Privacy Policy

Last updated: August 31, 2026

Torn Light Records (“Torn Light,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect when you visit tornlightrecords.com (the “Site”), place an order, create an account, subscribe to our mailing list, contact us, or otherwise interact with the Site, as well as how that information is used and shared.

We try to collect only the information reasonably necessary to operate our store, fulfill orders, communicate with customers, maintain the security of the Site, and understand how the Site is being used.

Information You Provide to Us

Orders and Purchases

When you place an order, we collect information necessary to process and fulfill your purchase. Depending on the order, this may include:

• Your name
• Email address
• Billing address
• Shipping address
• Telephone number, if provided
• Products purchased
• Order value and payment status
• Shipping and fulfillment information
• Customer notes or other information you voluntarily provide during checkout

We retain a history of orders placed through the Site. This allows us to fulfill orders, provide customer service, maintain business and accounting records, resolve disputes, detect fraud, and comply with applicable legal and tax obligations.

Customer Accounts

You may choose to create a customer account on the Site. Account information may include your name, email address, username, billing and shipping addresses, and order history.

Customer accounts allow you to view previous orders and manage information associated with your account.

Passwords are stored using the authentication and security mechanisms provided by WordPress and WooCommerce. We do not have access to your password in plain text.

Communications

If you contact us by email or another method, we may retain your message and contact information as reasonably necessary to respond to your request, provide customer service, or maintain records relating to an order or other business matter.

Payments

Payments on the Site are processed by Stripe through the official WooCommerce Stripe Payment Gateway.

When you make a payment, information necessary to process that transaction is transmitted to Stripe. Depending on the payment method you choose, information may also be processed by services such as Apple Pay or Google Pay.

Stripe may process payment information, transaction details, billing information, IP addresses, browser or device information, and other information necessary to process transactions, authenticate payment methods, prevent fraud, and operate its services.

The Stripe integration may load JavaScript and other payment-related resources from Stripe when you use portions of the Site involving payment or checkout functionality.

Torn Light Records does not store your complete credit or debit card number, card security code, Apple Pay credentials, Google Pay credentials, or other complete payment credentials on our servers.

Payment information is handled by Stripe and, where applicable, the payment method you select.

For more information about Stripe’s handling of personal information, please see the Stripe Privacy Policy.

For information about Apple Pay, see Apple’s Privacy Policy.

For information about Google Pay, see the Google Privacy Policy.

Mailing List and Mailchimp

We use Mailchimp to manage our email mailing list and certain email marketing and e-commerce functions.

You may subscribe to our mailing list through forms on the Site or, where offered, by choosing to subscribe during the checkout process. If you subscribe, your email address and other information you provide may be transmitted to and stored by Mailchimp.

Our WooCommerce store is also integrated with Mailchimp for WooCommerce. This integration may synchronize customer, product, cart, and order information between our store and Mailchimp. This can include information about customers and the products they purchase.

We use this integration to manage our mailing audience, understand the relationship between our store and our email communications, and send relevant Torn Light Records news, release announcements, store updates, and other commercial communications.

Marketing emails sent through Mailchimp include an unsubscribe mechanism. You may unsubscribe from marketing emails at any time.

Unsubscribing from marketing communications does not prevent us from sending transactional or administrative messages that are necessary to complete an order, provide requested customer service, communicate important information about your account, or otherwise fulfill a transaction you requested.

Mailchimp processes information according to its own privacy practices. For more information, see Mailchimp’s Privacy Statement and Mailchimp’s Legal Policies.

Site Analytics

We use a privately operated, server-side analytics system to understand how the Site is used. We do not use Google Analytics.

Our analytics system may process technical information ordinarily associated with a web request, including:

• Pages viewed
• Date and time of requests
• Referring pages or websites
• Browser type
• Operating system
• Device and technical information
• User-agent string
• IP address
• Whether a request appears to have been generated by a human visitor or an automated system

We use this information to understand aggregate Site traffic, browser and device usage, Site performance, and general visitor activity.

Human Visitors

For visitors that our system can verify as human through JavaScript, IP addresses used for analytics are anonymized.

Our analytics are intended to provide aggregate information about Site usage rather than create persistent profiles of individual human visitors.

Our analytics system uses a single first-party, domain-specific cookie for the purpose of distinguishing activity during the current browsing session.

