PRIVACY POLICY
Effective 22 September 2026. This policy covers this site and any order placed through it.
What we collect
When you buy something we collect your email address; your name and postal address, but only if the order contains a physical item, since digital-only orders never ask for an address; what you ordered, what you paid and when; and an order reference from our payment processor.
We do not collect your card number, expiry or security code. Those go directly to Stripe and never touch our systems. We see only the last four digits and the card brand, which Stripe reports back so we can identify a payment.
We do not run analytics, advertising trackers or third-party cookies. The site sets no cookies for tracking purposes.
Why we hold it
To take your order, send it to you, give you your downloads, and answer you if you get in touch. Order records are also kept because Australian tax law requires business records to be retained for five years.
Who else touches it
Running a shop means using other companies. Each sees only what it needs. Stripe processes payments and holds the card data we never see. Vercel hosts the site and serves every page you load. Sanity stores the product information and your order record. Resend sends your receipt and any email we send you about an order. Australia Post receives your name and address in order to deliver a parcel.
Some of these companies store data outside Australia. Placing an order means accepting that your information may be handled overseas by them.
We do not sell your information, and we do not share it with anyone for marketing.
We email you about orders you have placed: your receipt, your download links, and a note when a parcel is posted. These are not marketing and you cannot unsubscribe from them while an order is open, because they are how you get what you paid for. We will not add you to a mailing list unless you ask to be on one.
Download links
Download links in your receipt and on your order page are signed and expire after seven days. Anyone holding the link can use it during that window, so treat it as private. If yours expires, reply to your receipt and we will issue fresh ones.
How long we keep things
Order records are kept for five years, for tax. Email correspondence is kept while it is useful and deleted when it is not.
Getting your data, or having it deleted
Email vinnyvegas.music@protonmail.com and ask. We will tell you what we hold and give you a copy, or delete it. Deletion has one limit: we cannot delete order records still inside the five-year tax retention period, and we cannot delete anything Stripe is required to keep for financial compliance.
If you are unhappy with how we have handled your information, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If this policy changes, the effective date above changes with it. Material changes affecting orders already placed will be emailed to the people affected.