Last updated: April 26, 2026.
Soundplume is an independent magazine and small shop. This policy explains, in plain language, what we collect, why we collect it, and what choices you have. We try to collect as little as possible, and we do not sell personal data. If anything here is unclear, write to us at hello@soundplume.com.
Who we are
This site is operated by Soundplume (Soundplume, LLC), located at 651 B Broad St., Suite 206, Middletown, Delaware 19709. Our website address is https://www.soundplume.com. The data controller for the purposes of GDPR and equivalent laws is the entity above.
What we collect, and why
When you visit the site
Our hosting provider and analytics tools record information your browser sends automatically: IP address, approximate location, device type, browser, referrer, and the pages you view. We use this to keep the site secure, debug problems, and understand which writing connects with readers.
When you place an order
To fulfill an order we collect your name, email, shipping and billing address, phone number if you provide one, the items you order, and the order total. Payment details are entered directly with our payment processor; we do not see or store your full card number. Order data is stored in our store system so we can ship to you, handle returns, and meet tax and accounting obligations.
When you create an account
If you create a customer account, we store the email and password you provide, plus the order history tied to it. You can request deletion at any time.
When you comment
If you leave a comment we collect the name and email you submit, the comment itself, your IP address, and your browser user agent. The IP and user agent are used to detect spam. An anonymized hash of your email address may be sent to Gravatar to display an avatar; their policy is at automattic.com/privacy.
When you contact us
Messages you send through our contact form or by email are kept so we can reply and keep a record of correspondence.
Cookies and tracking
We use cookies and similar technologies for three reasons: to make the site function (login, cart, checkout), to measure how the site is used, and to attribute traffic from referring platforms.
- Functional: cart, checkout, login, comment fields you ask the site to remember.
- Analytics: Google Analytics via Site Kit and Google Tag Manager, to understand traffic patterns.
- Advertising and attribution: Pinterest tag and Google for WooCommerce tags, used when you arrive from those platforms or interact with their ads.
- Performance: caching cookies set by our hosting and caching layer.
You can disable non-essential cookies in your browser. Some site features may not work without them.
Who we share data with
We share data only with the service providers who help us run the site, and only the data those providers need.
- Hosting: Hostinger, which stores all site data and order records.
- Payments: WooPayments (powered by Stripe) and PayPal. They process card and account information directly; we receive a confirmation and the last four digits of the card.
- Fulfillment: Printful, which receives the recipient name, address, and item details required to print and ship an order. Printful’s policy is at printful.com/policies/privacy.
- Email: FluentSMTP routes transactional email (order confirmations, password resets) through Resend.
- Analytics and ads: Google (Analytics, Tag Manager, Google for WooCommerce) and Pinterest, as described above.
- Search and SEO: Yoast SEO does not transmit personal data; Google Search Console (via Site Kit) reports site-level performance.
- Legal: when required by law, court order, or to protect our rights.
We do not sell personal data. We do not share data with brokers.
How long we keep data
- Order and tax records: at least seven years, to meet accounting and tax obligations.
- Account data: until you ask us to delete it, plus a short period in backups.
- Comments: indefinitely, so follow-ups can be approved automatically.
- Email correspondence: typically two years.
- Server logs and analytics: typically twenty six months.
Your rights
Depending on where you live, you have the right to access the personal data we hold about you, correct it, delete it, restrict or object to processing, and receive it in a portable format. Residents of California, the EU, the UK, and similar jurisdictions have these rights under the CCPA, GDPR, and equivalent laws. To exercise any of them, write to hello@soundplume.com. We will respond within thirty days.
You can also lodge a complaint with your local data protection authority.
International transfers
Our service providers, including Stripe, PayPal, Printful, and Google, are based in the United States and other countries. By using the site or placing an order, you consent to your data being transferred to and processed in those countries, which may have different data protection laws than your own.
Security
The site uses HTTPS. Passwords are hashed. Payments are handled by PCI-compliant processors. No system is perfectly secure; we work to keep ours close to it.
Children
The site is not directed to children under thirteen, and we do not knowingly collect data from them. If you believe a child has given us information, write to us and we will delete it.
Changes to this policy
We update this policy when our practices change. The “last updated” date at the top reflects the most recent version. Material changes will be noted on the homepage or in a notice on the site.
Contact
Questions, requests, complaints: hello@soundplume.com.