Overview
This policy explains how Rebel G Society Records (“we”) handles personal information on rebelgsociety.com. We collect only what we need to sell you music and merch, deliver it, and run the Site — and we never sell your personal information.
What we collect
- Order details — your email address, what you bought, prices, discount codes used, and payment status. For merch, your name and shipping address.
- Sign-in — your email address, used to send one-time sign-in links to The Vault.
- Contact form — your name, email, topic and message.
- Library activity — which items you’ve downloaded (so you can re-download and we can prevent abuse).
- Site analytics — pages viewed, how you arrived (e.g. a search engine or social link), device type, browser, language and time zone. This is collected without cookies and without storing your IP address; visitors are counted with an anonymous code that changes every day.
- Marketing emails — if you join our list (sign-up form, popup or the box at checkout) or buy from us, we may email you about new music, merch and offers. Every email has an unsubscribe link, and we record opens and link clicks so we know what fans find useful. We never sell or share your email.
- Saved bags — if you enter your email at checkout (or in our “don’t leave your bag” offer) and don’t finish, we save what’s in your bag with your email so we can send up to three reminders, which may include a one-time discount. Every reminder has an unsubscribe link, and we stop as soon as you buy.
- Session recordings — a replay of how you use the Site (pages, scrolling, mouse movements and clicks), so we can find what’s confusing or broken and improve it. Anything you type is masked, email addresses shown on screen are masked, and payment details are never on our pages. See “Session recordings” below.
We do not collect or store card numbers — payments are handled entirely by Stripe and PayPal.
How we use it
- Process payments, deliver downloads and ship merch.
- Send receipts, sign-in links, shipping updates and replies to your messages.
- Provide customer support, handle refunds and prevent fraud or abuse.
- Understand what fans enjoy and improve the Site.
- Measure and improve our advertising (see Meta Pixel below).
- Meet legal, tax and accounting obligations.
Session recordings
To improve the Site we record anonymous replays of visits — the pages you view, how you scroll, move the mouse and click, and whether you add items to your bag or check out. Recordings are stored on our own server (not shared with any third party) and viewed only by us.
- Masked by design: everything typed into forms is hidden before it leaves your browser, as are email addresses shown on the page. Card details are entered on Stripe’s or PayPal’s pages and are never recorded.
- Linked only when you’re known: if you’re signed in or place an order, the recording may be associated with your email so we can help with support questions. Otherwise it stays anonymous.
- Kept for 30 days unless we save a specific recording (for example, to investigate a bug), and then until it’s no longer needed.
- Your choice: we don’t record visitors whose browser sends a Global Privacy Control or Do Not Track signal. Visitors in the EU/UK are asked before recording starts, and that choice is remembered on your device. To opt out at any time, email us or clear the “rgs_replay” setting in your browser.
Meta Pixel and advertising
We use the Meta Pixel, which sets cookies and sends Meta information about your visit — such as pages viewed, items added to your bag, checkouts started and purchase values — so we can measure our ads and show them to people likely to be interested. We don’t send Meta your name, email or address.
You can control ad personalization in your Facebook ad settings, opt out through the Digital Advertising Alliance, or block third-party cookies in your browser. See our Cookie Policy.
How long we keep it
- Order and payment records: as long as needed for The Vault to work and at least 7 years for tax and accounting.
- Contact messages: until you ask us to delete them or they’re no longer needed.
- Saved bags: 30 days.
- Session recordings: 30 days, unless saved for a specific reason.
- Site analytics: 13 months.
- Nightly backups: 14 days.
Security
The Site runs entirely over encrypted HTTPS. Sign-in links are one-time and expire after 20 minutes, sessions are stored in secure cookies, downloads are protected so only buyers can access them, and payment details are handled by Stripe and PayPal. No system is perfectly secure, but we take reasonable measures to protect your information.
Your rights
You can ask us to access, correct, delete or export your personal information, or object to how we use it, by emailing rebelgsocietyrecords@gmail.com. We’ll respond within 30 days. Deleting your information may remove access to your purchases in The Vault, and we may need to keep some records for legal reasons.
California residents (CCPA/CPRA): you have the right to know, delete and correct your information and to not be discriminated against for exercising these rights. We do not sell personal information. Sharing data with Meta for ad measurement may be considered “sharing” for cross-context behavioral advertising — you can opt out by emailing us or using the options in the Meta Pixel section; we also honor Global Privacy Control signals.
EU/UK residents (GDPR): we process your information to perform our contract with you (orders and delivery), for our legitimate interests (running and improving the Site, preventing fraud), with your consent (ad measurement), and to meet legal obligations. Your data is processed in the United States. You may lodge a complaint with your local data-protection authority.
Children
The Site isn’t directed at children under 13 and we don’t knowingly collect their information. If you believe a child has given us information, contact us and we’ll delete it.
Changes and contact
We’ll post any changes here with a new date. Questions or requests: rebelgsocietyrecords@gmail.com · Rebel G Society Records.