Privacy Policy

Last Updated: Aug-22-2026

1. Introduction

Welcome to Magic & the Murphys ("we," "our," "us"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit www.magicandthemurphys.com (the "Website") or use our services. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and relevant international regulations.

2. Data We Collect

We collect personal data that you voluntarily provide to us, as well as data gathered automatically when you navigate our Website or interact with our services. This includes:

  • Contact & Identity Data: Name, email address, physical mailing address, and phone number.

  • Travel & Booking Data: Passport details, travel preferences, itinerary notes, and billing preferences submitted for travel planning.

  • E-Commerce & Financial Transactions: Billing name, billing address, transaction history, and encrypted payment details processed through our payment gateways (full credit card numbers are handled securely by PCI-compliant processors).

  • Technical & Usage Data: IP address, browser type, operating system, referring URLs, device identifiers, and website interaction metrics.

  • Social & Community Data: Usernames, handles, public comments, direct messages, and interactions on our social media channels and community spaces.

We only collect categories of data explicitly disclosed in this Privacy Policy. If we intend to collect additional categories of personal data or use your data for materially different purposes, we will update this policy and provide notice accordingly.

3. How We Collect Data

We collect personal data through the following methods:

  • Direct Interactions: When you purchase digital products, complete client intake forms, request travel proposals, subscribe to our newsletters, join our community platforms, or contact us directly.

  • Automated Technologies: Cookies, web beacons, and server logs provided by our web host (Squarespace) and analytics platforms that automatically log device and activity metrics.

  • Third-Party & Social Media Platforms:

  • Travel Services: Data submitted via our travel management platform, Tern Travel.

  • Forms & Surveys: Responses provided via Google Forms.

  • Social Networks & Video Platforms: Interactions, DMs, tags, and comments on our accounts across Instagram, Facebook, Threads, TikTok, YouTube, X (Twitter), LinkedIn, Bluesky, Discord, and Buy Me a Coffee.

4. How We Use Your Data

We process your personal data for the following legitimate business purposes:

  • Service Delivery & Travel Booking: Creating client itineraries, processing travel proposals, managing bookings, and maintaining client accounts.

  • E-Commerce Fulfillment: Processing sales of digital products, managing orders, and delivering transactional receipts.

  • Communication: Sending booking updates, newsletter communications, marketing emails (where opted-in), and responding to inquiries or messages.

  • Analytics & Performance: Monitoring traffic, website engagement, and user trends to optimize our platform and offerings.

  • Legal & Compliance: Fulfilling tax, accounting, and legal requirements, and maintaining business records.

5. Legal Basis for Processing (GDPR Compliance)

If you are located in the European Economic Area (EEA) or United Kingdom (UK), our legal grounds for collecting and using your personal data depend on the context:

  • Consent: When you subscribe to marketing communications, accept non-essential cookies, or voluntarily submit forms.

  • Contractual Performance: When processing data is necessary to fulfill orders for digital products or execute travel itineraries.

  • Legitimate Interests: To analyze website performance, improve customer experience, and protect our services from fraud.

  • Legal Obligation: Where required by law to retain operational or accounting records.

6. Data Sharing & Third-Party Service Providers

We do not sell, rent, or trade your personal data. We share necessary data with trusted service providers who act on our behalf to support our operational activities:

  • Website Hosting & E-Commerce: Squarespace (hosting, order management, domain services) and Stripe (secure credit card processing).

  • Travel Management & Booking: Tern Travel (client CRM and itinerary building).

  • Productivity & Form Management: Google Workspace (Gmail, Drive, Google Forms) for communications, intake surveys, and client documentation.

  • Email Marketing: MailChimp (newsletter management and email campaigns).

  • Analytics: Google Analytics 4 (traffic and usage analysis).

  • Community & Social Media Platforms: Discord (community engagement), Buy Me a Coffee (contributions and memberships), and social platforms (Meta/Instagram/Facebook/Threads, TikTok, YouTube, X/Twitter, LinkedIn, Bluesky).

All service providers are contractually obligated to protect your information and process it only in accordance with our instructions.

7. International Data Transfers

Because we operate internationally, your personal data may be processed, stored, or transferred outside your home country, including to the United States and the EEA.

When transferring personal data originating from the EEA, UK, or Switzerland to countries lacking an adequacy decision, we ensure appropriate safeguards are implemented. This includes relying on standard contractual mechanisms approved by relevant authorities (such as European Commission Standard Contractual Clauses) or transferring data to providers certified under recognized privacy frameworks (such as the EU–U.S. Data Privacy Framework).

8. Data Retention & Security

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law (e.g., tax or financial reporting requirements). We employ industry-standard technical and organizational security measures to protect your data against unauthorized access, loss, or misuse.

9. Your Data Rights

Depending on your location, you may have the following rights regarding your personal data:

  • The right to access, correct, or delete your personal data.

  • The right to restrict or object to our processing of your data.

  • The right to data portability.

  • The right to withdraw consent at any time for consent-based processing (e.g., marketing emails).

To exercise any of these rights, please submit a request to info@magicandthemurphys.com. You also have the right to lodge a complaint with your local data protection supervisory authority.

10. Cookies & Tracking Technologies

We use cookies and similar technologies to support site functionality, analyze traffic, and support marketing activities.

  • Essential Cookies: Required for basic site navigation, security, and checkout features.

  • Analytics & Marketing Cookies: Help us understand user behavior and optimize our content.

Where required by applicable law, non-essential cookies are dropped only with your prior explicit consent. You can manage or update your cookie preferences at any time using our website's cookie settings banner or through your web browser preferences.

11. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our operational practices or legal requirements. Updated versions will be published on this page with a revised "Last Updated" date.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy, please reach out to us at: