Privacy Policy
At LightWorks, Inc. we are committed to protecting your privacy. This privacy policy (“Policy”) outlines the types of information we gather from you and the personal data you provide when you visit our website, www.marciabrandt.com, and engage with our services.
This Policy establishes a legal agreement between you (“user,” “you,” or “your”) and the operator of this website (“Operator,” “we,” “us,” or “our”). If you are entering into this Policy on behalf of a business or another legal entity, you represent that you have the authority to do so. If you lack such authority or do not agree with the terms outlined in this Policy, we kindly ask that you refrain from accessing the website and utilizing our services. By accessing and using the website and services, you confirm that you have read, understood, and accepted the terms of this Policy. Please note that this Policy does not extend to the practices of third-party companies we do not own or control, nor does it apply to individuals we do not employ or manage.
Collection of Personal Information
You can explore our website and services without revealing your identity. However, to access certain features or services, you may be required to provide personal information, such as your name and email address. We collect and retain any information you voluntarily provide when making a purchase or completing a form on our website.
While you have the option to withhold your personal information, please be aware that this may limit your ability to access certain features of the website. If you have any questions about the information we require, please feel free to contact us.
Use and Processing of Your Collected Information
As both a data controller and a data processor, we handle personal information in compliance with applicable laws, unless specified otherwise in a data processing agreement. We act as a data controller when we request personal information necessary for you to access and use our website and services, determining the purposes and methods for processing your data.
To provide our services or fulfill legal obligations, we may need to collect and utilize certain personal information. If you choose not to provide the requested information, we may be unable to deliver the services you seek. The information we collect may be used for various purposes, including:
- Processing and managing orders
- Delivering products or services
- Sending administrative communications
- Providing marketing and promotional updates
- Notifying you about product and service changes
- Responding to inquiries and providing support
- Requesting user feedback
- Sharing customer testimonials
- Delivering targeted advertising
- Enforcing terms and policies
- Operating and maintaining the website and services.
The processing of your personal information is influenced by your interactions with our website and services, as well as your geographical location. The following conditions may apply:
(a) You have provided consent for specific purposes.
(b) The provision of information is necessary for fulfilling this policy and/or pre-contractual obligations.
(c) Processing is required to comply with a legal obligation.
(d) Processing relates to a task carried out in the public interest or in the exercise of official authority.
(e) Processing is necessary for legitimate interests pursued by us or a third party.
We rely on your consent as the legal basis for collecting and processing your personal information. Under certain legal frameworks, we may process your information until you opt out, without needing to rely on consent or other legal bases. We are happy to clarify the specific legal basis for our processing activities, particularly regarding whether providing personal information is a statutory or contractual requirement.
Payment Processing
For services requiring payment, you may need to provide credit card information or other payment details, which will be used solely for processing your payments. We partner with third-party payment processors (“Payment Processors”) to ensure secure handling of your payment information.
These Payment Processors comply with the latest PCI Security Standards Council protocols, including major brands like Visa, MasterCard, American Express, and Discover. Sensitive data is transmitted over a secure SSL connection and encrypted with digital signatures. Our website adheres to stringent security standards to protect user information. We will share your payment information with Payment Processors only as necessary for processing payments, handling refunds, and addressing related inquiries.
Please note that Payment Processors may collect personal information such as your email address, billing address, credit card details, and bank account number. Their handling of your personal information is governed by their own privacy policies, which may differ from ours. We recommend reviewing their privacy policies for further information.
Disclosure of Information
To fulfill service requests or complete transactions, we may share non-personally identifiable information with trusted partners and service providers (“Service Providers”). These Service Providers assist us in operating the website and delivering services, adhering to privacy policies that align with ours.
Service Providers are permitted to use or disclose your information only as necessary to perform services on our behalf or to meet legal obligations. They receive only the information required for their specific functions and are not authorized to use or disclose this information for their marketing or other purposes.
