations. Our service providers may process information in the United States, Ireland, Canada, and other locations where they or their subprocessors operate. These countries may have privacy laws that differ from those in your location. Where required, we use contractual or other lawful safeguards for international transfers.
13. AUTOMATED DECISION MAKING
Wynstock does not use personal information for automated decision making, fraud scoring, or profiling that produces legal or similarly significant effects. Stripe may perform its own standard payment-security and fraud checks as part of processing a transaction.
14. CHILDREN'S PRIVACY
The Services are intended for adults and are not directed to children under 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child without appropriate authorization, we will take reasonable steps to delete it. A parent or guardian who believes a child has provided information may contact us at info@wynstock.com.
15. THIRD-PARTY LINKS AND SERVICES
The Services may contain links to websites, platforms, or features operated by third parties. Their privacy practices are governed by their own notices, and Wynstock is not responsible for the privacy or security practices of third parties acting independently.
16. CHANGES TO THIS POLICY
We may update this Privacy Policy to reflect changes in our Services, technology, data practices, or legal obligations. We will post the revised Policy on the Site and update the “Last Updated” date. When required by law, we will provide additional notice or request consent. We review this Policy at least annually.
17. CONTACT US
The entity responsible for personal information processed under this Policy is:
Lulo Film, Inc.
Doing business as Wynstock
3475 NW 41st Street
Miami, FL 33142
Email: info@wynstock.com
