GDPR Notice
In short: JMG is the controller of your data. We process it to fulfil purchases and bookings, keep the Site secure and meet tax rules. You can access, correct, delete or move your data at any time by emailing us.
1. Who this notice is for
This notice applies if you're in the European Economic Area (EEA), the United Kingdom or Switzerland. It explains how Juggernaut Multimedia Group LLC handles your personal data under the EU General Data Protection Regulation (GDPR), the UK GDPR and the Swiss Federal Act on Data Protection. It adds to our Privacy Policy, which describes the data we collect in more detail.
2. Data controller
The controller of your personal data is Juggernaut Multimedia Group LLC, 3651 Lindell Rd Suite D1267, Las Vegas, NV 89103, USA. You can contact us about data protection at contact@jmgdigitalmedia.com.
3. What we process and why
The GDPR requires a legal basis for each use of personal data. These are ours:
| Purpose | Data | Legal basis |
|---|---|---|
| Processing and delivering Media Vault purchases, confirming what you own, refunds | Name, email, order contents, payment status, order number | Contract (Art. 6(1)(b)) |
| Answering inquiries and booking requests, and running client projects | Contact details, message content, project details and materials | Steps before a contract and performing it (Art. 6(1)(b)); our legitimate interest in replying to messages (Art. 6(1)(f)) |
| Keeping the Site secure and working (server logs) | IP address, browser, pages requested, time | Legitimate interests in security and reliability (Art. 6(1)(f)) |
| Saving your cart and library in your browser | Cart contents and order numbers, stored on your device | Strictly necessary to provide the service you requested; no consent needed under ePrivacy rules |
| Loading fonts from Google Fonts | IP address, browser information | Legitimate interest in a consistent, readable Site (Art. 6(1)(f)) |
| Preventing fraud and chargebacks, and enforcing our terms and artists' rights | Order, payment and access records | Legitimate interests (Art. 6(1)(f)) |
| Recording your agreement to our terms and your request for immediate delivery | Terms version, time of agreement, order number | Performing our contract with you (Art. 6(1)(b)) and our legitimate interest in being able to show what was agreed (Art. 6(1)(f)) |
| Keeping tax and accounting records | Order and invoice records | Legal obligation (Art. 6(1)(c)) |
| Marketing emails, only if you ask for them | Email address | Consent (Art. 6(1)(a)), which you can withdraw at any time |
Where we rely on legitimate interests, we've weighed them against your rights, and you can object at any time (see Section 7). You don't have to give us personal data, but without it we can't complete a purchase or reply to a message.
4. Cookies and similar technology
The Site sets no cookies of its own and uses no analytics, advertising or tracking tools, so we don't show a cookie banner. The only data stored on your device is your cart and your purchases, which are needed for the Vault to work. Stripe sets its own cookies on its checkout pages to process payments securely and prevent fraud, as described in Stripe's cookie policy.
5. Who receives your data
We use the service providers listed in Section 4 of our Privacy Policy (Stripe, Railway, Hostinger, Google Fonts and the business software we use for client work). They process data for us under written terms that require them to protect it. Stripe also acts as an independent controller for its own fraud-prevention and legal obligations. We don't sell personal data, and we don't use it for profiling or targeted advertising.
6. International transfers
We're based in the United States, and our service providers process data there. When personal data is transferred outside the EEA, the UK or Switzerland, we rely on the provider's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions, where the provider has one, such as Stripe, or on the European Commission's Standard Contractual Clauses, with the UK Addendum where needed. You can ask us for more information about these safeguards.
7. Your rights
You have the right to:
- Access: get a copy of your personal data;
- Rectification: have inaccurate data corrected;
- Erasure: have your data deleted, unless we must keep it, for example for tax records;
- Restriction: have us limit how we use your data;
- Portability: receive data you gave us in a common, machine-readable format;
- Objection: object to processing based on legitimate interests, and to any direct marketing at any time;
- Withdraw consent: where we rely on consent, withdraw it at any time, without affecting earlier processing; and
- Complain: lodge a complaint with the data protection authority where you live or work. In the UK, that's the Information Commissioner's Office (ico.org.uk). We'd appreciate the chance to resolve your concern first.
To use any of these rights, email contact@jmgdigitalmedia.com. We'll answer within one month. That can be extended by two more months for complex requests, and we'll tell you if so. We may ask you to confirm your identity first. Requests are free unless they're clearly unfounded or excessive.
8. How long we keep data
We keep data only as long as we need it for the purposes above. Order and tax records are kept for 7 years. Inquiries are kept for up to 3 years after our last contact. Server logs are kept for a few weeks. Full details are in Section 5 of our Privacy Policy.
9. Automated decisions
We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. Stripe uses automated tools to screen payments for fraud. If a payment is declined and you think it's a mistake, contact us and a person will review it.
10. Security
We use encrypted connections, a PCI-certified payment provider, short-lived signed download links and limited staff access to protect your data. If a personal data breach is likely to put your rights at risk, we'll notify the relevant authority within 72 hours where required, and notify you without undue delay when the risk is high.
11. Changes and contact
We'll post any updates to this notice on this page and change the "Last updated" date. For data protection questions or requests, contact:
Juggernaut Multimedia Group LLC
3651 Lindell Rd Suite D1267, Las Vegas, NV 89103, USA
Email: contact@jmgdigitalmedia.com