01. Information We Collect
When you subscribe to our newsletter or send fan mail, we collect your email address, optional name, and the message content (text or audio). When you purchase a membership or merchandise, Stripe collects and processes your payment details — we never see or store full card numbers. Your IP address and approximate location are logged for fraud prevention and rate limiting. Voice notes are stored as audio files in Emergent Object Storage and remain private to Nina Capone Media.
02. How We Use It
We use your information to (a) deliver the newsletter and event blasts you opted into, (b) fulfil membership perks (Backstage access, monthly featured-supporter drawing), (c) send transactional emails (purchase receipts, booking replies, password resets), and (d) improve the Site. We never sell your data to third parties.
03. Email & Double Opt-In
All marketing emails require a double opt-in: you confirm via a link after subscribing. Every newsletter contains an unsubscribe link at the footer (CAN-SPAM compliant). One-click unsubscribe removes you from all future marketing — you'll still receive transactional emails (receipts, account notices) if you have an active subscription.
04. Cookies
We use a small number of first-party cookies for: keeping you logged into the Admin Dashboard (admins only), remembering your form draft state, and providing Stripe payment widgets. In addition, third-party advertising partners (see "Advertising" below) may set cookies to serve and measure ads. You can control cookies through your browser settings and the ad-personalisation options described below.
05. Advertising (Google AdSense)
This Site displays ads served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this Site and/or other sites on the internet. You may opt out of personalised advertising by visiting Google Ads Settings (https://www.google.com/settings/ads), and you can opt out of third-party vendor cookies for personalised advertising at https://www.aboutads.info/choices. For more information on how Google uses data when you use our partners' sites or apps, see https://policies.google.com/technologies/partner-sites.
06. Payment Data
Stripe is our PCI-DSS-compliant payment processor. Card numbers, CVCs, and bank credentials are submitted directly to Stripe — they do not pass through our servers. We retain only the Stripe customer ID and subscription metadata (status, current period end) to manage your membership. Stripe's privacy policy applies to data they collect.
07. Data Retention
We keep newsletter subscriptions until you unsubscribe. Fan mail and voice notes are kept for the lifetime of the membership and may be archived afterward to preserve our editorial record (unless you request deletion). Payment records and invoices are retained for 7 years for tax compliance.
08. Your Rights (GDPR / CCPA)
You have the right to access, correct, export, or delete your personal data. Email bookings@ninacapone.com with the subject "Data Request" and include the email address tied to your account. We will respond within 30 days. Note that we will need to verify your identity before fulfilling deletion requests.
09. Security
We use industry-standard encryption (TLS in transit, encrypted at rest in MongoDB Atlas and Emergent Object Storage). Admin access is gated by JWT-based authentication. Backstage stream URLs are never exposed in public API responses. If we ever experience a data incident affecting your personal information, we will notify you within 72 hours.
10. Children
The Site is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected such information, email bookings@ninacapone.com and we will delete it promptly.
11. Contact
Questions about this Privacy Policy or your data? Email bookings@ninacapone.com.