LEGAL

PRIVACY POLICY

Effective date: October 11, 2026
Last updated: October 11, 2026

Momentum Records LLC (“Momentum Records,” “we,” “us,” or “our”) operates the website at momentumrecords.org (the “Site”). This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the choices you have.

By using the Site, you agree to this Privacy Policy. If you do not agree, please do not use the Site.

Who we are and how to reach us
Information we collect
How we use your information
Legal bases for processing
Cookies and similar technologies
Email marketing and your choices
How we share information
Third-party content and links
Data retention
Security
Your privacy rights
Children’s privacy
International visitors
Do Not Track
Changes to this Policy
Contact us

1. Who we are and how to reach us

Momentum Records LLC
[MAILING ADDRESS – STREET]
[CITY], Florida [ZIP]
United States

Privacy, order and general questions: [email protected]

Momentum Records LLC is the controller of the personal information described in this Policy.

2. Information we collect

2.1 Information you give us directly

Newsletter and marketing signup

Email address
First name and last name (optional)
The email categories you select — new music, shows and events, merchandise, label news, artist updates
A record of your consent: the date and time, the wording of the consent you agreed to, the version of that wording, the page you signed up from, and the IP address used at signup. We keep this record to demonstrate that you opted in.

Orders and checkout

First and last name
Email address and phone number
Shipping address and billing address
The items, variants, sizes and quantities you ordered
Any order notes you provide
Order totals, discounts, shipping and tax amounts
The IP address used to place the order

Contact and submission forms

Name, email address, subject and message
Optionally phone number, company and website
The category you selected — general, artist submissions, booking, media, partnerships, business
The IP address and browser user agent at the time of submission

Administrator accounts (staff only)

Name, email address and a securely hashed password
Records of administrative actions taken in the admin area

2.2 Information collected automatically

IP address, browser type and version, device type and operating system
Pages visited, the page that referred you, and the date and time
Standard web server logs maintained by our hosting provider
Security records, such as failed login attempts and blocked requests

2.3 Payment information

How your payment information is handled depends on which checkout method is active at the time of your order.

Stripe checkout. When card payment is enabled, payment is completed on Stripe’s own hosted checkout page. Your card number, expiration date and security code are submitted directly to Stripe. We never receive, process or store your full card number, CVV or PIN. We receive only a confirmation that payment succeeded, along with limited transaction identifiers.

Email order. When card payment is not enabled, the Site does not request any payment card information at all. You submit an order request, and we contact you afterward to arrange payment. Any payment details exchanged at that stage are handled outside the Site.

2.4 Information we do not intentionally collect

We do not ask for Social Security numbers, government identification numbers, precise geolocation, biometric data, or information about health, religion, race, ethnicity, political opinions, sexual orientation or union membership. Please do not send us this information.

3. How we use your information

To process, fulfill, ship and support your merchandise orders
To contact you about an order, including arranging payment when the email order method is used
To send marketing emails you have specifically opted in to receive
To respond to contact form messages, booking requests, media inquiries and artist submissions
To operate, maintain, secure and improve the Site
To detect, investigate and prevent fraud, abuse and security incidents
To keep records required for accounting, tax and legal compliance
To comply with applicable law and respond to lawful requests

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

4. Legal bases for processing (EEA, UK and similar jurisdictions)

If you are located in a jurisdiction that requires a legal basis for processing, we rely on:

Performance of a contract — to process and fulfill your orders
Consent — to send marketing emails, which you may withdraw at any time
Legitimate interests — to secure the Site, prevent fraud, and understand how the Site is used
Legal obligation — to meet tax, accounting and other legal requirements

5. Cookies and similar technologies

The Site uses a small number of cookies, all of which are necessary for it to function. We do not use advertising cookies, and we do not run third-party advertising networks or behavioral tracking on the Site.

Session cookie — keeps your browsing session active, remembers your shopping cart and keeps administrators signed in. Expires when your session ends or shortly after.
XSRF-TOKEN cookie — a security token that protects forms against cross-site request forgery.
“Remember me” cookie (administrators only) — set only if a staff member chooses to stay signed in.

You can block or delete cookies in your browser settings. If you block the cookies above, the shopping cart, checkout and the administrator sign-in will not work.

Email open and click tracking. If enabled for a given marketing campaign, our emails may include a small invisible image that tells us whether the message was opened, and links that record which link was clicked. You can prevent open tracking by configuring your email program not to load remote images, and you can stop all marketing email at any time using the unsubscribe link.

6. Email marketing and your choices

We only send marketing email to people who have affirmatively opted in. The consent checkbox on our forms is never pre-checked.

Every marketing email includes an unsubscribe link and our physical mailing address. You can:

Unsubscribe from all marketing email using the link in any marketing email. No account or login is required.
Change which categories you receive using the email preferences link in any marketing email.
Email [email protected] and ask us to remove you.

