Privacy Policy

1. Introduction

Welcome to Sunburnt Podcast ("we," "our," or "us"). This Privacy Policy explains how Electric OBrien LLC collects, uses, and protects your information when you visit our website, listen to our podcast, or interact with our services.

By using our website and services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information You Provide

• Contact information when you reach out to us
• Email addresses for newsletter subscriptions
• Comments or feedback you submit
• Information for event ticket purchases

Information Automatically Collected

• IP address and location data
• Browser type and version
• Device information
• Pages visited and time spent on our site
• Referring websites

3. How We Use Your Information

We use collected information to:

• Provide and maintain our website and services
• Send newsletters and updates about new episodes
• Respond to your inquiries and provide customer support
• Analyze website usage to improve our content and user experience
• Promote live shows and events
• Comply with legal obligations

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and analyze website usage. You can control these through our cookie consent banner and settings.

Types of Cookies We Use

Managing Your Cookie Preferences

You can manage your cookie preferences at any time by:

• Using our cookie consent banner when you first visit
• Clicking "Cookie Settings" in our website footer
• Visiting our Cookie Policy page
• Adjusting your browser settings to block or delete cookies

5. Third-Party Services and Data Sharing

Our website integrates with various third-party services. Your consent choices control how data is shared with these services:

Analytics and Measurement

• Google Analytics 4: Website traffic analysis and user behavior insights (requires analytics consent)
• Google Consent Mode v2: Privacy-compliant measurement that respects your consent choices
• Facebook Pixel: Ad performance measurement and audience building (requires marketing consent)

Podcast Platforms

• Spotify: When you click our Spotify links, you're subject to Spotify's privacy policy
• Apple Podcasts: Apple's privacy policy applies when using their platform
• YouTube: YouTube may collect data when you watch embedded videos

Social Media Platforms

• Instagram, TikTok, Facebook: These platforms have their own privacy policies
• Social media plugins may track your interactions (controlled by marketing consent)
• Sharing buttons and embedded content may load tracking pixels

Data Processing Locations

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs) for EU data transfers
• Adequacy decisions where applicable
• Additional security measures for cross-border data flows

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information in these situations:

• With service providers who help us operate our website and services
• When required by law or to protect our rights
• In connection with a business transfer or merger
• With your explicit consent

7. Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to processing of your personal information
• Request data portability
• Withdraw consent where processing is based on consent

8. Privacy Law Compliance (2025)

We comply with current privacy regulations worldwide, including recent 2025 updates:

GDPR (EU/UK) Compliance

• Lawful basis: Consent for marketing/analytics, legitimate interest for necessary operations
• Consent requirements: Explicit, informed, and freely given consent through our cookie banner
• Data subject rights: Access, rectification, erasure, portability, restriction, and objection
• Data retention: Personal data deleted when no longer necessary for original purpose
• Breach notification: Authorities notified within 72 hours of discovery

CCPA/CPRA (California) Compliance

• Right to know: What personal information we collect and how we use it
• Right to delete: Request deletion of your personal information
• Right to opt-out: "Do Not Sell or Share" your personal information
• Right to non-discrimination: Equal service regardless of privacy choices
• Sensitive personal information: Additional protections for sensitive data categories

US State Privacy Laws (2025)

We comply with privacy laws in all US states, including new 2025 requirements in:

• Maryland (MODPA): Data minimization and algorithmic impact assessments
• New Jersey (NJDPA): Enhanced protections for sensitive data including immigration status
• Tennessee (TIPA): Consumer rights with 60-day cure period for violations
• And 5 additional states: Montana, Utah, Iowa, Indiana, and others with similar requirements

International Compliance

• Switzerland FADP: Explicit consent for non-essential cookies
• Canada PIPEDA: Consent and data protection requirements
• Brazil LGPD: Data protection and consent management
• Other jurisdictions: We adapt to local privacy requirements as needed

9. Data Retention and Deletion

We retain personal information only as long as necessary for the purposes outlined in this policy:

• Website analytics: Google Analytics data is automatically deleted after 26 months
• Cookie consent records: Retained for 3 years to demonstrate compliance
• Contact information: Deleted when no longer needed for the original purpose
• Marketing data: Removed immediately when you opt out or withdraw consent
• Legal obligations: Some data may be retained longer if required by law

You can request deletion of your personal information at any time by contacting us or using the privacy rights links below.

10. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information during such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Your Privacy Rights

Depending on your location, you may have additional privacy rights:

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: