Privacy Policy

Effective date: August 31, 2026

Christmas Story Tree SD ("we," "us," or "our") operates the Christmas Story Tree store and related event-registration services. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our store, register for an event, or contact us.

1. Information We Collect

Depending on how you interact with us, we may collect:

• Contact information: name, email address, phone number, and other contact details.

• Registration information: attendee names, event selections, attendance details, and information needed to organize or provide an event.

• Order and billing information: products or registrations purchased, transaction details, billing address, shipping address when applicable, and order history.

• Communications: messages, questions, requests, and information you provide when contacting us.

• Technical information: IP address, browser type, device information, and information about how you use the store, where collected through cookies or similar technologies.

Payment-card details may be processed directly by our payment providers. We generally do not receive or store complete payment-card numbers.

2. How We Use Personal Information

We may use personal information to:

• Process event registrations and fulfill purchases.

• Communicate with you about your order, registration, attendee information, schedule changes, and event instructions.

• Provide updates about current and upcoming events when you have requested or consented to receive them, where required.

• Respond to questions and provide customer service.

• Maintain attendee lists and coordinate event operations.

• Process payments, prevent fraud, and protect the security of our store.

• Improve our store, events, services, and customer experience.

• Comply with legal obligations and enforce our terms.

We do not use attendee information for unrelated marketing purposes unless we have an appropriate legal basis and, where required, your consent.

3. How We Share Personal Information

We may share personal information with service providers that help us operate the business, such as:

• Payment processors and transaction providers.

• E-commerce, hosting, website, email, and customer-communication providers.

• Event and registration service providers.

• Fraud-prevention, security, analytics, and technical-support providers.

• Professional advisers, government authorities, or other parties when required by law or necessary to protect rights, safety, or property.

We do not sell personal information for money. Before publishing this policy, confirm whether any advertising, analytics, or other technology provider treats personal information as a “sale” or “sharing” under California law.

4. Marketing Communications

We may send service messages related to your purchase or registration, such as confirmations, attendee-list requests, schedule updates, and event instructions.

We may also send information about current or upcoming events where permitted by law and where you have provided the required consent. You can unsubscribe from marketing emails by using the unsubscribe link in the message or contacting us at storytreesd@gmail.com .

Unsubscribing from marketing messages will not stop essential transactional or service communications about an order or registration.

5. Cookies and Similar Technologies

Our store may use cookies and similar technologies to keep the store working, remember preferences, understand store usage, and support security or analytics. You can adjust cookie controls through your browser settings. Some store features may not work properly if certain cookies are disabled.

If we use non-essential analytics or advertising cookies, we should provide any disclosures and consent controls required by applicable law.

6. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including completing transactions, providing event services, maintaining business and tax records, resolving disputes, preventing fraud, and complying with legal obligations.

Our actual retention periods may vary depending on the type of information and the reason it was collected. We securely delete or de-identify information when it is no longer needed, unless a longer period is legally required.

7. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. California Privacy Rights

Because we are located in California, California residents may have rights under the California Consumer Privacy Act, as amended, depending on whether and how the law applies to our business. These rights may include the right to:

• Know about personal information collected, used, disclosed, or sold.

• Request access to certain personal information.

• Request correction of inaccurate personal information.

• Request deletion of personal information, subject to legal exceptions.

• Opt out of the sale or sharing of personal information, if applicable.

• Limit certain uses of sensitive personal information, if applicable.

• Receive equal service and price when exercising privacy rights.

To submit a privacy request, email storytreesd@gmail.com with the subject line Privacy Request. We may need to verify your identity before completing a request. We will respond within the period required by applicable law and may explain when a legal exception applies.

If you are submitting a request for an attendee, we may ask you to confirm that you are authorized to act for that person.

9. Children's Privacy

Our services are intended for adults making event registrations or purchases. We do not knowingly collect personal information directly from children under 13 without legally required parental or guardian consent.

If an event involves children, registration and attendee information should be provided by a parent, guardian, or authorized adult. If you believe a child provided personal information directly to us without appropriate consent, contact us at storytreesd@gmail.com so we can review and delete it when required.

10. Third-Party Links and Services

Our store may contain links to websites or services operated by third parties. Their privacy practices are governed by their own policies, not this one. We encourage you to review the privacy policies of any third-party service you use.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the effective date above and post the revised policy on our store. Material changes may be communicated through the store or by email when appropriate.

12. Contact Us

For privacy questions or requests, contact:

Christmas Story Tree SD
La Mesa, California, United States
Email: storytreesd@gmail.com