Privacy Policy

Who We Are

Artificially Hip is the data controller responsible for the processing of personal data described in this Privacy Policy.

Artificially Hip
Email: Marty@hipband.us
Address: Upland, California, United States

What Data We Collect

We collect the following types of personal data when you use our website:

Booking request information: the information you submit through our booking form (for example, your name and contact details, event details, and any message you include).

Cookie consent preferences: your choices about cookies and similar technologies, recorded through our consent management system.

Device and technical information: information that is automatically sent by your device when you access the website, such as your IP address, browser type, device information, and technical logs needed to deliver the website securely and reliably.

Spam-prevention information for form submissions: technical signals used to help determine whether a booking request is likely to be legitimate or automated spam.

Sources of data:

Directly from you when you submit a booking request.

Automatically from your device and browser when you access the website (for example, IP address and technical logs).

From cookies and similar technologies, where those technologies are used and, for non-essential cookies, only after you have made your choice through our cookie settings.

Providing booking request information is optional, but if you do not provide it, we will not be able to respond to your booking inquiry through the website form. Device and technical information is necessary to operate and protect the website.

How We Use Your Data

We use your personal data for the following purposes, each based on a specific legal basis under GDPR where it applies:

To receive, review, and respond to booking requests and to communicate with you about a potential engagement (legal basis: contract).

To protect our website and booking form from spam, abuse, and security threats, and to maintain the security and integrity of our systems (legal basis: legitimate interest).

To store and apply your cookie preferences and, where required, to place non-essential cookies only after you have given consent (legal basis: consent).

Who We Share Your Data With

We share personal data only as needed to operate this website, handle booking requests, and protect the site from spam and abuse. When we use service providers, they process personal data under their own privacy policies and, where applicable, under contractual terms that require appropriate safeguards.

Google (YouTube): We use YouTube to provide video content on our website. Videos load only after you press play. When you play a video, Google may receive device and usage information (such as IP address and information about the video played) and may set or read cookies or similar technologies according to Google’s settings and policies.

Cloudflare (Turnstile): We use Cloudflare Turnstile to help protect our booking form from spam and automated submissions. When you submit the form, Turnstile processes technical information to assess whether the submission is likely to be legitimate.

Website hosting provider: Our hosting provider processes technical and device information (such as IP address and server logs) to host and deliver the website.

Email provider: Booking requests reach us by email, which means our email provider processes the content of your booking request and related contact details to deliver messages to us.

Links to social media: Our website links to our YouTube and Instagram pages. If you follow those links, those platforms process your data under their own privacy policies.

We use our own consent management system (Trustwards) to record and manage your cookie preferences. This data is processed internally and not shared with third parties.

International Data Transfers

Some of our service providers are located outside the EU/EEA, specifically in the United States. This means that, depending on how you use the website (for example, if you play a YouTube video or submit a form protected by Turnstile), your personal data may be transferred to and processed in the United States.

Google LLC (YouTube): Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF).

Cloudflare, Inc. (Turnstile): Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework (DPF).

In addition, because we are based in the United States, personal data we receive through booking requests may be accessed and processed in the United States.

Our consent management system (Trustwards) is based in Spain (EU), so consent data is not transferred internationally.

How Long We Keep Your Data

We keep booking requests for as long as we need them to reply to you and plan your event. You can ask us to delete yours at any time.

Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).

Security logs and technical records: 12 months.

Your Rights

If GDPR applies to you (for example, if you are in the EU/EEA, the UK, or Switzerland), you have the right to:

Access your personal data.
Correct inaccurate or incomplete data.
Delete your personal data.
Restrict our processing of your personal data.
Receive a copy of certain personal data you provided to us in a portable format and have it transmitted to another organization where technically feasible.
Object to our processing in certain circumstances.
Withdraw your consent at any time where we rely on consent (this does not affect the lawfulness of processing before you withdrew consent).
Not be subject to automated decision-making or profiling that produces legal effects or similarly significantly affects you.

If CCPA/CPRA applies to you (California consumers), you have the right to:

Know what personal information is collected, used, shared, or sold.
Request deletion of personal information.
Opt out of the sale or sharing of personal information for cross-context behavioral advertising through the right titled “Do Not Sell or Share My Personal Information.”
Correct inaccurate personal information.
Limit the use and disclosure of sensitive personal information.
Not be discriminated against for exercising your privacy rights.

To exercise your rights, contact us at Marty@hipband.us. We may ask for information needed to verify your identity and to understand your request.

Response timing: for GDPR requests, we generally respond within one month. For CCPA/CPRA requests, we respond within 45 days (and may extend by an additional 45 days when permitted, with notice).

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Data Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Breach Notification

We maintain procedures designed to detect, report, and investigate security incidents. If a personal data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and provide information about the nature of the breach, the likely consequences, and the measures taken or proposed to address it. If you suspect a security issue, please contact us at Marty@hipband.us.

How to Lodge a Complaint

If GDPR applies to you, you have the right to lodge a complaint with the competent data protection authority in your jurisdiction.

California consumers may also contact the California Privacy Protection Agency (CPPA) at https://cppa.ca.gov/ or the California Attorney General.

We encourage you to contact us first at Marty@hipband.us so we can try to resolve your concern directly.

Updates to This Policy

We review and update this Privacy Policy periodically. The “Last updated” date at the top of this policy indicates when changes were last made. If we make significant changes, we will provide a notice on the website or, where appropriate, contact you by email. Changes take effect from the date indicated at the top of this policy. Where processing is based on consent, we will request new consent when required.

Contact Us

Email: Marty@hipband.us
Address: Upland, California, United States
Data Controller: Artificially Hip

California Privacy Rights (CCPA/CPRA)

This section applies to California consumers and provides a Notice at Collection and additional details about our practices for the last 12 months.

Categories of personal information we collect:

Identifiers: such as name, email address, and other contact details you provide in a booking request.
Internet or other electronic network activity information: such as IP address and technical information about your interaction with the website and embedded video features when you use them.
Commercial information: details about a requested booking (for example, event date, venue type, and related information you include in your message).

We do not collect special categories of data for GDPR purposes, and our services are not directed at children.

Business or commercial purposes for collecting personal information:

To process and respond to booking requests and communicate with you about a potential engagement.
To host, operate, maintain, and secure the website and booking form, including protecting against spam and abuse.
To provide video content when you choose to play embedded videos.

Sale or sharing of personal information:

We do not sell personal information.
We do not share personal information for cross-context behavioral advertising.

Your CCPA/CPRA rights and how to exercise them:

You may request to know, access, delete, or correct your personal information by contacting Marty@hipband.us. You also have the right to opt out of the sale or sharing of personal information through the right titled “Do Not Sell or Share My Personal Information.” Because we do not sell or share personal information for cross-context behavioral advertising, we do not offer that activity; however, we will still honor valid opt-out requests and signals as described below.

You have the right to limit the use and disclosure of sensitive personal information. We do not use sensitive personal information for purposes that require offering a “Limit the Use of My Sensitive Personal Information” link under CPRA.

Verification of requests:

To protect your information, we will take reasonable steps to verify your request, which may include asking you to confirm access to the email address you used to contact us or that you provided in your booking request. We will only use information provided for verification to verify your identity and complete your request.

Response timing and non-discrimination:

We respond to verifiable consumer requests within 45 days, and we may extend this period by an additional 45 days when permitted, with notice. We do not discriminate against you for exercising your CCPA/CPRA rights.

Global Privacy Control:

We honor Global Privacy Control (GPC) signals as valid opt-out requests for the sale or sharing of personal information.