Privacy & Cookie Policy

This website is operated by Susan Griesdale, a Canadian composer and publisher. This policy explains what personal information we collect, why, who we share it with, and your rights.

Information we collect

• Orders: your name, email, and (for printed copies) your shipping address, the items you bought, and whether you opted in to updates.
• Contact form: your name, email and message.
• Payments: card details are entered directly with Stripe and never reach our servers.

How we use it

To process and deliver orders, provide re-downloadable files, stamp a personal license note on purchased PDFs, and answer your messages. We do not sell your information.

Who we share it with

• Stripe — payment processing and fraud prevention.
• Our hosting and email providers — to store orders and send order and contact emails.
• YouTube (Google) — only if you play a video or allow Marketing / Embeds.

Cookies and similar storage

Necessary (always on):

• sg-cart-v1 (this site, local storage) — your cart contents; kept until you check out or clear your browser.
• sg-consent-v1 (this site, local storage) — your cookie choices and when you made them; kept until you change them or clear your browser.
• Stripe cookies (e.g. __stripe_mid, __stripe_sid) — set only on the checkout page for secure payment and fraud prevention; up to one year.

Analytics: this site currently uses no analytics tool. If one is added, it will load only with your consent.

Marketing / Embeds: YouTube videos are shown as a still image with a play button. YouTube's player and its cookies load only when you click play or allow this category. YouTube's cookies can last up to two years; see Google's privacy policy.

You can change your choices anytime: Cookie Settings.

How long we keep data

Order records are kept for seven years for tax and accounting purposes, and so you can keep re-downloading your purchases. Contact messages are kept only as long as needed to answer you.

Your rights

Under Canadian privacy law (PIPEDA) and, where applicable, other laws such as the GDPR, you may ask to access, correct or delete your personal information, or withdraw consent (including to cookies) at any time. Email sgriesdale@rogers.com and we'll respond within 30 days. You may also complain to the Office of the Privacy Commissioner of Canada.