This identifier is session-specific. It is not intended to recognize you on a subsequent visit, create a persistent history of your activity across multiple days or visits, or track you across unrelated websites.

Automated and Unverified Traffic

Requests that cannot be verified as originating from a human visitor through our JavaScript verification process may be classified as automated or “bot” traffic.

For these requests, we may retain the complete IP address and related request information rather than anonymizing it.

We do this for security and abuse-prevention purposes, including identifying malicious automated traffic, excessive requests, scraping, attempted fraud, attacks, vulnerability scanning, and other activity that may threaten the availability or security of the Site.

Classification as automated or unverified traffic does not necessarily mean that a request is malicious. It means that our system was unable to verify the request as originating from a human visitor using the verification mechanism available to us.

Security, Server Logs, and IP Addresses

Like most websites, our web server automatically creates logs in connection with requests made to the Site.

Server and security logs may contain information including:

• IP address
• User-agent string
• Requested URL
• Referring URL
• Date and time
• HTTP status information
• Login attempts
• Error information
• Other technical information associated with the request

We use this information to operate and troubleshoot the Site, detect malicious activity, investigate security incidents, prevent fraud and abuse, and maintain the security and availability of our systems.

We also use All-In-One Security (AIOS) to provide security and firewall functionality for our WordPress installation. This software may collect and retain IP addresses and related information on our server for security purposes, including identifying malicious activity and mitigating brute-force login attempts.

Security-related information may be retained for longer than ordinary analytics information when reasonably necessary to investigate abusive activity, maintain security controls, block malicious sources, or protect the Site.

Google reCAPTCHA

We use Google reCAPTCHA on portions of our WooCommerce Site, including checkout, to help distinguish human visitors from automated activity and protect the Site against spam, fraud, and abuse.

When reCAPTCHA is present, your browser communicates with Google. Google may receive technical and usage information in connection with the service, such as your IP address, browser and device information, interactions with the Site or reCAPTCHA, and other information used to evaluate whether activity appears to be human or automated.

Google may also use cookies or similar technologies as part of the reCAPTCHA service.

Information processed by Google through reCAPTCHA is subject to the Google Privacy Policy and Google Terms of Service.

We use reCAPTCHA for security and abuse prevention rather than for our own advertising or marketing analytics.

Cookies and Similar Technologies

The Site uses cookies and similar browser technologies where necessary to operate the store, maintain security, and provide requested functionality.

These may include cookies or similar technologies used to:

• Maintain your shopping cart
• Maintain a logged-in customer session
• Remember information necessary during checkout
• Provide Site security
• Maintain our session-based first-party analytics
• Process payments
• Protect forms and checkout using reCAPTCHA
• Support embedded or third-party content

Some cookies are provided directly by Torn Light Records, WordPress, or WooCommerce, while others may be provided by third-party services described in this Privacy Policy.

You can configure your browser to warn you when cookies are being sent, reject certain cookies, or delete cookies that have already been stored.

Blocking all cookies may prevent portions of the Site from operating properly. In particular, shopping-cart, customer-account, checkout, payment, security, and embedded-media functionality may depend on cookies or similar browser technologies.

Our own first-party analytics cookie is limited to the current session and is not designed to recognize human visitors across separate browsing sessions.

Bandcamp Audio Players

Some pages on the Site contain embedded audio players provided by Bandcamp.

When a page containing a Bandcamp player is loaded, or when you interact with that player, your browser may communicate directly with Bandcamp’s servers.

Bandcamp may receive information such as your IP address, browser or device information, information about the page containing the player, and information about your interaction with Bandcamp’s services. Bandcamp may also use cookies or similar technologies according to its own policies.

Torn Light Records does not control information collected directly by Bandcamp through its embedded services.

For more information, see the Bandcamp Privacy Policy.

YouTube Videos

Some pages on the Site contain videos embedded from YouTube, a service provided by Google.

Loading or interacting with an embedded YouTube player may cause your browser to communicate directly with Google and YouTube.

Depending on the embed configuration, your browser settings, whether you are signed into a Google account, and your interaction with the player, Google may receive information including your IP address, browser or device information, information about the page containing the video, and information about your interaction with YouTube.