Retention of Information
We will retain your personal information as long as necessary to fulfill legal obligations, enforce policies, and resolve disputes unless a longer retention period is required by law. We may use aggregated data derived from your personal information even after you update or delete it, as long as it does not identify you. Once the retention period expires, your personal information will be deleted, and rights such as access, erasure, rectification, and data portability will no longer be exercisable.
Transfer of Information
Your data may be transferred and stored in a country different from your own, but we will not transfer your information outside the European Union and the European Economic Area without appropriate safeguards. For details on such transfers, please refer to the relevant sections of this Policy or contact us. We are committed to protecting your personal data and comply with applicable legal standards.
Region-Specific Notices
To respect your privacy, we have implemented additional measures to meet the obligations and rights related to the collection of personal information as mandated by the laws applicable to our users’ regions.
Disclosures for Residents of Australia
If you reside in Australia, you have specific rights regarding your personal information under the Australian Privacy Act 1988. This section outlines your rights and how to exercise them, with terms defined as per the Privacy Act 1988.
(a) Right to Access and Correct: You have the right to access your personal information and request corrections if it is inaccurate, outdated, incomplete, irrelevant, or misleading.
(b) Right to Restrict Processing: You may request to cease or limit the processing of your personal information under certain circumstances, such as disputing its accuracy.
(c) Right to Data Portability: You can request the transfer of your personal information to another service provider or directly to you, if technically feasible.
(d) Right to Not Be Subject to Automated Decision-Making: You have the right to opt out of decisions based solely on automated processing of your personal information, especially if such decisions have significant legal consequences.
(e) Right to Anonymity: You may choose to use a pseudonym or remain anonymous when interacting with us, although specific personal information may be required in certain situations to determine eligibility for services. We will inform you if anonymity is not possible.
Disclosure for Residents of Brazil
If you are a resident of Brazil, you have specific rights regarding your personal information under the Brazilian General Data Protection Law (LGPD). This section outlines your rights and how to exercise them, with terms defined as per the LGPD.
(a) Right to Know and Access: You can verify whether we process your personal information and access it to understand how it is used.
(b) Right to Correct: You may request corrections to any inaccuracies or outdated information in your records.
(c) Right to Anonymize and Block: You can request the anonymization or blocking of personal information that is unnecessary, excessive, or not processed per the LGPD.
(d) Right to Data Portability: You have the right to transfer your data to another service provider, allowing you to choose services without losing your data history.
(e) Right to Delete: If your data was processed based on your consent, you can request its deletion, except where legal obligations require retention.
(f) Right to Information About Third Parties: You can inquire about third parties with whom we share your data, ensuring transparency.
(g) Right to Information on Consent Denial: You have the right to be informed about the implications of not providing consent.
(h) Right to Withdraw Consent: You have the right to withdraw your consent for data processing at any time.
(i) Right to Review Automated Decisions: You may request a review of decisions made solely through automated processing of your data, ensuring fairness and accuracy, especially when significant impacts are involved.
Disclosure for Residents of Canada
If you are a resident of Canada, you have specific rights regarding your personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA). This section outlines your rights and how to exercise them, with terms defined as per PIPEDA.
(a) Right to Access: You can access the personal information we hold about you to review, verify, or correct it.
(b) Right to Correct: We are committed to maintaining the accuracy of your personal information and will promptly correct any inaccuracies you identify.
(c) Right to Withdraw Consent: You may withdraw your consent for the handling of your personal information at any time, subject to legal or contractual limitations.
(d) Right to Complain: You can file a complaint with the Privacy Commissioner of Canada if you believe your personal information is mishandled under PIPEDA.
(e) Right to Challenge Compliance: You can challenge our compliance with PIPEDA regarding the management of your personal information, consent, access requests, and correction responses.
(f) Right to Know About Breaches: You have the right to be notified of any security breach involving your personal information that poses a significant risk of harm.
