Privacy Policy

Rainer Willeke Music is a personal music project and online store operated by Rainer Willeke from British Columbia, Canada. The site primarily offers digital music downloads through a WooCommerce-powered store, and may expand to offer physical goods (such as CDs, vinyl, or merchandise) in the future.

When this policy says "we," "us," or "our," it means Rainer Willeke Music. When it says "you" or "your," it means you — the person visiting the site or making a purchase.

When you create an account, place an order, or contact us, you may provide information such as:

• Your name
• Email address
• Billing address (and shipping address, if applicable for future physical goods)
• Phone number, if you choose to provide one
• Account credentials (username and password)
• Any information you include in messages or inquiries sent to us

When you visit the site, certain technical information is collected automatically by our web server and analytics tools, including:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on each page
• Referring URLs (how you found us)
• General geographic location (derived from IP address — not precise location)

Short version: we use your information to run the store, fulfill your orders, and improve the site. We don't sell it, rent it, or use it to build advertising profiles.

We use the information we collect for the following purposes:

• Processing and fulfilling orders — delivering your digital downloads, and (in the future) shipping physical goods
• Providing download access — making sure you can access the music you've purchased through your account
• Sending order confirmations and receipts — transactional emails related to your purchases
• Responding to your inquiries — answering questions, handling support requests, and following up on licensing inquiries
• Improving the site — understanding how visitors use the site so we can make it better over time
• Complying with legal obligations — meeting tax, accounting, and other regulatory requirements under Canadian law

What we will never do:

• We will never sell or rent your personal information to anyone — ever.
• We do not engage in aggressive ad profiling or behavioral tracking. This is a music site, not an advertising platform.

These cookies are necessary for the site and store to function correctly. They include:

• WooCommerce cart cookies — remember what's in your shopping cart as you browse
• Session cookies — maintain your session while you're actively using the site
• Login cookies — keep you logged in if you have an account and choose to stay signed in

We may use analytics tools (such as Google Analytics or similar services) to understand how visitors find and use the site. This data is anonymized and aggregated — it tells us things like which pages are popular and how people navigate the site, but it is not used to build personal advertising profiles about individual visitors.

You can manage or disable cookies through your browser settings. Most browsers allow you to block all cookies, block only third-party cookies, or clear cookies when you close the browser. Please note that disabling essential cookies may affect the store's functionality — for example, your shopping cart may not work properly.

We only share your information with the service providers we need to run the site and process your orders. We never sell or trade it.

We may share your personal information with the following categories of service providers, solely to the extent necessary to operate the site and fulfill your orders:

• Payment processors (Square, PayPal) — to securely process your payments
• Hosting and infrastructure providers — to keep the site running, secure, and available
• Email and communication services — to send order confirmations, receipts, and other transactional notifications

All service providers we work with are bound by confidentiality obligations and are only permitted to use your data for the specific services they provide to us.

We do not sell or trade your personal information. We may disclose personal information if required to do so by law, or if we believe in good faith that such disclosure is necessary to protect our rights, comply with a legal proceeding, or respond to a lawful government request.

We keep your data as long as we need it and as long as the law requires — and no longer than that.

• Order and transaction records are retained for a minimum of seven (7) years in accordance with Canadian tax law requirements.
• Account information is retained for as long as your account remains active.
• Deletion requests: If you ask us to delete your personal information, we will do so promptly — except where we are legally required to retain certain records (such as transaction records for tax purposes). We'll let you know if any such exceptions apply.
• Anonymized and aggregated data (which cannot be used to identify you) may be retained indefinitely for analytical purposes.

We believe everyone deserves control over their personal information, regardless of where you live. That's why we extend the following rights to all visitors, not just those in specific jurisdictions:

• Right to access — You can request a copy of the personal information we hold about you.
• Right to correction — If any of your information is inaccurate or incomplete, you can ask us to correct it.
• Right to deletion — You can request that we delete your personal information, subject to any legal retention requirements (see Section 6).
• Right to data portability — You can request your data in a commonly used, machine-readable format so you can transfer it elsewhere.
• Right to withdraw consent — Where we process your data based on consent, you can withdraw that consent at any time.
• Right to object — You can object to certain types of processing of your personal information.

How to exercise your rights: Simply contact us. We'll respond to your request within a reasonable timeframe and, in any case, within the timeframes required by applicable law.