Google or YouTube may also use cookies or similar technologies in connection with embedded content.

Information collected directly by Google or YouTube is governed by Google’s privacy practices and is not controlled by Torn Light Records.

For more information, see the Google Privacy Policy.

How We Use Information

We may use information collected through the Site to:

• Process, fulfill, ship, and maintain records of orders
• Process payments
• Provide customer service
• Create and administer customer accounts
• Communicate with you about an order or account
• Send marketing communications when appropriate
• Maintain business, accounting, and tax records
• Detect and prevent fraud, spam, abuse, and malicious automated activity
• Protect the security and availability of the Site
• Diagnose technical problems
• Understand aggregate Site traffic and usage
• Improve the Site and our services
• Enforce our terms and policies
• Establish, exercise, or defend legal claims
• Comply with applicable legal obligations

We do not use our private Site analytics to create advertising profiles of individual human visitors or to track human visitors across unrelated websites.

How We Share Information

We do not sell customer lists or personal information to data brokers.

We may disclose personal information to third parties where reasonably necessary to operate our business, complete transactions, provide the services you request, maintain the Site, or fulfill the purposes described in this Privacy Policy.

These parties may include:

• Stripe, for payment processing, authentication, and fraud prevention;
• Mailchimp, for mailing-list management, marketing communications, and connected WooCommerce commerce information;
• Shipping and fulfillment providers, where necessary to deliver an order;
• Bandcamp, when embedded Bandcamp content is loaded or used;
• Google, in connection with YouTube, reCAPTCHA, and Google Pay;
• Apple, where Apple Pay is used;
• Web-hosting, infrastructure, security, and technical service providers necessary to operate and protect the Site; and
• Professional advisers or service providers where reasonably necessary for accounting, legal, tax, or similar business purposes.

Third-party services may collect information directly from your browser when their resources or embedded content are loaded. Their use of information is governed by their respective privacy policies.

We may also disclose information when reasonably necessary to comply with applicable law, legal process, a court order, or a valid governmental request; investigate fraud or abuse; protect the security of our systems; enforce our rights; or protect the rights, property, or safety of Torn Light Records, our customers, or others.

If Torn Light Records or substantially all of its relevant assets were sold, transferred, reorganized, or acquired by another entity, information associated with the business may be transferred as part of that transaction, subject to applicable law.

Data Retention

We retain different categories of information for different periods depending on why the information was collected.

Order records may be retained for an extended period because they form part of our business records and may be necessary for accounting, tax, customer-service, fraud-prevention, and legal purposes.

Customer account information may generally be retained while an account remains active and afterward where reasonably necessary for legitimate business or legal purposes.

Mailing-list information may be retained while you remain subscribed or as otherwise necessary to maintain suppression records and honor unsubscribe requests.

Analytics information concerning verified human visitors is maintained in anonymized or aggregate form where possible.

Full IP addresses and related information associated with automated or unverified traffic, server logs, login attempts, and security events may be retained where reasonably necessary for Site security, abuse prevention, investigation, and maintenance of security controls.

We may retain information for longer where required by law, reasonably necessary to resolve a dispute or security incident, or necessary to establish, exercise, or defend legal claims.

Security

We use reasonable administrative and technical measures intended to protect information maintained through the Site.

The Site uses encrypted HTTPS connections to protect information transmitted between your browser and the Site.

Payment card information is processed through our payment provider rather than stored by Torn Light Records.

We also use security software, logging, automated-traffic detection, reCAPTCHA, and other security measures designed to identify and mitigate malicious activity.

No Internet transmission or storage system can be guaranteed to be completely secure, however, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of the password associated with your customer account.

If we become aware of a data breach requiring notification under applicable law, we will provide notifications in the manner and within the time required by applicable law.

Your Choices and Privacy Rights

Depending on where you live, applicable law may give you rights concerning personal information maintained about you.

These may include rights to request:

• Access to personal information associated with you;
• Correction of inaccurate information;
• Deletion of certain personal information;
• Information about how personal information has been used or disclosed; or
• A portable copy of certain information.

You may also:

• Update certain customer information through your Site account;
• Unsubscribe from marketing emails using the unsubscribe link included in those emails;
• Configure your browser to reject or delete cookies; and
• Contact us with a request concerning personal information associated with your account or orders.