Rights of EU/EEA and UK Residents
If you reside in the European Union (EU), the European Economic Area (EEA), or the United Kingdom (UK), you have specific rights regarding your data under the General Data Protection Regulation (GDPR) and the UK Data Protection Act (UK DPA). This section summarizes your rights and how to exercise them, with terms defined according to the GDPR and UK DPA.
(a) Right to Withdraw Consent: You can withdraw your consent for processing your data at any time, without affecting the legality of prior processing.
(b) Right to Access: You have the right to inquire if we are processing your data and to receive information about that processing, including a copy of your data.
(c) Right to Rectification: You can verify the accuracy of your data and request corrections or updates, including completing any incomplete data.
(d) Right to Object to Processing: You may object to processing your data if it is based on a legal basis other than consent, providing a reason related to your circumstances.
(e) Right to Restrict Processing: Under certain conditions, you can limit the processing of your data, such as when you contest its accuracy or when processing is unlawful but you oppose erasure.
(f) Right to Erasure: You may request the deletion of your data when it is no longer necessary for its original purpose, you withdraw consent, or the processing is unlawful, with exceptions for legal obligations.
(g) Right to Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable format and request its transfer to another data controller, if feasible.
(h) Right to Lodge a Complaint: You can submit a complaint to a data protection authority regarding our handling of your data. If dissatisfied with our response, you may escalate it to your local authority, applicable when your data is processed by automated means based on consent, a contract, or pre-contractual obligations.
Information for Residents of New Zealand
If you are a resident of New Zealand, you have certain rights concerning your personal information as outlined in the Privacy Act 2025. This section outlines your rights and how to exercise them, with terms defined according to the Privacy Act 2025.
(a) Right to Access: You have the right to access our personal information, allowing you to review and understand the data for transparency and accuracy.
(b) Right to Correction: You may request corrections to your personal information if it is inaccurate or outdated, ensuring its accuracy.
(c) Right to File a Complaint: If you believe your privacy rights have been violated, you have the right to file a complaint with a data protection authority.
(d) Right to Object to Automated Decision-Making: You can object to decisions made solely through automated processing of your personal information that significantly affect you.
(e) Right to Data Portability: Where applicable, you have the right to request the transfer of your personal information to another service provider or directly to you, provided it is technically feasible.
(f) Right to Anonymity and Pseudonymity: You may engage with us without disclosing your identity or by using a pseudonym, allowing you greater flexibility and control over your interactions.
(g) Notification of Data Breaches: In the event of a data breach affecting your privacy, we will promptly inform you and take steps to mitigate any potential consequences.
Information for Residents of the USA
If you live in California, Colorado, Connecticut, Delaware, Iowa, Maryland, Utah, or Virginia, you have certain rights concerning your personal information. We are committed to assisting you in correcting, amending, deleting, or limiting the use of your data. This section outlines your rights under various state laws, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and the Colorado Privacy Act (CPA).
You may submit requests regarding your personal information once per calendar year. Please note that we may not fulfill your request if we cannot verify your identity or if it conflicts with legal obligations.
Your Rights Include:
(a) Right to Know and Access: Request information we have collected about you, including sources and purposes for collection.
(b) Right to Correct: Request corrections to any inaccurate personal information we hold.
(c) Right to Delete: Request the deletion of your personal information.
(d) Right to Opt-Out of Sale and Sharing: Opt-out of the sale of your personal information to third parties.
(e) Right to Limit Use of Sensitive Personal Information: Consent to the use of your sensitive personal information and instruct us to limit its use to necessary services.
(f) Right to Non-Discrimination: Receive services without discrimination for exercising your rights.
(g) Shine the Light: California residents can inquire about how their personal information is shared for direct marketing and opt out of such practices.
To exercise your rights, please contact us using the information provided below. We will make every effort to process your request promptly upon verification.
How to Exercise Your Rights
To exercise your rights, please submit your requests using the contact information provided in this document. We may require identity verification before processing your request, so ensure your submission includes sufficient details to confirm your identity or that of an authorized representative. If an authorized representative is making the request, we may ask for documentation, such as a power of attorney, to verify their authority.
