Privacy Policy

Effective Date: January 1, 2026
Last Updated: May 4, 2026

This Privacy Policy describes how Vinyl Palace (“we,” “us,” “our”) collects, uses, and shares information about you when you visit vinylpalace.net (the “Site”), interact with our advertisements, or sign up for our updates.

Quick summary: We collect data to market music to people who are likely to enjoy it. We use Meta and Google to advertise. We email fans who sign up. We honor opt-out requests, including the Global Privacy Control browser signal. You can opt out at any time through our Privacy Portal or by emailing info@vinylpalace.net.

1. Information We Collect

1.1 Information you provide directly

  • Email address when you join the fan list, sign up for pre-saves, or contact us
  • Phone number when you opt in to SMS updates (optional — only if you provide it and check the consent box; SMS program is currently inactive but may launch in the future)
  • Any free-text content you send us in messages or form submissions

1.2 Information collected automatically

When you visit the Site, we and our service providers automatically collect:

  • Device and browser information: IP address, browser type and version, operating system, device type, screen size, language preference
  • Usage information: pages visited, time on page, links clicked, referring site, UTM parameters
  • Cookies and similar identifiers: see our Cookie Policy for the full list

1.3 Information from third parties

  • Streaming platform OAuth data when you authorize Spotify or Apple Music for pre-saves: your account ID, display name, and the limited permissions you grant. We do not see your password.
  • Advertising platform data from Meta when you click an ad targeting you: campaign and ad creative identifiers, click attribution data
  • Geographic location at the country level, derived from your IP address by our CDN provider (Cloudflare)

1.4 Information we do not collect

We do not knowingly collect: government-issued ID numbers, financial account information, precise GPS location, biometric data, or information from children under 13.

2. How We Use Information

We use information for the following purposes:

  • Advertising: We use the Meta Pixel and Conversions API to measure which ads lead to streams, follows, and fan-list signups. We share visitor data with Meta to build Lookalike Audiences and Custom Audiences for ad targeting.
  • Email marketing: When you sign up to the fan list, we add you to our marketing list and send updates about releases, shows, and merchandise.
  • SMS marketing (when active): If our SMS program is active and you have opted in, we send text updates about new music, shows, and merchandise. The program is currently inactive.
  • Site analytics: We use Google Analytics to understand which pages perform well.
  • Promotion measurement: We track clicks from our smart links to streaming services to measure campaign performance per platform.
  • Site operations: We use server logs and basic visitor data to operate the Site, prevent abuse, and fix bugs.

Lawful basis under GDPR (for EU/UK/Switzerland visitors): advertising and analytics are based on legitimate interest with a right to opt out. Email and SMS marketing are based on your express consent (opt-in). Site operations are based on legitimate interest.

Business purpose under CCPA (for California residents): advertising and analytics fall under “marketing/advertising”; site operations fall under “security/operations.”

We do not use your information for: profiling that produces legal effects, automated decision-making, or sale to data brokers.

3. SMS Marketing Terms

This section describes the terms of our SMS program. The program is currently inactive. If and when it launches, the following terms apply to anyone who opts in.

By providing your mobile number and checking the SMS consent box on our fan list form, you expressly consent to receive recurring marketing text messages from Vinyl Palace Music sent via an automated system.

  • Frequency: Up to 4 messages per month
  • Cost: Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.
  • Opt out: Reply STOP to any message to unsubscribe. You will receive one final confirmation message.
  • Help: Reply HELP for support, or email info@vinylpalace.net.

Consent is not a condition of any purchase. You may unsubscribe at any time without losing access to any service or content.

Eligibility: SMS marketing is available to US recipients only. You must be 18 or older to consent.

4. Email Marketing

When you submit your email through the fan list form, you consent to receive marketing emails from us. Each email contains an unsubscribe link in the footer. You can also unsubscribe by emailing info@vinylpalace.net with “unsubscribe” in the subject line.

5. Cookies and Tracking Technologies

We use cookies, web beacons, the Meta Pixel, and similar technologies to recognize your browser, measure performance, and personalize advertising.

For our complete cookie disclosure, see our Cookie Policy.

You can manage tracking through:

  • Our Privacy Portal: https://vinylpalace.net/privacy-policy/privacy-portal/ — opt out of advertising tracking with one click
  • Global Privacy Control (GPC): We honor the GPC browser signal automatically. If your browser sends Sec-GPC: 1, we treat it as an opt-out of all non-essential tracking, with no further action required from you.
  • Your browser settings: Most browsers let you block or delete cookies. Disabling cookies may break some features.

Third-party opt-outs:

6. How We Share Information

We share information in the following circumstances. We do not sell your information for monetary consideration.

6.1 Service providers

ProviderPurposeData shared
Meta PlatformsAd targeting and measurementIP, browser data, page views, click events, hashed email if available
Google LLCAnalytics; ad measurement if Google Ads is configuredIP, browser data, page views
CloudflareCDN, DDoS protectionIP, request metadata
Twilio (when active)SMS deliveryPhone number, message content
Mailchimp / Effort LabsEmail deliveryEmail address, name if provided
Spotify, Apple MusicPre-save authorizationYour platform account ID and permissions you grant
Web hosting providerSite hostingServer logs including IP

Privacy policies of major service providers:

6.2 “Sharing” under CCPA

Under California law, our use of advertising cookies and the Meta Pixel is considered “sharing” of personal information for cross-context behavioral advertising. You have the right to opt out of this sharing, and we honor opt-out requests including via the Global Privacy Control signal. See our Privacy Portal: https://vinylpalace.net/privacy-policy/privacy-portal/.

6.3 Legal disclosures

We may disclose information when required by subpoena, court order, or other legal process, or when we believe disclosure is necessary to protect our rights, prevent fraud, or address a security incident.

6.4 Business transfers

If we sell, merge, or transfer our music business, your information may be transferred to the acquiring party as a business asset. The acquiring party must honor this Privacy Policy with respect to your information.

7. International Data Transfers

We are based in the United States. If you visit our Site from outside the US, your information will be transferred to and processed in the US, where data protection laws may differ from those in your jurisdiction. By using the Site, you consent to this transfer.

For visitors in the European Economic Area, United Kingdom, and Switzerland: we rely on the European Commission’s Standard Contractual Clauses (where applicable) and our service providers’ own transfer mechanisms. Most major providers we use — Meta, Google, Cloudflare, Twilio, Mailchimp — are participants in the EU-US Data Privacy Framework or have approved SCCs in place.

8. Data Retention

We retain personal information for as long as needed to provide services and for the purposes described in this policy, then delete or anonymize it.

Data typeRetention period
Email addresses on fan listUntil you unsubscribe, then 24 months on a suppression list to prevent re-subscription
Phone numbers on SMS listUntil STOP, then 24 months on a suppression list
Page view and click records24 months
Consent decisions (audit log)36 months from decision
Server logs90 days
OAuth tokens (Spotify/Apple Music)Until you revoke access or 24 months of inactivity

9. Your Privacy Rights

9.1 Rights for all visitors

  • Access: Request a copy of the personal information we hold about you
  • Correction: Ask us to correct inaccurate information
  • Deletion: Ask us to delete your information (we may retain some information for legal or operational reasons)
  • Opt out of marketing: Use the unsubscribe link in any email, reply STOP to any text, or use our Privacy Portal
  • Opt out of advertising tracking: Use our Privacy Portal or send a Global Privacy Control signal from your browser

To exercise any right, email info@vinylpalace.net or use the Privacy Portal. We will respond within 30 days (or 45 days under CCPA, with notice if we need an extension).

9.2 Additional rights for California residents (CCPA/CPRA)

You have the right to:

  • Know what categories and specific pieces of personal information we have collected
  • Know the sources from which we collected it
  • Know the business purposes for which we use it
  • Know the categories of third parties with whom we share it
  • Request deletion of your personal information
  • Opt out of “sharing” (advertising-cookie-based cross-context behavioral advertising)
  • Limit use of sensitive personal information (we do not collect sensitive personal information as defined under CPRA)
  • Non-discrimination for exercising these rights

We do not sell personal information for money. We do “share” personal information with advertising platforms as defined under CCPA. Use the Privacy Portal to opt out.

We honor the Global Privacy Control browser signal as a valid opt-out request, consistent with the California Attorney General’s enforcement position post-Sephora settlement.

To verify your identity for an access or deletion request, we may ask you to confirm information already on file (e.g., the email address used to subscribe). For authorized agent requests, we require written authorization from you.

9.3 Additional rights for EU/UK/Switzerland residents (GDPR/UK GDPR)

You have the right to:

  • Access, rectify, erase, restrict, or object to processing of your personal data
  • Data portability for data you provided to us
  • Withdraw consent at any time (where processing is based on consent)
  • Lodge a complaint with your local data protection authority

The data controller is Vinyl Palace, contactable at info@vinylpalace.net.

9.4 Additional rights for Brazil residents (LGPD)

Brazilian residents have rights substantially similar to those described in §9.3 above, including access, correction, anonymization, portability, deletion, and information about sharing. Email info@vinylpalace.net to exercise any LGPD right.

10. Children’s Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are between 13 and 18, you may use the Site only with the involvement of a parent or guardian. If you become aware that a child under 13 has provided us with information, contact us at info@vinylpalace.net and we will delete it.

11. Security

We implement reasonable administrative, technical, and physical safeguards to protect your information, including HTTPS encryption, encrypted storage of OAuth tokens and SMS provider credentials, and access controls on our administrative systems. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Do Not Track

Our Site does not respond to standard “Do Not Track” browser signals because there is no consensus interpretation of the signal. However, we do respect the Global Privacy Control (GPC) signal, which is the modern, legally enforceable replacement for Do Not Track under California law.

13. Changes to This Policy

We may update this Privacy Policy. Material changes will be reflected in the “Last Updated” date at the top, and where required by law, we will notify you by email or by a prominent notice on the Site before the change takes effect.

14. Contact Us

For privacy questions or to exercise any right described in this policy:

Effective Date: May 4, 2026

1. Information We Collect

We collect information that you provide directly to us and information gathered automatically through your interaction with our website.

Information You Provide: When you sign up for updates, we collect your email address and phone number.

Automated Data (Cookies & Pixels): We use the Meta Pixel and Google Analytics to track your activity. This includes:

  • Landing pages visited and content viewed.
  • Conversion data (e.g., if you clicked a link or signed up).
  • Technical data (IP address, browser type, device info).

Lead Form Data: Any information submitted via lead generation forms on our site or through our social media advertisements.

2. How We Use Your Information

We use your data to provide a better experience and to market Vinyl Palace’s music effectively. Specifically:

  • Marketing & Remarketing: We use Meta Pixel data to create Lookalike Audiences, helping us find new fans who share your interests.
  • Analytics: Google Analytics helps us understand how fans interact with the site so we can improve the user experience.
  • Communication: We use your email and phone number to send marketing messages via Mailchimp, Effort Labs, and Twilio.
  • Music Promotion: All data is used to optimize music streams and promote tours, releases, and merchandise.

3. SMS & Email Marketing

By providing your phone number and email, you consent to receive marketing communications.

SMS (Twilio): You may receive text updates about new music or events. Message and data rates may apply.

  • To Opt-Out: Reply STOP to any text message to be removed from our list.
  • For Help: Reply HELP to receive support information.

Email (Mailchimp/Effort Labs): You can unsubscribe from our email list at any time by clicking the “unsubscribe” link at the bottom of any email.

Note on Opt-In: We only send marketing communications to users who have taken an affirmative action to subscribe (e.g., checking an empty box or submitting a form).

4. Cookies & Tracking Consent

We use cookies and similar tracking technologies (like the Meta Pixel) to analyze traffic and optimize our ads. Upon your first visit to our site, you will be presented with a Cookie Consent Banner. You may choose to accept or decline these tracking technologies.

5. Third-Party Sharing

We do not sell your personal data. We only share information with the service providers necessary to run our marketing campaigns:

  • Meta (Facebook/Instagram): For ad targeting and conversion tracking.
  • Google: For website analytics.
  • Twilio / Mailchimp / Effort Labs: To facilitate our SMS and email outreach.

6. Your Rights & Opt-Outs

You have control over your data:

  • Cookies: You can set your browser to refuse all or some cookies.
  • Tracking: You can opt-out of Google Analytics here and adjust your Meta Ad Preferences in your Facebook account settings.
  • Data Request: You may request a copy of the data we have on file or request its deletion by contacting us at info@vinylpalace.net.

7. Security

We implement industry-standard security measures to protect your information. However, no method of transmission over the internet is 100% secure.

8. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated “Effective Date.”