Privacy policy

Ann Street Studio · Effective October 7, 2026

This Privacy Policy explains how Ann Street Studio ("we," "us," "our") collects, uses, shares, and protects personal data when you visit www.JamieBeck.co (the "Site"), become a member, attend an event or trip, shop with us, or subscribe to our emails (together, the "Services"). We have written it to meet the requirements of the EU and UK General Data Protection Regulations ("GDPR"), the California Consumer Privacy Act as amended ("CCPA"), and the comprehensive privacy laws of other U.S. states, among others.

1. Who We Are

The controller of your personal data is Ann Street Studio, 8 The Green #24954, Dover, Delaware 19901, United States. Privacy questions: kevin@jamiebeck.co

EU and UK representatives. EU and UK representatives are pending as of this publication date and will be updated before the end of 2026.

2. Personal Data We Collect

Information you give us

  • Account and membership: name, email, password, mailing address, phone, membership tier, profile details you choose to share.

  • Purchases: billing and shipping address, order history. Card details are collected and stored by our payment processors, not by us.

  • Events and trips: date of birth, nationality and passport details where needed for travel bookings, emergency contact, travel preferences, dietary requirements, and accessibility needs. Dietary or accessibility details may reveal health information; we collect them only with your consent and only to deliver the experience safely.

  • Communications: messages you send us, survey answers, testimonials, and community posts.

  • Newsletter: email address and the preferences you select.

Information collected automatically

  • Device and log data: IP address, browser type, operating system, referring pages, pages viewed, and dates and times of visits.

  • Approximate location derived from your IP address.

  • Cookie and similar-technology data, including analytics and, with your consent where required, advertising data. See our Cookie Policy.

  • Email engagement: whether you open our emails or click links in them.

Information from others

  • Payment processors (confirmation of payment and fraud signals);

  • Travel and event partners (booking confirmations);

  • Social platforms, if you interact with us there or sign in through them.

3. How We Use Personal Data, and Our Legal Bases

  • To provide the Services (accounts, memberships, orders, shipping, events, trips, customer service). Legal basis: performance of a contract.

  • To process payments, prevent fraud, and keep the Site secure. Legal basis: legitimate interests and legal obligation.

  • To send transactional messages (receipts, renewal reminders, itinerary updates). Legal basis: contract and legal obligation.

  • To send newsletters and marketing. Legal basis: consent, which you can withdraw at any time, or, where permitted, legitimate interests for existing customers about similar offerings.

  • To understand and improve the Site through analytics. Legal basis: consent where required for non-essential cookies; otherwise legitimate interests.

  • To show relevant advertising on other platforms. Legal basis: consent.

  • To handle dietary, health, or accessibility information for events and trips. Legal basis: your explicit consent.

  • To comply with law, enforce our terms, and defend legal claims. Legal basis: legal obligation and legitimate interests.

We do not use personal data for automated decision-making that produces legal or similarly significant effects on you.

4. How We Share Personal Data

We do not sell your personal data for money. We share it only as follows:

  • Service providers who process data on our behalf under contract: website hosting, membership platform, e-commerce and payment processing, email delivery, analytics, customer support, cloud storage, and shipping. Shopify and Ticket Tailor.

  • Event and travel partners such as hotels, venues, transport companies, guides, and caterers, who need your details to deliver a booked experience.

  • Advertising and analytics partners, only with your consent where required. Under some U.S. state laws, this may count as "sharing" for cross-context behavioral advertising or a "sale"; see Section 8 to opt out.

  • Professional advisers such as lawyers, accountants, and insurers.

  • Authorities, when required by law or to protect rights, safety, and property.

  • A successor business, in connection with a merger, acquisition, or sale of assets.

5. International Transfers

We are based in the United States and our providers may process data in the U.S. and other countries. When we transfer personal data from the EU, UK, or Switzerland, we rely on the EU-U.S. Data Privacy Framework (where the recipient is certified), the European Commission's Standard Contractual Clauses and the UK Addendum, or another lawful mechanism. You can request a copy of the relevant safeguards at kevin@jamiebeck.co

6. How Long We Keep Data

We keep personal data only as long as needed for the purposes above:

  • Account and membership data: for the life of your account, plus up to 24 months after closure;

  • Order, payment, and booking records: up to 7 years, for tax and accounting obligations;

  • Health, dietary, and accessibility information: deleted within 90 days after the event or trip ends, unless needed for an incident or claim;

  • Newsletter data: until you unsubscribe, after which we keep only a suppression record so we do not email you again;

  • Analytics data: up to 26 months.

7. Your Rights (EU, UK, and Similar Laws)

Depending on where you live, you may have the right to:

  • access the personal data we hold about you and receive a copy;

  • correct inaccurate data;

  • delete your data;

  • restrict or object to processing, including processing based on legitimate interests and all direct marketing;

  • receive your data in a portable format;

  • withdraw consent at any time, without affecting earlier processing;

  • lodge a complaint with your local data protection authority (in France, the CNIL; in the UK, the ICO).

8. Your U.S. State Privacy Rights

Residents of California and the other U.S. states with comprehensive privacy laws may have the right to:

  • know what personal data we collect, use, disclose, sell, or share, and access a copy;

  • correct inaccurate personal data;

  • delete personal data;

  • opt out of the "sale" or "sharing" of personal data and of targeted advertising;

  • limit the use of sensitive personal data;

  • appeal our decision on a request, by replying to our response or writing to keving@jamiebeck.co with "Appeal" in the subject line; if we deny your appeal, you may contact your state Attorney General;

  • not be discriminated against for exercising these rights.

Opting out. Use the "Your Privacy Choices" or "Do Not Sell or Share My Personal Information" link in the Site footer, or email kevin@jamiebeck.co. We honor Global Privacy Control (GPC) browser signals as a valid opt-out request for the browser or device that sends them.

California disclosures. In the past 12 months we collected these categories of personal information: identifiers; customer records; commercial information; internet and network activity; approximate geolocation; audio or visual information you provide; and sensitive personal information (account login, passport details for travel, and health information you volunteer for events). We collect them from the sources in Section 2, use them for the purposes in Section 3, and disclose them to the recipients in Section 4. We may "share" identifiers and internet activity with advertising partners. We do not knowingly sell or share the personal information of consumers under 16. We use sensitive personal information only for purposes permitted under the CCPA, such as providing the Services you request. Retention periods are in Section 6. California's "Shine the Light" law also lets California residents request information about disclosures for direct marketing; we do not disclose personal information to third parties for their own direct marketing.

Authorized agents. You may use an authorized agent to submit a request. We may ask for proof of the agent's authority and verify your identity directly.

9. How to Make a Request

Email kevin@jamiebeck.co or write to us at the address in Section 1. We will verify your identity, usually by confirming details linked to your account, and respond within the time the law requires (generally one month under the GDPR and 45 days under U.S. state laws, extendable where permitted).

10. Marketing Choices

You can unsubscribe from marketing emails at any time using the link in each email or by contacting us. We will still send transactional messages about your orders, membership, and bookings.

11. Security

We use reasonable administrative, technical, and physical safeguards, including encryption in transit and access controls. No system is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the authorities as the law requires.

12. Children

The Services are not directed to children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

13. Changes

We may update this Privacy Policy. We will post the new version with a new effective date and notify you of material changes by email or on the Site.

14. Contact

Ann Street Studio

8 The Green #24954, Dover, DE 19901, United States

kevin@jamiebeck.co