PRIVACY POLICY

The short version

We collect the minimum we need to send you records and keep scalpers out. We do not sell your data. We do not share it with advertisers.

Who we are

Astine Vinyl is operated by Astine Vinyl LLC, an Arizona limited liability company. We are an independent record shop specializing in limited-edition exclusive drops for artists across all genres.

In this policy, “Astine,” “Astine Vinyl,” “we,” “us,” and “our” mean Astine Vinyl LLC.

If you have questions about this policy or want to exercise a privacy right, contact us at privacy@astinevinyl.com.

What we collect

If you only sign up for drop notifications:

We ask you for:

• Your email address

We do not ask you to provide a name just to receive drop notifications.

Our website and service providers may also automatically process limited technical information when you use the site, such as your IP address, browser or device information, timestamps, and basic website activity. This information may be used to operate and secure the site, prevent abuse, and understand basic site performance.

If you place an order:

We may collect or receive:

• Name

• Shipping address

• Billing address

• Email address

• Order contents and order history

• Limited payment and transaction information

• IP address

• Basic device, account, and transaction information

• Order timing and purchasing patterns used to verify orders, prevent fraud, enforce purchase limits, and identify suspicious activity

We try to collect and retain only the information reasonably necessary to operate Astine, fulfill orders, comply with our legal obligations, and protect our store and customers.

PAYMENT INFORMATION

Payments and checkout are handled through Shopify and its payment-processing partners. Astine does not receive or store your full payment card number.

We may receive limited payment-related information needed to process and manage an order, such as payment status, billing information, payment method type, transaction identifiers, and information used for fraud prevention or dispute resolution.

Fraud, payment, and order verification

To protect Astine and our customers against fraud, bot orders, unauthorized transactions, and attempts to circumvent purchase limits or our resale restrictions, we may use information associated with an order to verify whether the order complies with our Terms of Service.

This may include comparing information across accounts, orders, shipping or billing information, transaction history, device or network information, and purchasing patterns. We may also receive fraud or risk information from Shopify, payment processors, or other service providers involved in processing an order.

We may decline, hold, or cancel an order while conducting this review where permitted by our Terms of Service and applicable law.

Information used for fraud prevention and purchasing-rule enforcement is not used by Astine for behavioral advertising.

SERVICE PROVIDERS & THIRD PARTIES

We use a limited number of service providers to operate Astine. They may process personal information on our behalf or as otherwise described in their own privacy policies where necessary to provide their services.

These currently include:

• Shopify: checkout, payment processing, fraud prevention, and order management

• Brevo: sending drop announcements and managing email subscriptions

• Framer: hosting and operating our website

• Shipping carriers: receiving the information necessary to deliver your order

• Fulfillment partners: if we use a fulfillment partner to pack or ship an order, it may receive information such as your name, shipping address, and order contents as necessary to fulfill that order

We may also disclose information where necessary to prevent fraud, protect our legal rights, resolve payment disputes, comply with law, or complete a transaction you requested.

We do not sell or rent your personal information. We do not share your personal information with third parties for behavioral advertising, and we do not work with data brokers to monetize your information.

We don't have the $5 billion that Facebook had to pay when the Federal Trade Commission caught it monetizing users' information through targeted advertising, so we're going to stick with selling records. That's complicated enough.

Legal requests

We may be required to disclose information in response to a valid subpoena, court order, or other lawful legal process. If that happens, we will comply only to the extent legally required. We may also retain order and account information beyond the periods described below where necessary to resolve a dispute, respond to a chargeback, or comply with a legal obligation. We don't see why law enforcement would want to subpoena a random record store, but we're putting this here in case it ever happens.

How long we keep things

We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including where we need it to operate Astine, fulfill orders, maintain appropriate business and tax records, resolve disputes, prevent fraud or abuse, enforce our Terms of Service, or comply with applicable law.

In general:

• Email subscriptions: retained until you unsubscribe, ask us to delete the information, or we discontinue the mailing list, subject to limited records we may need to maintain to honor an unsubscribe request.

