MISS MAC MUSIC
Privacy & Cookie Policy
Last updated: 24 October 2026
This policy explains how personal information is handled on missmacmusic.com, including the music catalogue, embedded media, customer accounts and store features.
1. Who is responsible
Miss Mac Music is operated by Jaime Hinckson and operates in the United States and Brazil. Jaime is responsible for the website’s handling of personal information. This notice addresses Brazil’s Lei Geral de Proteção de Dados (LGPD) and applicable United States privacy requirements. European rights apply where the GDPR applies to a particular activity.
Privacy enquiries and requests should be directed to our Contact page, identifying the request as a “Privacy request.” Select “Privacy / data request” in the contact form. No public email address is provided on this page.
2. Information collected and why
- Browsing and security: the server and security systems may process IP addresses, browser/device information, requested pages, timestamps and technical errors to deliver the site, diagnose faults and prevent abuse.
- Accounts: WordPress and WooCommerce process login credentials and account details when an account is used. Passwords are stored as hashes rather than readable passwords. Login, account recovery and security cookies support these functions.
- Shopping: cart contents, session identifiers and, where checkout is available, customer contact details, billing/shipping addresses and order information are processed to supply requested products and handle enquiries. As of this update, no online payment gateway is enabled. Payment-provider disclosures will need updating before one is introduced.
- Comments and reviews: if you submit one through an enabled form, WordPress may collect the submitted text, name, email, IP address and browser information for publication, moderation and spam prevention. Public comments/reviews may display your chosen name. Gravatar may receive an email hash to provide an avatar where that feature is used.
- Enquiries: information you choose to send through an available contact channel is used to answer your request. The Contact page provides an enquiry form. Avoid sending sensitive information unless it is necessary and an appropriate channel has been agreed.
No analytics or advertising tags were configured in the audited WordPress setup at this update. External media providers may perform their own measurement when their content loads or is played.
3. Legal bases under Brazil’s LGPD
Depending on the activity, processing is based on steps you request before a contract or performance of a contract (such as an order), compliance with legal obligations, legitimate interests in operating and securing the website subject to your rights, or consent for optional cookies and third-party media where required. Where consent is required, it can be withdrawn. Declining optional cookies does not prevent ordinary browsing.
5. Service providers and external links
Hosting, site administration, security and backup providers may handle information to operate the site. WordPress and WooCommerce are the software used to provide the site and store; installing that software does not itself mean every visitor’s data is sent to its developer.
Embedded media connects to the relevant provider. YouTube privacy-enhanced players load directly; other consent-controlled media loads after permission. See Google/YouTube, Spotify, SoundCloud, Apple and Gravatar/Automattic for their practices. Following a website, social or listening link takes you to an independently operated service whose policy applies.
6. Retention, security and international processing
Information is retained according to its purpose: account records while needed for an account; order records for fulfilment, support, accounting and legal requirements; enquiries while needed to answer and resolve them; and security records for protection and incident handling. Data should be deleted or anonymised when no longer necessary, subject to legal duties and claims. No automatic account/order deletion schedule is currently configured in WooCommerce; deletion requests therefore require review. Backup copies may remain until the applicable backup cycle expires.
Access restrictions, encrypted connections and backups help protect data, but no website can guarantee absolute security. Processing may occur in the United States, Brazil or other countries used by hosting and media providers. International transfers must meet applicable legal requirements; details about destinations and safeguards applicable to your information can be requested through the Contact form.
7. Your rights in Brazil
Where the LGPD applies, you can request confirmation of processing, access, correction, portability where applicable, information about sharing, and anonymisation, blocking or deletion of unnecessary, excessive or unlawfully processed data. You may withdraw consent, request deletion of consent-based data subject to lawful retention exceptions, and ask about the consequences of refusing consent. You may also request review of qualifying solely automated decisions and complain to the ANPD. Identity or representative authority may need proportionate verification. Requests are handled within applicable legal deadlines.
Para titulares no Brasil: a Miss Mac Music é operada por Jaime Hinckson. Você pode solicitar confirmação, acesso, correção, portabilidade quando cabível, informações sobre compartilhamento, anonimização, bloqueio ou eliminação de dados, bem como revogar o consentimento e reclamar à ANPD. Para cookies, use “Reject optional” para recusar os opcionais e “Cookie preferences” para alterar a escolha. Para outros direitos, a página Contato é o canal de atendimento; selecione “Privacy / data request” no formulário. Não é necessário aceitar cookies opcionais para navegar pelo site. Os players do YouTube em modo de privacidade avançada carregam diretamente, independentemente da escolha de cookies, e conectam seu navegador ao Google/YouTube. Esse modo não garante anonimato nem ausência de cookies ou armazenamento semelhante.
8. United States privacy rights
Rights depend on your state and whether the relevant statute covers the business or processing. Where applicable, these may include access/knowledge, correction, deletion, portability, non-discrimination and opting out of sale, sharing or targeted advertising, with appeal rights under certain state laws. The site does not currently have an advertising-pixel or audience-sale integration configured. We do not infer that all US state statutes apply simply because the site has US visitors.
Use Cookie preferences to deny consent-controlled optional external-media connections and withdraw permission. These controls do not block the directly loaded YouTube players. A recognised browser privacy signal keeps optional categories denied. Other rights requests and authorised-agent requests can be directed to Contact using the “Privacy / data request” topic. Verification and lawful exceptions may apply; responses and any available appeal process follow the applicable statutory deadlines.
9. European visitors, children and updates
Where GDPR applies, rights may include access, rectification, erasure, restriction, portability, objection, withdrawal of consent and a complaint to the competent supervisory authority. The website is a general-audience music and merchandise site, not a service directed to children under 13. Children and adolescents receive the protections required by applicable law, including the LGPD. Do not submit a child’s personal information without an appropriate legal basis and any required parental authorisation. If such information has been submitted improperly, notify us through the available privacy-request channel.
This notice will be reviewed when the site’s services, providers or processing change. The update date appears above. A cookie banner and this policy do not replace the operator’s responsibility to follow applicable privacy requirements.