Last updated: May 31, 2024

Welcome to Pangolin Records! Please carefully read this Privacy Policy before using the website located at https://pangolinrecords.com (“the Website”). The Website is owned and operated by PANGOLIN RECORDS (hereinafter the “Company,” “Pangolin Records,” “we,” “us,” or “our”).

This Privacy Policy informs our users (“you,” “your,” “user,” or “Customer”) how we collect, use, disclose, and secure their personal data and what privacy rights they have when they access the Website, purchase products from the Website, contact us and/or subscribe to our mailing list.

We process all personal data that we collect from our users in compliance with the privacy laws and regulations of the jurisdictions where we offer the Website, including but not limited to the Personal Information Protection and Electronic Documents Act (PIPEDA), European Union General Data Protection Regulation 2016/679 (EU GDPR), and the U.S. Privacy Laws.

If you do not agree with the provision of this Privacy Policy, please do not access or use our Service.

Table of Contents

1. Definition

2. Data controller

3. How do we collect and use your personal data?

3.1. Personal data you voluntarily submit through the website

3.2. Personal data we collect automatically

4. Disclosure of your personal data

5. UK, Switzerland and EEA Residents

6. California Residents

7. Compliance with PIPEDA

8. Storage and Processing

9. Children’s Privacy

10. Security of personal data

11. Third-party links

12. Amendments

1. Definition

The following words, whenever used in this privacy policy, shall have the meaning defined hereunder:

2. Data controller

The Company is the data controller of all personal data collected through the Website. You can request information regarding our privacy practices or exercise your privacy rights by sending your request in writing to:

Address – ESTONIA

Alternatively, you can send your request by email to through our contact form.

3. How do we collect and use your personal data?

The personal data we collect from you is either voluntarily provided by you or automatically collected by us when you access our Website.

3.1. Personal data you voluntarily submit through the Website

You voluntarily submit your personal data through the Website:

• When you register an account on the Website

When you register an account on the Website, we request you to provide us with your personal data, including, but not limited to, your name and email address.

We use the above personal data we collect from you to create your user account on the Website, enable you to sign in to your account and send you account-related notices. 

Our legal basis for processing this personal data is the performance of our contract with you.

Retention Period

We will erase the personal data you provided during your account registration within 90 days of terminating your user account unless we are legally permitted to retain any portion or all of your account registration data for a longer period based on another legal basis.

• When you place an order

When you place an order through the Website, we collect personal data, including your full name, phone number, email address, shipping address, and billing address.

We use this personal data to process your order, contact you regarding your order, and process any cancellations, returns, and refunds. Please note that although you provide your payment details when you place your order on the Website, all payment data is directly collected and processed by our third-party payment processors, PayPal and Stripe, and we do not store this data in our database.

Our legal basis for processing this personal data is the performance of our contract with you.

Retention Period

We may retain your order-related data for up to seven years after your  account termination for our business accounting and compliance purposes. At the end of these seven years, we will delete or anonymise all order-related data so it cannot be linked back to you as an individual. 

• When you subscribe to our mailing list

When you subscribe to receive direct marketing communication from us, such as our newsletter, you provide us with your full name and email address. We will also receive information about your interactions with our marketing emails.

We use this personal data to send you marketing material that we think you will find interesting.

Our legal basis for processing this personal data is your consent.

Retention Period

We may process your personal data for our marketing purposes until you withdraw your consent.

• When you contact us

When you contact us through the Website or email, we collect your name, email address, and the content of your message.

We use this data to reply to you and take other related actions to service your request.

Our legal basis for processing this personal data is our legitimate interest, which does not override your rights as a data subject. 

Retention Period

We will retain this data for as long as you have a user account on the Website or up to two years from the date of last communication. We may retain the content of your message by anonymising it for our internal business purposes.

3.2. Personal data we collect automatically

When you browse through our Website, we may automatically collect some data about you through the use of cookies. Please note that except for strictly necessary cookies, which do not require your consent, your personal data is only processed with your consent, which you grant us when you accept our cookies.

We use cookies to:

• Improve our understanding of how our users use our Website.
• Offer a more personalised experience to our users when they return to our Website.
• Improve our marketing efforts, reach new audiences and increase our sales.

You can turn off cookies or remove them from your device by changing your browser settings. To learn more about how you can manage cookies on your browser, please visit the applicable browser links provided hereunder:

• Google Chrome
• Mozilla Firefox
• Microsoft Edge
• Internet Explorer
• Opera
• Safari

Please note that blocking cookies may result in a poor user experience. To learn more about how to delete cookies, please visit  https://www.aboutcookies.org/how-to-delete-cookies/.