Some information cannot necessarily be deleted upon request. For example, we may need to retain transaction information for tax, accounting, fraud-prevention, security, legal, or other legitimate business purposes.

Where appropriate, information may instead be anonymized.

Privacy requests are subject to applicable law, and we may need to verify your identity before fulfilling a request.

California Privacy Disclosures

California Online Privacy Protection Act

The California Online Privacy Protection Act (“CalOPPA”) requires operators of certain commercial websites that collect personally identifiable information from California residents to make disclosures concerning their privacy practices.

Consistent with those requirements, this Privacy Policy describes the categories of information we collect, how we use that information, the types of parties with whom information may be shared, and the choices available to visitors.

You may visit and browse public portions of the Site without creating a customer account or placing an order. Certain technical information described in this Privacy Policy is nevertheless automatically processed when you access the Site.

Changes to this Privacy Policy will be reflected by updating the “Last updated” date at the beginning of the policy.

You may update certain personal information associated with a customer account by logging into your account.

Do Not Track Signals

Some browsers provide a “Do Not Track” or “DNT” setting intended to signal that a user does not wish to be tracked online.

There is no single universally implemented technical standard governing how websites and third-party services must respond to legacy browser DNT signals.

Our privately operated analytics system is not designed to track verified human visitors across unrelated websites or create persistent profiles across browsing sessions.

However, we do not represent that enabling a browser’s DNT setting will disable all cookies, security functions, payment services, or communications with third-party services on the Site. Services such as Stripe, Google reCAPTCHA, YouTube, Bandcamp, and other third-party functionality may operate according to their own privacy practices and may respond differently to browser privacy signals.

You may use browser cookie controls and the privacy controls made available by individual third-party services to manage those technologies.

California Consumer Privacy Act

The California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), provides qualifying California consumers with certain rights when the law applies to a particular business.

These rights can include rights to know about personal information collected, used, or disclosed; request deletion or correction of certain personal information; obtain certain information in a portable form; opt out of qualifying sales or sharing of personal information; limit certain uses of sensitive personal information; and exercise privacy rights without unlawful discrimination.

The CCPA applies only to businesses that meet criteria established by California law. Nothing in this Privacy Policy is intended to represent that Torn Light Records is subject to every provision of the CCPA where the law does not otherwise apply.

Where the CCPA or another applicable California privacy law grants you a particular right with respect to information we maintain about you, we will process a valid request in accordance with the applicable law.

We do not sell customer lists or personal information to data brokers.

California residents may submit a privacy request using the contact information at the end of this policy.

Children’s Privacy

The Site is a general-audience retail website and is not directed toward children under the age of 13.

We do not knowingly solicit or collect personal information from children under 13 in a manner subject to the Children’s Online Privacy Protection Act (“COPPA”).

If you are a parent or guardian and believe that a child under 13 has provided personal information to us without appropriate authorization, please contact us so that we can review the matter and take appropriate action.

International Visitors

Torn Light Records is based in the United States.

The Site and the service providers described in this Privacy Policy may process information in the United States and other countries.

If you access the Site from another country, information may therefore be transferred to and processed in jurisdictions whose privacy and data-protection laws differ from those of your country.

Third-party providers described in this Privacy Policy may maintain their own international data-transfer mechanisms and privacy practices.

Where applicable law grants you privacy or data-protection rights in your jurisdiction, you may contact us using the information below to make a request.

Third-Party Websites and Services

The Site contains links to websites and services operated by other parties.

This Privacy Policy applies to information collected or controlled by Torn Light Records through this Site. We are not responsible for the privacy practices of independent third-party websites that you choose to visit.

Embedded and integrated third-party services described in this Privacy Policy may also collect information directly from your browser under their respective privacy policies.

We encourage you to review the privacy policies of those services if you would like more information about their practices.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Site, our business practices, service providers, technologies, or applicable legal requirements.

When we make changes, we will update the “Last updated” date at the beginning of this page.

Material changes may also be communicated through the Site where appropriate.

Contact Us

If you have questions about this Privacy Policy, would like to exercise an applicable privacy right, or have a question about information associated with an order or customer account, please contact:

Torn Light Records
1855 N Milwaukee
Chicago, IL 60647
United States

Email: tornlight@gmail.com
Phone: 312-955-0614