Please provide enough information in your request for us to understand and address it effectively. We cannot fulfill your request or disclose personal information until we have verified your identity or authority and confirmed that the information pertains to you.
Cookies
Our website utilizes cookies to improve your online experience. A cookie is a small text file placed on your device by a web server, allowing us to recognize you during your visits. These cookies are safe and do not execute programs or deliver viruses. Disabling cookies may limit your access to certain features of our site.
We use cookies for security, personalization, functionality, and analytics. You can choose to accept or decline cookies; most browsers accept them by default, but you can adjust your settings to refuse them if preferred. By continuing to navigate our website, you agree to our use of cookies as described in this policy. For questions regarding our cookie practices, please contact us.
Privacy of Children
We are committed to protecting the privacy of minors and do not intentionally collect personal information from anyone under 18. If you are under 18, please do not provide any personal information on our website. If you believe a child under 18 has shared personal information with us, please contact us so we can take appropriate action to remove it.
We encourage parents and guardians to monitor their children’s online activities and instruct them not to share personal information on our website without permission. It is essential for parents to ensure that children understand the importance of not disclosing personal information online without consent.
Do Not Sell My Personal Information
You have the right to opt out of the sale or sharing of your personal information by contacting us. Upon receiving and verifying your request, we will stop selling or sharing your information. Please note that opting out may affect our ability to provide certain services you have signed up for. We reserve the right to decline opt-out requests in specific circumstances permitted by the CCPA, particularly when the sale of personal information is necessary to fulfill legal or contractual obligations.
Links to External Resources
Our website and services may include links to third-party resources that we do not own or manage. Please note that we are not responsible for the privacy practices of these external sites or entities. We recommend exercising caution when navigating away from our website and reviewing the privacy policies of any external resource that may collect your personal information.
Information Security
While we make every effort to safeguard your personal information, please understand that no data transmission over the Internet or wireless network can be completely secure. You acknowledge that (a) there are inherent limitations in the security and privacy of the Internet that are beyond our control; (b) we cannot guarantee the security, integrity, or privacy of any information exchanged between you and our website and services; and (c) such information may be intercepted or modified by unauthorized third parties during transmission, despite our best efforts to protect it.
The security of your personal information is also contingent upon the security of the device you use to communicate with us and the precautions you take to protect your credentials. We encourage you to implement appropriate measures to secure this information.
Data Breach
If we become aware of a security breach affecting our website and services, or if users’ personal information has been exposed to unauthorized third parties due to external incidents such as security breaches or fraudulent activities, we reserve the right to take necessary actions. These actions may include conducting an investigation, reporting the incident, and cooperating with law enforcement agencies. If a data breach occurs, we will make reasonable efforts to notify affected individuals if we believe there is a significant risk of harm or if notification is mandated by law. Notifications may be provided through a notice on our website and via email.
Changes and Amendments
We retain the right to amend this Policy or its terms regarding the website and services at any time at our discretion. When changes are made, we will update the revision date at the bottom of this page. We may also inform you through other means, such as the contact information you have provided.
The updated version of this Policy will take effect immediately upon posting, unless otherwise stated. Your continued use of the website and services following the effective date of the revised Policy (or any other specified action) will signify your acceptance of these changes. However, we will not use your personal information in a materially different way without your consent from what was stated at the time your information was collected.
Acceptance of This Policy
By accessing and utilizing our website and services, as well as providing your information, you confirm that you have read and understood this Policy and agree to its terms and conditions. If you do not agree with any part of this Policy, you are not permitted to access or use the website and services.
Contacting Us
If you have any questions regarding the information we may have about you or if you wish to exercise your rights, please use the following contact information:
Email: lightworksmarciabrandt@gmail.com
We are committed to addressing complaints and disputes promptly and will make every effort to uphold your rights as quickly as possible, in compliance with applicable data protection laws.