1. Who We Are

Surprise Surprise Studio LLC ("we," "our," or "us") dba "Surprise Surprise" is a limited liability company registered in Texas, United States of America. If you have questions about this policy, you can contact us at: [email protected].

2. What Information We Collect

• Name (if submitted)
• Email address (if submitted)
• Phone number (if submitted)
• IP address (via analytics and logging)
• Location data (via analytics)
• Payment information (if purchase is made)
• Cookies and usage data (via analytics)

We do not collect sensitive personal data such as health, race, or political affiliation.

3. How We Collect Data

We collect data through:

• Website forms
• Web analytics tools
• Server logs and traffic monitoring via Cloudflare & AWS

4. Why We Collect Your Data

We use personal data to:

• Provide support and respond to inquiries
• Improve website performance and user experience
• Engage with our community
• Send opt-in marketing communications

We do not use personal data for automated decision-making or profiling.

5. Third-Party Services

We share data only with the following third parties, strictly for functionality and security:

• Google Analytics — for anonymous usage tracking
• Cloudflare — for security and performance optimization

We do not sell your data or share it with advertisers.

6. Cookies and Tracking

Our site uses cookies and similar technologies to:

• Maintain session states
• Analyze user behavior and traffic

We do not currently serve users in the EU and do not display a cookie consent banner. We may implement one if this changes.

7. Your Rights and Choices

While we do not currently offer account-based data access tools, we support the following rights upon request:

• Right to opt out of marketing communications
• Right to request access or deletion of personal data (via email)

You may unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or contacting us.

8. Data Security and Storage

We use reasonable technical and organizational measures to protect your data, including:

• Encrypted transmission over HTTPS
• Role-based access control for internal systems

Data is stored in the United States via services including AWS and Cloudflare and retained until user account deletion or when no longer needed.

9. Children's Privacy

This website is not intended for users under the age of 13. We do not knowingly collect or store information from children.

10. Policy Updates

We may update this Privacy Policy from time to time. Changes will be posted on this page. We do not notify users directly, so we encourage you to review this policy periodically.

A version history is maintained internally to track changes.

11. Contact Us

For any questions or data-related requests, contact us at: [email protected]