PRIVACY POLICY

The short version

We collect the minimum we need to send you records and keep scalpers out. We do not sell your data. We do not share it with advertisers. Our internal anti-resale logs live on an encrypted drive in our physical possession, not in the cloud anywhere.

The one thing worth reading carefully is the section on numbered copies, because it explains how a specific record can be traced back to a specific order.

Who we are

Astine Vinyl is an independent record shop specializing in limited-edition exclusive drops for artists across all genres.

If you have questions about this policy or want your data removed, contact us at privacy@astinevinyl.com.

What we collect

If you only sign up for drop notifications:

• Your email address

That's it. We don't ask for a name.

If you place an order:

• Name

• Shipping address

• Billing address

• Email address

• Order contents and order history

• The pressing number assigned to your copy (see below)

• Basic device and transaction information used to verify the order and detect suspicious activity, such as IP address range and order timing patterns

What we never see

Full payment card numbers. Checkout, payment processing, and order management are handled through Shopify and its payment-processing partners. We receive confirmation that a payment succeeded and limited payment and billing information, but we do not receive or store your full card number.

Numbered copies

This is the part most stores don't have, so we want to be direct about it.

Every copy we press is individually numbered. When we pack orders, we record which number went to which order. This means a specific physical record can be matched back to the order that bought it.

Why we do this: it's how we enforce our anti-resale policy. If a copy shows up listed at a markup on a resale site, we can identify the number, match it to the original order, and block that buyer from future drops.

What that blocking involves: we may retain and match against billing address, shipping address, limited payment identifiers provided by Shopify, and the Shopify account used, in order to prevent that buyer from purchasing again.

What it doesn't involve: we don't publish who bought what, we don't share numbering records with anyone, and we don't use this data for marketing, profiling, or anything unrelated to enforcing the resale policy.

If this makes you uncomfortable, that's a fair reaction and you shouldn't order from us. We'd rather tell you upfront than bury it.

Fraud, payment, and identity verification

To protect against fraud, bot orders, and attempts to get around purchase limits, we may verify order details, cross-reference an order against your account and order history, and use the device and transaction information described above to identify suspicious patterns. We may decline, cancel, or hold an order while we do this. This information is used only for verification and enforcement, never for marketing.

How we store it

While standard order data flows through our ecommerce platforms, like Shopify, our specific numbering logs and enforcement records are kept on an encrypted drive under our direct physical control, not synced to any cloud service.

Some data necessarily also exists inside the platforms we use to run the shop. See Third Parties below, and each platform's own policy governs the data it holds.

Third parties

We use a small number of services to operate. Each has its own privacy policy governing data it holds:

• Shopify: checkout, payment processing, order management

• Brevo: sending drop announcements to email subscribers

• Framer: website hosting

• Shipping carriers: delivering your order, which requires sharing your shipping address

• A fulfillment partner, if we use one to pack or ship orders on our behalf, would receive only the name, shipping address, and order contents needed to fulfill that order

Since we are not Facebook or Google, we share with these services only what they need to do their job. We do not sell, rent, or trade your data to anyone, ever. We don't run ads and we don't work with data brokers.

Legal requests

We may be required to disclose information in response to a valid subpoena, court order, or other lawful legal process. If that happens, we will comply only to the extent legally required. We may also retain order and account information beyond the periods described below where necessary to resolve a dispute, respond to a chargeback, or comply with a legal obligation. We don't see why law enforcement would want to subpoena a random record store, but we're putting this here in case it ever happens.

How long we keep things

• Email signups: until you unsubscribe or ask us to delete you.

• Order records: retained for as long as needed for tax, accounting, and warranty or replacement purposes.

• Enforcement records: if an account has been blocked for reselling, we retain the minimum information needed to keep that block effective, on the basis of our legitimate interest in preventing fraud and abuse. See the next section for how this interacts with deletion requests.

Your rights

Depending on where you live, you may have the right to request access to your data, request correction, request deletion, or object to certain processing. To exercise any of these, email privacy@astinevinyl.com and we'll respond as promptly as we can.

One honest caveat: if you have been blocked for reselling, we may retain the minimum identifiers needed to enforce that block even after a deletion request, on the basis of our legitimate interest in preventing fraud and abuse. We will delete other information unless we are required or permitted to retain it for purposes such as tax or accounting obligations, fraud prevention, dispute or chargeback resolution, enforcing legal claims, or complying with applicable law.

Cookies and tracking

Our site and the services we use may use cookies, local storage, and similar technologies that are necessary to operate the site, maintain security, process orders, prevent fraud, remember user preferences, and understand basic site traffic and performance. We do not use these technologies for third-party behavioral advertising, and we do not use signup or order information for cross-site advertising or sell behavioral data. Where applicable law requires consent before a particular non-essential technology may be used, we will obtain that consent before using it.

INTERNATIONAL PRIVACY

Additional rights for EEA, UK, and other applicable users. If privacy law where you live gives you additional rights, those rights apply in addition to the choices described above. Where the EU GDPR, UK GDPR, or similar law applies to our processing, Astine Vinyl LLC acts as the data controller for personal information we determine how and why to process.

Depending on the processing involved, we may process personal information because it is necessary to perform or prepare to perform a contract with you, because we have a legal obligation, because you have given consent, or because we have a legitimate interest in operating and securing our store, preventing fraud and abuse, enforcing purchase restrictions, and protecting our business and customers. Where we rely on legitimate interests, we do so only where those interests are not overridden by your applicable rights and interests.

Where applicable, you may have rights to access, correct, erase, restrict, or object to the processing of your personal information, to receive certain information in a portable format, and to withdraw consent where processing is based on consent. Withdrawing consent does not affect processing that was lawful before withdrawal. You may exercise these rights by contacting privacy@astinevinyl.com.

Our service providers may process personal information in countries other than the country where you live, including the United States. Where applicable law requires safeguards for an international transfer, we and our service providers will rely on an available lawful transfer mechanism.

If applicable privacy law gives you the right to complain to a data-protection authority, you may do so with the appropriate supervisory authority where you live, work, or where you believe a violation occurred. We would appreciate the opportunity to address your concern directly first, but contacting us does not limit that right.

Children

Our site is not directed at children under 13, and we do not knowingly collect personal information from them. You must be at least 18 years old, or the age of majority where you live, to place an order.

Changes to this policy

We may update this policy periodically. We will post the revised version with an updated date at the top. If a change materially affects how we use your personal information, we will provide additional notice where reasonably appropriate or legally required, such as by email or a notice on the site.

Contact

Questions, deletion requests, or anything else: privacy@astinevinyl.com