Legal
Privacy Notice
Last updated: September 2026
1. Who we are
This site is operated by Outta Luck Records. Outta Luck Records is the data controller for the personal data collected through this site. Contact: kid.vista@yahoo.com.
2. What we collect
- Email address — provided at checkout or when creating an account
- Account credentials — if you create a membership account
- Order history — what you purchased and when
- Support messages — if you contact us
- Usage and device data — IP address, browser type, pages visited
Payment details (card numbers, billing address) are collected and processed directly by Paddle, our Merchant of Record — we never see or store your card details.
3. Why we use it
- Delivering your purchases and download links (contract performance)
- Managing your membership account (contract performance)
- Security and fraud prevention (legitimate interests)
- Improving the site (legitimate interests)
- Customer support (legitimate interests)
- Meeting legal and tax obligations (legal obligation)
4. Who we share it with
- Paddle — our Merchant of Record, for payment processing, subscription management, tax compliance and invoicing
- Service providers — hosting, analytics and support tooling that help us run the site
- Professional advisers — legal and accounting, where needed
- Authorities — where required by law
We do not sell your personal data.
5. Retention
We keep your data only as long as needed for the purposes above (including tax and accounting requirements), then delete or anonymise it.
6. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or port your data, object to processing, withdraw consent, and complain to a supervisory authority. To exercise any of these, email kid.vista@yahoo.com. We respond within one month.
7. Security
We use appropriate technical and organisational measures — including encryption in transit and access controls — to protect your data.
8. Cookies
This site uses only essential cookies and storage needed to run the site and keep you signed in. Embedded players (such as Spotify and YouTube) may set their own cookies when you interact with them — those are governed by the respective services' privacy policies.