Privacy Policy

Zinnia Sky Studio Privacy Policy

Updated December 04, 2025

This Privacy Notice for Zinnia Sky Studio LLC (“we,” “us,” or “our”) describes how and why we may access, collect, store, use, and share (“process”) your personal information when you use our services (“Services”), including when you:

Visit our website at https://zinniaskystudio.com or any site that links to this Privacy Notice
Engage with us in other related ways, including marketing or events

Questions or concerns?

Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services.
Contact: tracy@zinniaskystudio.com

Summary of Key Points

This summary highlights key points from this Privacy Notice. You can read the full notice below for details.

What personal information do we process? Information you provide and information automatically collected when you use our Services.
Do we process sensitive personal information? No.
Do we collect information from third parties? Yes. Public databases, marketing partners, social media platforms, and other sources.
How do we process your information? To provide and improve Services, communicate with you, ensure security, prevent fraud, and comply with the law.
When and with whom do we share personal information? In specific situations and with specific third parties.
How do we keep your information safe? Using organizational and technical security measures, though no system is 100% secure.
What are your rights? Rights vary by jurisdiction and may include access, correction, deletion, and opt-out rights.
How do you exercise your rights? By submitting a data subject access request or contacting us.

1. What Information Do We Collect?

Personal Information You Disclose to Us

In short: We collect personal information you voluntarily provide.

This may include:

Name
Email address
Username
Password
Phone number
Billing and mailing address
Contact preferences
Debit/credit card information

Sensitive Information: We do not process sensitive personal information.

Payment Data: Payments are processed and stored by Square and PayPal. We do not store full payment card details.

All personal information must be accurate and up to date.

Information Automatically Collected

In short: Some data is collected automatically when you use our Services.

This includes:

IP address
Browser and device details
Operating system
Language preferences
Referring URLs
Usage activity
Location data (precise or approximate)

We use this data for security, analytics, and service improvement.

Google API

Our use of Google API data complies with the Google API Services User Data Policy, including Limited Use requirements.

Information From Other Sources

In short: We may collect limited data from public and third-party sources.

This may include:

Mailing addresses
Job titles
Email addresses
Phone numbers
IP addresses
Social media profiles
Marketing and intent data

Used for targeted advertising and event promotion.

2. How Do We Process Your Information?

Types of Data Collected

We process personal information to:

Create and manage user accounts
Deliver Services
Respond to inquiries
Send administrative communications
Manage orders and payments
Enable user-to-user communication
Request feedback
Send marketing communications
Deliver targeted advertising
Protect Services and prevent fraud
Analyze usage and improve Services

3. Legal Bases For Processing

Depending on jurisdiction, we rely on:

Consent
Contract performance
Legitimate business interests
Legal obligations
Vital interests

Special provisions apply for users in the EU, UK, and Canada.

4. Sharing Personal Information

We may share information during:

Business transfers (mergers, sales, acquisitions)

5. Cookies And Tracking Technologies

We use cookies, pixels, and similar technologies for:

Security
Site functionality
Analytics
Advertising

Third parties may also use tracking technologies for advertising and analytics.
Google Analytics is used; users may opt out.

6. Data Retention

We keep personal information only as long as necessary for stated purposes or as required by law. When no longer needed, data is deleted or anonymized.

7. Data Security

We use reasonable technical and organizational safeguards. However, no system can be guaranteed 100% secure.

8. Information From Minors

We do not knowingly collect or market to individuals under 18 years of age.

9. What Are Your Privacy Rights?

In Short: Depending on your state of residence in the U.S. or in some regions (such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada), you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

Your Rights

Under certain U.S. state data protection laws, you may have the right to:

Know whether or not we are processing your personal data
Access your personal data
Correct inaccuracies in your personal data
Request the deletion of your personal data
Obtain a copy of the personal data you previously shared with us
Non-discrimination for exercising your rights

Depending on the state where you live, you may also have additional rights, such as:

Access to categories of personal data being processed
Access to categories or specific third parties with whom data is shared
Access to third parties to whom personal data has been sold
Rights related to profiling and automated decision-making

How to Exercise Your Rights

The easiest way to exercise your rights is by submitting a data subject access request (DSAR) or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

10. Controls For Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature. At this time, there is no uniform standard for recognizing or honoring DNT signals. Therefore, we do not currently respond to DNT browser signals.
If a standard is adopted in the future, we will update this notice accordingly.
California law requires disclosure of this behavior, and at present, we do not respond to DNT signals.

11. Do United States Residents Have Specific Privacy Rights?

In Short: If you are a resident of certain U.S. states (including but not limited to California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia), you may have rights to:

Request access to personal information we maintain
Receive details on how it has been processed
Correct inaccuracies
Delete personal information
Obtain copies of personal information
Withdraw consent for processing

These rights may be limited under applicable law.

12. Do We Make Updates To This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The revised version will be indicated by an updated “Revised” date at the top. If material changes are made, we may notify you by posting a notice or sending a direct notification. We encourage you to review this Privacy Notice periodically.

13. How Can You Contact Us About This Notice?

If you have questions or comments, you may contact us:

By email: tracy@zinniaskystudio.com
By website: https://zinniaskystudio.com/contact/
By mail:

Zinnia Sky Studio LLC

11477 W Ina Rd
Tucson, AZ 85743
USA

14. How Can You Review, Update, Or Delete The Data We Collect From You?

You have the right to request access to, correct, or delete your personal information. Requests can be made by:

Submitting a data subject access request
Emailing tracy@zinniaskystudio.com
Using the contact page listed above

We will respond in accordance with applicable data protection laws. You may also designate an authorized agent to make a request on your behalf where permitted.

Cart