Privacy Policy
Last updated: 18 October 2025
1) Who We Are
Data Controller: Record Shops Near Me. Contact: support@recordshopsnearme.com.
2) Scope
This Policy explains how we collect, use, disclose, and protect personal data when you use recordshopsnearme.com and related services (the "Services"). We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable laws in Italy.
3) Data We Collect
- Account & Auth Data: email address, passwordless tokens, basic profile IDs.
- Content Data: store submissions, favorites, reviews, messages you send us.
- Usage & Device Data: pages viewed, features used, referrers, coarse location (city/country), IP addresses truncated/processed as per our analytics tools, device and browser information, crash logs.
- Transactional Data: sponsorship tier selections, payment identifiers (processed by Stripe).
- Cookies & Similar: cookie IDs, consent choices, and related metadata (see Cookie Policy).
4) Sources
We collect data directly from you, automatically via your device/browser, and from third-party services integrated into our platform.
5) Purposes & Lawful Bases
- Provide the Services (account, listings, maps, payments) — Art. 6(1)(b) contract.
- Improve & secure (debugging, analytics, preventing abuse) — Art. 6(1)(f) legitimate interests.
- Communications (service emails, updates) — Art. 6(1)(b) contract; marketing only with consent — Art. 6(1)(a).
- Legal compliance (tax, requests) — Art. 6(1)(c) legal obligation.
- Consent-based analytics/cookies — Art. 6(1)(a) consent (where required).
6) Key Processors & Services
- Supabase (database, auth, storage)
- Vercel (hosting)
- Cloudflare (CDN/WAF)
- Mapbox (maps/tiles/geocoding)
- Stripe (payments)
- Google Analytics 4 (analytics; IP handling and event data)
- Microsoft Clarity (session analytics)
- Resend (emails, if used)
These providers may process data in the EU or internationally with appropriate safeguards (e.g., Standard Contractual Clauses). See their privacy policies for details.
7) Sharing
We share data with the processors above, with authorities where required by law, and with other parties with your consent. We do not sell personal data.
8) Retention
We keep personal data only as long as necessary for the purposes described or as required by law. When no longer needed, we delete or anonymize it.
9) Security
We use technical and organizational measures (encryption in transit, access controls, least-privilege) to protect personal data. No method of transmission or storage is 100% secure.
10) International Transfers
Where data is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses.
11) Your Rights
- Access, rectification, erasure
- Restriction and objection to processing
- Data portability
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with your data protection authority (in Italy: Garante per la protezione dei dati personali)
To exercise rights, contact us at support@recordshopsnearme.com.
12) Children
Our Services are not directed to children under 13. If we learn we collected personal data from a child, we will delete it.
13) Changes to this Policy
We may update this Policy. Material changes will be indicated by updating the "Last updated" date. Continued use after changes constitutes acceptance.