Privacy Policy

We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, store, and safeguard your personal information when you use our website www.vinyltimemachines.com


1. Information We Collect

We may collect and process the following categories of personal data:

  • Identification and Contact Data: name, billing address, shipping address, email address, and phone number.

  • Order and Payment Data: details of the products you order, payment information (processed securely by our third-party payment providers), and transaction history.

  • Account Data (if applicable): username, password, and account preferences.

  • Technical Data: IP address, browser type, device information, and website usage activity.

  • Marketing Preferences: communication and subscription preferences.


2. Lawful Basis for Processing

Under GDPR, we process your personal data on the following lawful bases:

  • Contractual necessity: to process and fulfill your orders.

  • Legal obligation: to comply with tax, accounting, and other legal requirements.

  • Legitimate interests: to improve our services, prevent fraud, and ensure website security.

  • Consent: for sending marketing communications and using certain cookies (you can withdraw consent at any time).


3. How We Use Your Information

We use your personal data to:

  • Process, fulfill, and ship your orders.

  • Provide customer service and support.

  • Communicate with you regarding orders, updates, or account details.

  • Send you newsletters and promotional offers (if you consent).

  • Improve our website, products, and user experience.

  • Comply with legal obligations.


4. Sharing Your Data

We will not sell or rent your personal data. However, we may share it with:

  • Service Providers: trusted third parties who help us with payment processing, order fulfillment, shipping, marketing, and IT support.

  • Legal Authorities: when required by law or to protect our legal rights.

  • Business Transfers: if we are involved in a merger, acquisition, or sale of assets.

All third-party service providers are required to protect your personal data in accordance with GDPR.


5. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Typically:

  • Order and transaction data: retained for 7 years (to comply with tax and accounting obligations).

  • Customer accounts: retained until you request deletion.

  • Marketing data: retained until you withdraw consent.


6. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we will ensure that appropriate safeguards (such as Standard Contractual Clauses or equivalent measures) are in place to protect your information.


7. Your Data Protection Rights

Under GDPR, you have the following rights:

  • Right of Access – request a copy of the personal data we hold about you.

  • Right to Rectification – correct any inaccurate or incomplete data.

  • Right to Erasure (“Right to be Forgotten”) – request deletion of your personal data when no longer necessary.

  • Right to Restrict Processing – request that we limit the use of your data.

  • Right to Data Portability – receive your data in a structured, commonly used format.

  • Right to Object – object to processing based on legitimate interests or for direct marketing.

  • Right to Withdraw Consent – withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at [insert contact email].


8. Cookies and Tracking Technologies

We use cookies and similar technologies to improve website functionality, analyze site traffic, and personalize content. You will be asked to provide consent for any non-essential cookies (such as marketing or analytics) when you first visit our website. You can manage your cookie preferences through your browser settings at any time.


9. Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. However, no transmission over the internet can be guaranteed to be 100% secure.


10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated “Last Updated” date.


11. Contact Information

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

You also have the right to lodge a complaint with your local Data Protection Authority if you believe your rights under GDPR have been violated.