Right to complain: If you're not satisfied with how we've handled your information or your request, you have the right to lodge a complaint with:

• The Office of the Privacy Commissioner of Canada (for Canadian residents)
• Your local data protection authority (for international visitors)

As a Canadian business, we operate in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Here's a plain-language walkthrough of how we align with the ten fair information principles at the heart of the law:

1. Accountability. Rainer Willeke Music is responsible for all personal information under our control. The buck stops here — if you have a concern, you can reach us directly.
2. Identifying Purposes. We tell you why we're collecting your information before or at the time of collection. No surprises.
3. Consent. We collect your information with your knowledge and consent. Placing an order means you consent to us processing that order. You can withdraw consent at any time for non-essential processing.
4. Limiting Collection. We only collect the information we actually need. We're not in the business of hoarding data.
5. Limiting Use, Disclosure, and Retention. Your information is used only for the purposes we've stated, and we keep it only as long as necessary (or as required by law).
6. Accuracy. We take reasonable steps to keep your information accurate and up to date. You can request corrections at any time.
7. Safeguards. We use appropriate security measures to protect your personal information from unauthorized access, disclosure, or misuse (see Section 10).
8. Openness. This privacy policy is our commitment to transparency. It's publicly available on the site, and we're happy to answer questions about our practices at any time.
9. Individual Access. You have the right to ask what personal information we hold about you and to receive a response within a reasonable timeframe.
10. Challenging Compliance. If you have concerns about how we handle your information, you can contact us directly or reach out to the Office of the Privacy Commissioner of Canada. We take complaints seriously and will investigate and respond in good faith.

While Rainer Willeke Music operates from Canada, we welcome visitors and customers from around the world. Canada has been recognized by the European Commission as providing an adequate level of data protection — which means your data benefits from strong privacy standards even when processed here.

Regardless of where you're located, we extend GDPR-inspired rights to all visitors. These are the same rights outlined in Section 7 above — access, correction, deletion, portability, withdrawal of consent, and the right to object. You don't need to be in the EU to exercise them.

International data transfers: Your personal data is processed and stored in Canada. As noted above, Canada is recognized by the European Commission as providing adequate data protection under its adequacy decision, so your data is handled to a standard consistent with GDPR expectations.

We take the security of your information seriously and use industry-standard measures to protect it.

• SSL/TLS encryption — All data transmitted between your browser and our site is encrypted using SSL/TLS, the same technology used by banks and major online retailers.
• Secure hosting — Our site is hosted on a secure, professionally managed hosting platform.
• PCI DSS-compliant payment processing — Payment card data is handled entirely by our payment processors (PayPal & Square), who maintain the highest levels of payment security certification.

No system is 100% secure, and we can't guarantee absolute security — no one honestly can. But we take reasonable and appropriate measures to protect your information from unauthorized access, alteration, disclosure, or destruction.

In the unlikely event of a data breach that could affect your personal information, we will notify affected individuals and relevant authorities promptly, in accordance with applicable law.

Music is for everyone, and our site is designed to be a welcoming space for fans of all ages. We don't impose hard age gates or require age verification to browse or enjoy the site.

That said, we do not knowingly collect personal information from children under the age of 13. We encourage parents and guardians to be involved when younger visitors are making purchases or creating accounts.

If we learn that we have inadvertently collected personal information from a child under 13 without appropriate parental consent, we will delete that information promptly. If you believe this may have occurred, please contact us.

Our site may contain links to external websites and services, including streaming platforms (such as Spotify, Amazon Music, or Apple Music), social media profiles, and payment processors. These links are provided for your convenience and to help you find our music across different platforms.

We are not responsible for the privacy practices, content, or policies of any third-party sites. Each has its own privacy policy, and we encourage you to review them when you visit those sites. Following a link from our site to a third-party site is at your own discretion.

We may update this Privacy Policy from time to time — for example, to reflect changes in our practices, the services we offer, or applicable laws. When we make changes, we will:

• Post the revised policy on this page with an updated effective date at the top
• For material changes that significantly affect how we handle your personal information, make reasonable efforts to notify you via a prominent notice on the site or by email to account holders

We encourage you to review this policy periodically so you stay informed about how we protect your information.

If you have any questions about this Privacy Policy, want to exercise any of your rights, or just want to get in touch — we'd love to hear from you.

Rainer Willeke Music
Email: [email protected]
Website: rainerwillekemusic.com
Operated by: Rainer Willeke
Location: British Columbia, Canada

For privacy concerns under Canadian law, you may also contact the Office of the Privacy Commissioner of Canada.