• Order records: retained for as long as reasonably necessary for fulfillment, customer service, tax, accounting, warranty or replacement purposes, dispute resolution, and other legitimate business or legal requirements.

• Fraud and enforcement records: where an account or purchaser has been restricted for fraud, abuse, circumventing purchase limits, or violating our resale restrictions, we may retain the minimum information reasonably necessary to maintain that restriction and prevent circumvention, where permitted by applicable law.

We may retain particular information for a longer period when reasonably necessary to establish, exercise, or defend legal claims, resolve a chargeback or other dispute, investigate suspected fraud, or comply with a legal obligation (again, you would think law enforcement would serve orders to your phone carrier, social media apps you use, or anything else OTHER than a record store. We're still required to tell you this, though).

Your rights

Depending on where you live (including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and Washington… whew, that's a mouthful), you may have additional rights concerning your personal information under applicable state privacy law.

These rights vary by state and may include rights to request access to, correction of, or deletion of your personal information; obtain a copy of certain personal information; or opt out of certain processing where applicable.

You can make a privacy request by emailing privacy@astinevinyl.com. We may need to verify your identity before completing certain requests. We will respond within the time required by applicable law.

One honest caveat: if you have been blocked for reselling, we may retain the minimum identifiers needed to enforce that block even after a deletion request, on the basis of our legitimate interest in preventing fraud and abuse. We will delete other information unless we are required or permitted to retain it for purposes such as tax or accounting obligations, fraud prevention, dispute or chargeback resolution, enforcing legal claims, or complying with applicable law.

Cookies and tracking

Our site and the services we use may use cookies, local storage, and similar technologies that are necessary to operate the site, maintain security, process orders, prevent fraud, remember user preferences, and understand basic site traffic and performance. We do not use these technologies for third-party behavioral advertising, and we do not use signup or order information for cross-site advertising or sell behavioral data. Where applicable law requires consent before a particular non-essential technology may be used, we will obtain that consent before using it.

Security

We use reasonable administrative, technical, and organizational measures intended to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

No website, database, or method of transmitting information over the internet can be guaranteed to be completely secure. We therefore cannot promise absolute security, but we take the protection of the information entrusted to us seriously.

If we become aware of a security incident involving personal information, we will investigate and provide any notices required by applicable law.

INTERNATIONAL PRIVACY

Additional rights for EEA, UK, and other applicable users. If privacy law where you live gives you additional rights, those rights apply in addition to the choices described above. Where the EU GDPR, UK GDPR, or similar law applies to our processing, Astine Vinyl LLC acts as the data controller for personal information we determine how and why to process.

Depending on the processing involved, we may process personal information because it is necessary to perform or prepare to perform a contract with you, because we have a legal obligation, because you have given consent, or because we have a legitimate interest in operating and securing our store, preventing fraud and abuse, enforcing purchase restrictions, and protecting our business and customers. Where we rely on legitimate interests, we do so only where those interests are not overridden by your applicable rights and interests.

Where applicable, you may have rights to access, correct, erase, restrict, or object to the processing of your personal information, to receive certain information in a portable format, and to withdraw consent where processing is based on consent. Withdrawing consent does not affect processing that was lawful before withdrawal. You may exercise these rights by contacting privacy@astinevinyl.com.

Our service providers may process personal information in countries other than the country where you live, including the United States. Where applicable law requires safeguards for an international transfer, we and our service providers will rely on an available lawful transfer mechanism.

If applicable privacy law gives you the right to complain to a data-protection authority, you may do so with the appropriate supervisory authority where you live, work, or where you believe a violation occurred. We would appreciate the opportunity to address your concern directly first, but contacting us does not limit that right.

Children

Our site is not directed at children under 13, and we do not knowingly collect personal information from them. You must be at least 18 years old, or the age of majority where you live, to place an order.

Changes to this policy

We may update this policy periodically. We will post the revised version with an updated date at the top. If a change materially affects how we use your personal information, we will provide additional notice where reasonably appropriate or legally required, such as by email or a notice on the site.

Contact

Questions, deletion requests, or anything else: privacy@astinevinyl.com