When you unsubscribe, your address is added to a permanent suppression list so that it is not re-added by a future import or upload. Honoring an unsubscribe is immediate; please allow a short period for any message already in transit.

Transactional messages are different. Order confirmations, payment and shipping notices, password resets and security notices relate to a specific transaction or your account, and are not marketing. You cannot unsubscribe from these while you have an active order.

We share personal information only as described below. We do not sell it.

Service providers who act on our behalf:

Web hosting — our hosting provider stores the Site and its database and maintains server logs.
Payment processing — Stripe, Inc., when card payment is enabled. Stripe processes your payment under its own privacy policy, available at stripe.com/privacy.
Email delivery — a third-party email delivery provider transmits our marketing and transactional email. It receives your email address, name and the message content.
Shipping carriers — when you order physical merchandise, we provide your name, shipping address and phone number to the carrier so the package can be delivered.

Legal and protective disclosures. We may disclose information if required by law, subpoena or court order, or where we believe disclosure is necessary to investigate fraud, enforce our Terms of Use, or protect the rights, property or safety of Momentum Records, our artists, our customers or the public.

Business transfers. If Momentum Records is involved in a merger, acquisition, financing, reorganization or sale of assets, personal information may be transferred as part of that transaction. We will take reasonable steps to ensure it remains subject to protections consistent with this Policy.

8. Third-party content and links

The Site links to and may embed content from third-party services, including YouTube, Spotify, Apple Music, SoundCloud, Instagram, Facebook, TikTok and X. The Site also loads web fonts from Google Fonts.

When your browser loads embedded content or fonts from these services, those services may receive your IP address and may set their own cookies, whether or not you interact with the content. Their handling of your information is governed by their own privacy policies, not this one. We encourage you to read them.

9. Data retention

Order records — retained for at least seven years to meet tax, accounting and warranty obligations.
Marketing subscriptions — retained until you unsubscribe. After you unsubscribe we keep your email address on a suppression list indefinitely, for the sole purpose of making sure we do not email you again.
Contact form submissions — retained for up to three years.
Server and security logs — typically retained for up to twelve months.
Administrator audit records — retained while the account is active and for a reasonable period afterward.

10. Security

We take reasonable technical and organizational measures to protect your information, including encryption of traffic in transit (HTTPS), strong one-way hashing of administrator passwords, protection against cross-site request forgery, rate limiting and brute-force protection, server-side validation of all submitted data, restricted administrative access based on role, audit logging of administrative actions, and encryption at rest of sensitive configuration values.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you share information with us at your own risk. If we become aware of a breach affecting your personal information, we will notify you and the appropriate authorities as required by applicable law.

11. Your privacy rights

Depending on where you live, you may have some or all of the following rights:

To know what personal information we hold about you
To access a copy of that information
To correct inaccurate information
To delete your information, subject to our legal retention obligations
To opt out of marketing communications
To withdraw consent you previously gave
To not be discriminated against for exercising these rights
To appeal a decision we make about your request
To data portability, where applicable

Florida residents. Florida law provides certain rights regarding your personal information. You may exercise the rights described above by contacting us at the address below.

California residents. Under the California Consumer Privacy Act as amended by the CPRA, you have the rights listed above. We do not sell personal information and do not share it for cross-context behavioral advertising, so there is no “Do Not Sell or Share” action to take. You may designate an authorized agent to submit a request on your behalf.

EEA and UK residents. You additionally have the right to lodge a complaint with your local supervisory authority.

How to exercise your rights. Email [email protected] with your request and the email address you used on our Site. We will respond within the timeframe required by applicable law, generally within 45 days. We may need to verify your identity before acting, usually by confirming control of the email address associated with your information.

12. Children’s privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact [email protected] and we will delete it promptly.

If you are between 13 and 18, please use the Site only with the involvement of a parent or guardian, and do not place orders without their permission.

13. International visitors

The Site is operated in the United States and our service providers are located primarily in the United States. If you access the Site from outside the United States, your information will be transferred to, stored in and processed in the United States, where data protection laws may differ from those in your country. By using the Site, you understand that your information may be transferred to our facilities and to the service providers described above.

14. Do Not Track

Some browsers transmit a “Do Not Track” signal. There is currently no common industry standard for responding to these signals, and the Site does not respond to them. The Site does not perform cross-site behavioral tracking.

15. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top. If the changes are significant, we will provide a more prominent notice, such as a notice on the Site or an email to subscribers. Your continued use of the Site after an update means you accept the revised Policy.

16. Contact us

Questions, concerns or requests regarding this Privacy Policy:

Momentum Records LLC
[MAILING ADDRESS – STREET]
[CITY], Florida [ZIP]
United States
[email protected]