Privacy Policy

1. Introduction

Welcome to Let's Do Podcast ("we," "us," or "our"). We are committed to protecting your privacy and ensuring transparency about how we handle your personal information. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of information when you use our website and services.

By using our services, you agree to the collection and use of information in accordance with this policy. We will not use or share your information with anyone except as described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

When you contact us or use our services, we may collect:

• Contact Information: Name, email address, phone number
• Business Information: Company name, project details, service requirements
• Communication Records: Messages, meeting notes, project feedback
• Payment Information: Processed securely through third-party providers

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• Device Information: IP address, browser type, operating system, screen resolution
• Usage Data: Pages visited, time spent, clicks, scroll behavior, referral sources
• Location Data: General location based on IP address (city/state level only)
• Cookies & Tracking: Session data, preferences, analytics identifiers

2.3 Third-Party Tracking Technologies

We use the following tracking technologies (subject to your consent):

3. How We Use Your Information

3.1 Primary Purposes

• Service Delivery: Provide podcast production services and respond to inquiries
• Communication: Send project updates, invoices, and important notifications
• Quality Improvement: Analyze website performance and user experience
• Marketing: Send promotional materials (with your consent only)
• Legal Compliance: Meet legal obligations and protect our rights

3.2 Analytics and Optimization

We use analytics data to:

• Understand which pages are most popular
• Identify technical issues and improve performance
• Optimize our website for better user experience
• Measure the effectiveness of our marketing efforts
• Make data-driven decisions about service improvements

3.3 Legal Basis for Processing

Under GDPR, we process your data based on:

• Contract: To provide services you've requested
• Legitimate Interest: To improve our services and communicate with you
• Consent: For marketing and non-essential tracking
• Legal Obligation: To comply with applicable laws

4. Information Sharing and Disclosure

4.1 When We Share Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.2 Service Providers

• Payment Processing: Stripe, PayPal for secure payment processing
• Email Services: Mailchimp, SendGrid for newsletters and notifications
• Analytics: Google Analytics, Hotjar for website optimization
• Marketing: Meta (Facebook), Google Ads for advertising

4.3 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Enforce our terms of service

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections outlined in this policy.

5. Cookies and Tracking Technologies

5.1 Types of Cookies We Use

5.2 Managing Cookies

You can control cookies through:

• Our cookie consent banner
• Browser settings (disable cookies)
• Privacy settings in your browser
• Opt-out links provided by third-party services

6. Data Security

6.1 Security Measures

We implement comprehensive security measures to protect your information:

• Encryption: All data transmission uses SSL/TLS encryption
• Access Controls: Limited access to personal data on a need-to-know basis
• Regular Audits: Security assessments and vulnerability testing
• Data Backup: Regular backups with encryption at rest
• Incident Response: Procedures for handling security breaches

6.2 Data Retention

We retain your information only as long as necessary for the purposes outlined in this policy:

• Contact Information: Duration of our business relationship plus 3 years
• Project Data: Duration of project plus 7 years (legal requirement)
• Analytics Data: 26 months (Google Analytics standard)
• Marketing Data: Until consent withdrawn or 2 years of inactivity

6.3 Data Deletion

You can request deletion of your personal data at any time. We will respond within 30 days and delete your information unless we have a legal obligation to retain it.

7. Your Rights and Choices

7.1 GDPR Rights (EU Residents)

If you're located in the European Union, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Limit processing of your data
• Portability: Receive your data in a structured format
• Objection: Object to processing based on legitimate interests

7.2 CCPA Rights (California Residents)

If you're a California resident, you have the following rights:

• Access: Know what personal information we collect and use
• Deletion: Request deletion of your personal information
• Opt-out: Opt-out of sale or sharing of personal information
• Correction: Correct inaccurate personal information

7.3 Marketing Communications

You can unsubscribe from marketing communications at any time by:

• Clicking the "unsubscribe" link in our emails
• Contacting us directly at yovel@letsdopodcast.com
• Updating your preferences in your account settings

8. International Data Transfers

Our services are primarily hosted in the United States. If you're accessing our services from outside the US, your information may be transferred to, processed, and stored in the US.

When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Certification schemes and codes of conduct
• Binding corporate rules for intra-group transfers

9. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

This includes but is not limited to:

• Social media platforms (Spotify, YouTube, etc.)
• Payment processors (Stripe, PayPal)
• Analytics and marketing platforms
• External tools and resources we recommend

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you via email if you have an account with us
• Post a prominent notice on our website
• Obtain consent for material changes where required by law

We encourage you to review this Privacy Policy periodically to stay informed about our privacy practices.