Privacy Policy

LEONITA is run by Jenna Lyons from Missoula, Montana, United States. This policy explains what we collect when you shop with us, book a lesson, or write to us — and what we do with it. It is written to describe what this site actually does, not what a template assumes.

Questions, or a request about your own data: orders@leonita.life

WHAT WE COLLECT

When you buy something: your name, email address, shipping and billing address, and phone number if you give one. We keep a record of what you ordered, including the title, price and image of each piece as it was at the time — a copy, so a later change to the catalogue never rewrites your receipt.

When you create an account: your name and email address, and a password which is stored only as a cryptographic hash. We never see or store the password itself. If you sign in with Google instead, Google tells us your name, email address, and whether Google has verified that address. If you sign in with an emailed link, we store only the address you typed and a single-use token.

When you book a lesson or performance: your name, email address, and whatever you tell us about what you are looking for.

When you contact us or join the mailing list: your name, email address, and your message or preference.

Automatically: your IP address and browser user-agent are recorded against security-relevant actions — signing in, changing a password, an administrator viewing customer details — so that we can investigate if something goes wrong. We also keep ordinary server logs.

WHAT WE DO NOT COLLECT

We never see your card number. Payments are handled by Stripe, and card details go from your browser to Stripe directly. We receive only the result of the payment and the last four digits.

Photographs you send us are re-encoded when uploaded, which strips the embedded metadata — including any GPS coordinates your camera recorded.

Our operational logs record the recipient of an email as a one-way hash rather than the address itself, so routine log-reading does not expose the customer list.

WHY WE USE IT

To take and fulfil your order, and to write to you about it. To answer a booking request or a message. To run the shop — stock, refunds, tax, and the legal records a business has to keep. To keep accounts secure and investigate abuse. To send marketing email only if you asked for it, and only until you ask us to stop.

WHO ELSE SEES IT

Stripe, to take payment. Google, because this site runs on Google Cloud and our email is sent through Google Workspace. Shipping carriers, when there is a parcel to deliver. Nobody else. We do not sell your information, and we do not share it for anyone else's advertising.

If analytics are enabled on this site, they run through Google Tag Manager and are noted in the cookie banner at that time. As of this version, no advertising trackers are used.

WHERE IT IS KEPT

On Google Cloud servers in the central United States. If you are writing to us from outside the United States, your information will be stored there.

HOW LONG

Order and payment records are kept for as long as tax and accounting law requires — generally seven years. Account information is kept while your account is open. Sign-in links and password-reset links expire in minutes or days and are then dead. Marketing consent is kept until you withdraw it, along with a record of when you gave it.

COOKIES

We set a small number of cookies that the site cannot work without: one to keep you signed in, one to remember your bag before you have an account, and one to protect forms against cross-site submission. These are not used to track you elsewhere.

YOUR RIGHTS

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to orders@leonita.life and we will respond within thirty days.

If you ask us to delete your account, we anonymise it rather than erasing the order rows outright: we remove your name, address and contact details, and keep the order as a number. This is deliberate — a shop has to be able to account for what it sold, and a receipt with a stranger's details removed is still a truthful record.

Depending on where you live you may have further rights — under the Montana Consumer Data Privacy Act, the California Consumer Privacy Act, or the UK and EU GDPR. We apply the rights described above to everyone regardless of where they live.

CHILDREN

This shop is not directed at children. Aerial lessons may be booked for a minor, but only by a parent or guardian, who must give consent and sign the waiver themselves.

CHANGES

When this policy changes we publish a new version rather than editing this one, so the version you agreed to remains on record. The version number and date are shown at the top of this page.