Privacy Policy

1. Who We Are

AntiqueTunes operates the website at antiquetunes.com, selling digitised sheet music PDFs of rare early 20th century popular music. You can contact us at privacy@antiquetunes.com.

2. What We Collect

Information you provide

• Account registration: email address and display name.
• Guest checkout: email address for order confirmation and download delivery.
• Contact form: name, email address, and message content.

Payment information

We do not store your card details. All payment processing is handled by Stripe. We receive a confirmation of payment outcome and a Stripe session reference only. Stripe's own privacy policy applies to data you enter on their checkout page.

Information collected automatically

• Server logs: IP address, browser type, pages visited, timestamps. Retained for up to 90 days for security and diagnostic purposes.
• Session cookie: a temporary cookie that keeps you logged in and maintains your shopping cart. It does not track you across other websites.

3. How We Use Your Information

• To process your order and deliver your purchased downloads.
• To send your order confirmation and download links by email.
• To provide customer support and respond to your enquiries.
• To maintain the security of our website and prevent fraud.
• To comply with our legal obligations.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

• Contract: processing your order and delivering your downloads.
• Legitimate interests: maintaining site security and preventing fraud.
• Legal obligation: complying with applicable laws.
• Consent: if you opt in to any future marketing communications (currently not offered).

5. Third Parties

• Stripe: payment processing. Your payment data is governed by Stripe's privacy policy.
• Ionos: website hosting on a virtual private server in the EU/US. Server-level logs may be held by the hosting provider.
• Google Fonts: fonts are loaded from Google's CDN. Google may log the request.

We do not use advertising networks, tracking pixels, or analytics services that profile you across sites.

6. Data Retention

• Account data: retained while your account is active. Deleted within 30 days of a verified deletion request.
• Order records: retained for 7 years to comply with financial record-keeping requirements.
• Server logs: retained for up to 90 days.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Restrict or object to certain processing.
• Receive a portable copy of your data.

To exercise any of these rights, email privacy@antiquetunes.com. We will respond within 30 days.

8. Cookies

We use only essential cookies:

• Session cookie (sessionid): keeps you logged in and maintains your cart. Expires when you close your browser, or after 2 weeks if you choose "Remember me".
• CSRF token (csrftoken): protects forms against cross-site request forgery attacks.

We do not use advertising or analytics cookies.

9. Security

All data is transmitted over HTTPS (TLS). Passwords are stored as salted hashes — we never store plain-text passwords. Purchased PDF files are stored in a protected location not directly accessible from the web and are served only to validated token holders.

10. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of the page will reflect any changes. Continued use of the site after changes constitutes acceptance of the revised policy.

11. Contact

For any privacy-related questions or requests, contact us at privacy@antiquetunes.com.