Privacy Policy

1. Who We Are and What This Covers

Your Shop Space ("we," "us," "our") is a service of Kinetic Path Media, LLC, a Tennessee limited liability company based in Medina, Tennessee. "Your Shop Space" is a trade name of Kinetic Path Media, LLC.

This Privacy Policy explains what personal information we collect through yourshopspace.com and the Your Shop Space service (the "Service"), how we use it, and your choices. It applies to two groups:

• Customers — the people and businesses who create a Your Shop Space account.
• Site visitors — the people who visit, submit a form on, book, join, or subscribe on a website built by one of our Customers.

For site visitors: when you interact with a Customer's website, that Customer decides what to collect and why. We process that information on the Customer's behalf as their service provider. Direct requests about that data to the Customer whose site you used; we will help the Customer respond.

2. Information We Collect

2.1 From Customers

• Account information: name, email address, password (stored as a hash), and business name and details.
• Billing information: your plan, billing history, and the last four digits and card type of your payment method. Stripe handles full card numbers and never stores them on our systems.
• Content you create: the pages, images, settings, and other material you put into your site.
• Support communications: messages you send us and our replies.
• Usage and device data: log data, IP address, browser and device type, pages viewed, and actions taken in the admin area, used for security, troubleshooting, and product improvement.

2.2 From Site Visitors (processed on the Customer's behalf)

Depending on which tools the Customer has turned on, this can include:

• Form and request submissions (for example, name, email, phone, and message).
• Member accounts on the Customer's site (name, email, hashed password, and any family-member details the visitor adds).
• Class or event bookings and attendance.
• Waiver and consent acceptances, including a dated record of the version accepted.
• Newsletter subscriptions and their confirmed opt-in status.
• Log data and IP address for security and abuse prevention.

2.3 Cookies and local storage

We use a small number of strictly necessary cookies and browser storage to keep you signed in, remember interface preferences, and protect against fraud and abuse. We do not use advertising or cross-site tracking cookies.

3. How We Use Information

We use the information above to:

• provide, operate, maintain, and secure the Service;
• process payments and manage subscriptions;
• provide customer support;
• detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service — including confirming that the Service is not being used for patient care or protected health information (see Section 8);
• understand how the Service is used, in aggregate, to improve it;
• send you service-related messages (billing, security, changes to the Service or policies); and
• comply with law and enforce our agreements.

We do not use site visitors' personal information for our own marketing.

4. We Do Not Sell Your Data

We do not sell, rent, or trade your personal information, or your site visitors' personal information, to third parties. We do not share it with third parties for their own marketing or advertising. We share information only as described in Section 5.

5. When We Share Information

We share information only in these situations:

• Service providers (subprocessors) who help us run the Service, under contracts that require them to protect the information and use it only to provide their service to us:

Provider

Purpose

Data location

Stripe

Payment processing

United States

Amazon Web Services (Amazon SES)

Sending email on your behalf

United States

Cloudflare

DNS, content delivery, security

United States / global edge

Hosting provider

Server and database hosting

United States

• Legal and safety: when required by law, subpoena, or court order, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Your Shop Space, our Customers, or the public.
• Business transfer: If we are involved in a merger, acquisition, financing, or sale of assets, we may transfer information as part of that transaction. We will require the recipient to honor this Policy or give you notice and a choice.

6. How We Protect Information

We protect personal information to the extent required by Tennessee law and using commercially reasonable administrative, technical, and physical safeguards, including:

• encryption of data in transit (HTTPS/TLS);
• passwords stored using one-way hashing;
• encryption at rest of sensitive stored secrets;
• access controls that limit staff access to what is needed for their role; and
• regular backups.

No transmission or storage method is completely secure, and we cannot guarantee absolute security. If we become aware of a security breach affecting your personal information, we will notify you and any authorities as required by the Tennessee Identity Theft Deterrence Act (Tenn. Code Ann. § 47-18-2107) and other applicable law.

7. Data Retention and Deletion

• We retain customer account data while your account is active and for [30] days after it is closed to allow reactivation and data export. After that, we delete it from active systems.
• We retain backups on a rolling [30–90] day cycle and then overwrite them; deleted data persists only in backups until that cycle completes.
• We retain site visitor data for as long as the relevant Customer keeps it, subject to the Customer's own settings and requests, and delete it when the Customer's account is deleted.
• You may request deletion of your account data at any time by contacting us; we will complete it within [30] days, except where we must keep certain records (for example, transaction records for tax purposes).

8. Health Information

The Service is not intended to handle Protected Health Information (PHI) and must not be used for patient care, as described in our Terms of Service. We are not a HIPAA Business Associate. Customers must not submit PHI to the Service. If we identify PHI or patient-care use, we may remove the content and suspend or terminate the account.

9. Children's Information

The Service (the admin/builder side) is for adults operating a business and is not directed to children under 13.

Some Customers use the Service to run programs for minors and to collect information about minors with parental consent (for example, youth classes, family memberships, and parental-consent waivers). Those Customers control that information and are responsible for obtaining any required parental consent and complying with the Children's Online Privacy Protection Act (COPPA) and other applicable law. We provide consent and waiver tools; the legal obligation to use them correctly rests with the Customer.

10. Your Choices and Rights

• Access and correction: you can view and update most account information in your settings, or ask us for a copy.
• Export: Customers can export their site's content and visitor data using the export tools in the admin area. (Pending — see Terms Section 9.)
• Deletion: You can ask us to delete your account and its data (Section 7).
• Marketing email: service messages are required while you have an account; any non-essential email will include an unsubscribe link.
• Site visitors: to access, correct, or delete information held by a Customer's site, contact that Customer. We will assist the Customer in responding.

To make a request, email [email protected]. We may need to verify your identity first.

11. Where Data Is Processed

The Service is intended for businesses located in the United States, and we store and process personal information in the United States. If you access the Service from outside the United States, you consent to that processing.

12. Changes to This Policy

We may update this Policy. If a change is material, we will notify you by email or in-app notice before it takes effect. The "Last updated" date at the top shows the current version.

13. Contact

Your Shop Space, operated by Kinetic Path Media, LLC, 318 W Church Ave, Medina, TN  38355, [email protected].