Privacy policy

Last updated: April 21, 2026

1. Introduction

This Privacy Policy explains how LITTLE BIG FAMILY, LLC ("we," "us," "our," or "the Organization"), a California limited liability company registered under EIN 92-2367967, collects, uses, and protects your personal information when you visit https://shop.littlebig.band (the "Website") or make a purchase.

By using the Website, you agree to the practices described in this Policy. If you do not agree, please stop using the Website.

2. Definitions

• Personal Data — any information relating to an identified or identifiable natural person.
• Processing — any operation performed on personal data (collection, storage, use, disclosure, deletion, etc.).
• User / You — any person who accesses or uses the Website.
• Cookies — small text files stored on your device by the Website.

3. What Data We Collect

3.1 Data you provide directly

When you register, place an order, or contact us, we collect:

• First and last name
• Email address
• Phone number
• Shipping and billing address
• Order details

3.2 Payment data

Payments are processed by third-party providers (Stripe and PayPal). We do not store your full credit card number or CVV on our servers.

3.3 Data collected automatically

• IP address
• Browser type and version
• Device information
• Date and time of visit
• Pages viewed and actions taken on the Website
• Referring website

3.4 Cookies

We use cookies and similar technologies for essential site functionality, analytics, and marketing. You can manage your cookie preferences through the cookie banner or your browser settings. Blocking cookies may limit some Website functionality.

4. How We Use Your Data

We process your personal data for the following purposes:

You can withdraw consent to marketing at any time by clicking "unsubscribe" in any email or contacting us at shop@littlebig.band.

5. Who We Share Data With

We share data only with trusted third parties who help us operate the business:

• Payment processors: Stripe, PayPal
• Email marketing: Mailchimp
• Shipping carriers: postal services and couriers fulfilling your order
• Government authorities: when required by law, court order, or legal process

We do not sell or rent your personal data to third parties. Under the CCPA/CPRA, we do not "sell" or "share" personal information as those terms are defined.

6. International Data Transfers

Because we operate from the United States and our customers are worldwide, your data may be transferred to and processed in the U.S. or other countries. For transfers from the EU, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) where required.

7. Data Retention

We keep your personal data only as long as necessary for the purposes described in this Policy:

• Order and transaction records: up to 7 years (for tax and accounting purposes)
• Marketing data: until you unsubscribe
• Website analytics: typically up to 26 months

8. Your Rights

Depending on where you live, you have the following rights regarding your personal data:

For all users

• Access — request a copy of the data we hold about you
• Correction — ask us to fix inaccurate data
• Deletion — ask us to delete your data
• Withdraw consent — opt out of marketing at any time

Additional rights under GDPR (EU/UK residents)

• Restriction of processing
• Data portability (receive your data in a machine-readable format)
• Object to processing based on legitimate interest
• Lodge a complaint with your local data protection authority

Additional rights under CCPA/CPRA (California residents)

• Right to know what personal information we collect and how we use it
• Right to delete personal information
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information (note: we do not sell or share)
• Right to limit use of sensitive personal information
• Right to non-discrimination for exercising your rights

To exercise any of these rights, email shop@littlebig.band. We will respond within 30 days (GDPR) or 45 days (CCPA). Verification of identity may be required.

9. Data Security

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. However, no method of transmission over the Internet is 100% secure. In the event of a data breach affecting your rights, we will notify you and the relevant authorities as required by law.

10. Children's Privacy

The Website is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Third-Party Links

The Website may contain links to external sites. This Policy does not apply to those sites, and we are not responsible for their privacy practices.

12. Changes to This Policy

We may update this Policy from time to time. The "Last updated" date at the top indicates when it was last revised. Significant changes will be communicated via the Website or email. Continued use of the Website after changes means you accept the updated Policy.

13. Governing Law and Disputes

This Policy is governed by the laws of the State of California, USA. Before initiating legal action, parties agree to attempt to resolve disputes through written notice, with a response period of 14 business days. Unresolved disputes will be handled by the competent courts of California, USA, except where mandatory consumer protection laws in your country of residence grant you the right to pursue claims in your local courts.

14. Contact Us

For any questions, requests, or complaints about this Privacy Policy or your personal data:

LITTLE BIG FAMILY, LLC 
Email: shop@littlebig.band