Privacy policy

Effective date:

This policy explains what personal information LVNARY ("we", "us") collects through lvnary.com, why, and the choices you have. LVNARY is an independent band based in Morgantown, West Virginia. The short version: this site has no analytics, ads, or tracking cookies. We only collect personal information when you join our mailing list, write to us, or buy merch.

What we collect

When you visit. Our website host, GitHub Pages, automatically receives technical information that any website receives, such as your IP address, browser type, and the page you asked for. GitHub uses this to deliver and secure the site. We do not receive these logs or use them to identify you.

If you join the mailing list. Your email address, your confirmation that you are 16 or older and want our emails, and the date you signed up. To block spam signups, our signup service counts signups from your connection's IP address for one hour, then deletes the count. The IP address is not saved with your email. If we use an email sending service to send our emails, it may record whether an email was opened or a link was clicked.

If you email us. Your email address, name if you include it, and whatever you choose to write.

If you buy merch. Your name, email address, shipping address, the items you order, and how you chose to pay. If you pay by card, you enter your card details on Stripe's checkout page; we never see or store your full card number. If you pay with Venmo, Cash App, or Zelle, that service shares your name or handle and the payment note with us.

Your cookie choice. If you make a choice in Cookie settings, your browser stores that choice. It stays on your device and is not sent to us.

We do not use analytics, advertising, or social media tracking on this site, and we never see or store your card number.

How we use it

  • To send you the mailing list emails you asked for: new music, show dates, and merch news.
  • To fill, ship, and answer questions about your merch order, including customs forms for orders outside the US.
  • To reply when you contact us.
  • To keep the site working and secure.
  • To comply with the law and protect our rights.

We do not use your information to build advertising profiles, and we do not make automated decisions about you.

If you are in the European Economic Area, the United Kingdom, or another place with similar laws, we rely on these legal bases:

  • Consent for the mailing list. You can withdraw it at any time by using the unsubscribe link in any email or by contacting us.
  • Contract for merch orders: we need your details to take payment and ship what you bought.
  • Legitimate interests for running and securing the site and for answering messages you send us.
  • Legal obligation where we must keep or disclose information by law.

Who we share it with

We do not sell or rent personal information. We share it only with service providers that help us run the site and mailing list, under their own terms:

  • GitHub, Inc. hosts this website. See the GitHub privacy statement.
  • Stripe, Inc. processes card payments and receives your order details and shipping address. See the Stripe privacy policy.
  • Cloudflare, Inc. runs our checkout and signup service, stores our mailing list, and delivers order details to the band by email. See the Cloudflare privacy policy.
  • Venmo, Cash App, or Zelle, if you pay with one, under their own terms.
  • An email sending service, when we send mailing list emails. We will name it here before we start using one.
  • Postal and shipping carriers, and customs authorities for orders outside the US, receive your name and address to deliver your order.
  • Our email provider stores messages you send us and order emails.

We may also disclose information if the law requires it, or to protect the safety and rights of the band, our fans, or others.

Links to other sites. This site links to streaming services and social media, and sends card buyers to Stripe's checkout page. Those sites have their own privacy policies and may set their own cookies once you visit them.

How long we keep it

  • Mailing list: until you unsubscribe or ask us to delete it. We remove unsubscribed addresses within 30 days, except that we or our email sending service may keep your address on a do-not-email list so we never email you again.
  • Merch orders: as long as tax and accounting law requires, usually up to 7 years. Stripe keeps payment records under its own policy.
  • Emails you send us: up to 2 years after our conversation ends, unless we need them longer for a legal reason.
  • Hosting logs: kept by GitHub under its own policy.
  • Your cookie choice: on your device until you clear it or our cookie policy changes.

Your rights

You can ask us to:

  • Tell you what personal information we have about you and give you a copy.
  • Correct information that is wrong.
  • Delete your information.
  • Restrict or object to how we use your information, or withdraw consent you gave.
  • Send your information to you or another service in a portable format.

To make a request, email wearelvnary@gmail.com. We will answer within 30 days. We may ask you to confirm you control the email address involved. You will not be treated differently for using these rights.

If you are in the EEA or UK, you can also complain to your local data protection authority.

US state privacy rights

Residents of California and other states with consumer privacy laws have rights to know, access, correct, and delete their personal information, and to opt out of its sale, sharing for cross-context behavioral advertising, and targeted advertising.

We do not sell or share personal information, and we do not use targeted advertising. We have not done so in the past 12 months. We do not use or disclose sensitive personal information.

We honor Global Privacy Control signals as a request to opt out. See Do Not Sell or Share My Personal Information.

You can use your rights yourself or through an authorized agent by emailing wearelvnary@gmail.com.

Children's privacy

This site is for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. The mailing list is only for people 16 or older.

If you believe a child has given us personal information, email wearelvnary@gmail.com and we will delete it.

International visitors

We are based in the United States, and our service providers process information in the United States and other countries. Privacy laws there may differ from yours. Where the law requires it, our providers use safeguards such as the European Commission's Standard Contractual Clauses for transfers.

Changes

If we change this policy, we will post the new version here with a new effective date. If a change is significant and we have your email address, we will tell you before it takes effect.

Contact

Questions or requests about privacy:

Email: wearelvnary@gmail.com