Privacy Policy

This Privacy Policy explains how Soneveil (“Soneveil,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you place an order for a bespoke sheet music keepsake through our website. It also describes the rights you have over your personal information and how to exercise them.

Information we collect

We collect only the information needed to fulfil your order and communicate with you about it. This includes your name, email address, and the details of your commission — such as the song title, artist, and wedding date you provide. Payment card details are collected and processed directly by our payment provider; Soneveil never receives or stores your full card number.

How we use your information

We use your personal information to:

• Process your payment and create your order.
• Create and deliver your bespoke arrangement and keepsake.
• Send transactional emails, such as order confirmations and delivery notifications.
• Respond to your questions and provide customer support.
• Meet our legal, tax, and accounting obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

Service providers who process your data

We rely on a small number of trusted service providers (“processors”) to operate Soneveil. Each processes your information only on our instructions and for the purposes described below:

• Stripe — payment processing. Stripe collects and processes your payment details to complete your purchase.
• Supabase — database hosting. Stores your order record and fulfilment status.
• Vercel — website hosting and delivery of our web pages, including your private listener page.
• Google Workspace — transactional email delivery. We send order-related emails from our Google Workspace account.
• Zapier (legacy) — previously used to route order data between systems. Zapier is being retired from our stack and no longer processes new order data, but is listed here for transparency regarding historical orders.

International transfers

Some of our service providers are located in the United States. Where we transfer personal information of customers in the European Union or United Kingdom, we rely on appropriate safeguards, such as the Standard Contractual Clauses, to protect that information.

How long we keep your information

We retain your order information for 12 months following your wedding date, after which it is deleted or anonymised, unless we are required to keep certain records longer to meet legal, tax, or accounting obligations. Your private listener page is permanent unless you ask us to remove it or the underlying order data is deleted.

Your privacy rights

Depending on where you live, you have rights over your personal information. Under the EU/UK GDPR and the California Consumer Privacy Act (CCPA), these include the right to:

• Access — request a copy of the personal information we hold about you.
• Deletion — request that we delete your personal information.
• Portability — receive your personal information in a portable, machine-readable format.

You also have the right to correct inaccurate information, and California residents have the right not to be discriminated against for exercising their privacy rights. We do not sell personal information, so there is no need to opt out of sale.

How to exercise your rights or request deletion

To access, port, correct, or delete your personal information, email us at david@soneveil.com. We will verify your request and respond within the timeframe required by applicable law. There is no charge to exercise your rights.

Refund policy

Every Soneveil keepsake is made to order and crafted uniquely for you. Because of this, all sales are final and we do not offer returns or refunds. If there is a problem with your order, please contact us at david@soneveil.com and we will work with you to make it right on a case-by-case basis.

Data security

We use industry-standard measures to protect your information, including encrypted connections, restricted access to order data, and reputable infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your information at every step.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above. Material changes will be communicated where appropriate.

Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, contact us at david@soneveil.com.