4. Disclosure of your personal data

We will never rent or sell your personal data. We may disclose your personal data to third parties in the following situations:

• Third-Party Service Providers

We may engage third-party service providers to perform some services on our behalf, including but not limited to payment processing, order delivery, emailing tools, marketing and support services. Your personal data may be disclosed to such third-party service providers only to the extent required for them to perform relevant functions on our behalf. In no event will these service providers process your personal data for any purpose other than those specified in our data processing agreement with them.

• Commercial Transactions

If we enter into any commercial transaction in the future, such as a merger, acquisition, sale, or purchase, all your personal data may be disclosed or transferred to a third party as part of such a transaction.

• Protection of Rights or Fulfilment of Legal Obligations

We will disclose your personal data to third parties in situations where we believe such disclosure is necessary to investigate or remedy any violations of our terms and conditions or to protect our rights and the rights of others. We will also disclose your personal data in situations where we are required to do so by applicable law/regulation or legal process, such as to comply with a subpoena.

• With Your Consent

We may share your personal data with third parties with your express consent.

5. UK, Switzerland and EEA Residents

If you are a data subject in the UK, Switzerland or EEA member state, you have the following rights relating to your personal data:

• Right to access your personal data

You have the right to request access to or a copy of your personal data by contacting us.

• Right to rectification

If the personal data we process for you is incorrect, outdated, or incomplete, you have the right to rectify, update, or complete it by accessing your account on the Website or by contacting us.

• Right to withdraw consent

To the extent the legal basis of our processing of your personal data is your consent, you have the right to withdraw your consent at any time. You may withdraw your consent from receiving direct marketing communication from us by clicking the unsubscribe link at the bottom of our marketing emails, and we will cease processing your personal data for direct marketing purposes.

• Right to the erasure of personal data

In limited circumstances, you may exercise your right to request the erasure of your personal data, such as where it is being processed unlawfully.

• Right to file a complaint

If you believe that your personal data rights are breached, we would truly appreciate it if you would contact us first to discuss the issue. Notwithstanding the foregoing, you have the right to file a complaint with your local supervisory authority.

Please note that we may request that you provide proof of your identity before servicing your data subject requests.

6. California Residents

This section pertains specifically to California residents and their rights under the California Consumer Privacy Act (CCPA). If you fall under the definition of “resident,” as defined in the CCPA, the following rights and obligations regarding your personal information apply.

Your Rights Regarding Your Personal Information:

• Right to request deletion of your personal information

You have the right to request the deletion of your personal information. Subject to the exceptions provided by law, we will honour your request for deletion of your information.

• Right to Information

Under various circumstances, you have the right to know:

• Whether we collect and use your personal information (described comprehensively in this Privacy Policy);
• The categories of personal information we collect (provided in Section 3 of this Privacy Policy);
• The purposes for which we use collected personal information (provided in Section 3 of this Privacy Policy);
• Whether we sell or share your personal information with third parties (provided in Section 4 of this Privacy Policy);
• The categories of personal information we have sold, shared, or disclosed for business purposes (provided in Section 4 of this Privacy Policy);
• The categories of third parties with whom we have shared or disclosed personal information for business purposes (provided in Section 4 of this Privacy Policy);
• The business or commercial purpose behind collecting, selling, or sharing personal information (provided in Section 4 of this Privacy Policy);
• The specific pieces of personal information collected about you (provided in Section 3 of this Privacy Policy);

We are not required to provide or delete consumer information that has been de-identified in response to a consumer request or to re-identify individual data to verify a consumer request.

• Right to Non-Discrimination for Exercising Privacy Rights

We will not discriminate against you for exercising your privacy rights.

• Right to Limit Use and Disclosure of Sensitive Personal Information

We do not process sensitive personal information of our users.

• Verification Process
  • Upon receiving your request, we will verify your identity to ensure your request relates to your own personal data in our system. This verification process may require you to provide information that matches with our records. We may also contact you through a previously provided communication method (e.g., phone or email). Additional verification methods may be employed as needed. We will solely use the personal information provided in your request for verification purposes. If additional information is necessary for verification and security reasons, we will request it and promptly delete it upon completing verification.
• Other Privacy Rights
  • You may object to the processing of your personal information.
  • You may request correction of your personal data if it is inaccurate or no longer relevant or ask to restrict the processing of the information.
  • You can appoint an authorised agent to make a CCPA request on your behalf. If you choose to do so, we may reject a request from an authorised agent without a valid proof of authorisation in accordance with CCPA guidelines.
  • You may request to opt out of future sales or sharing of your personal information with third parties. Upon receipt of an opt-out request, we will promptly act on it no later than fifteen (15) days from the date of submission.

To exercise these rights or voice a complaint about our privacy practices, please contact us at the email address provided in Section 2 of this Privacy Policy.

7. Compliance with PIPEDA

For those Customers located within the jurisdiction of Canada, the Company hereby affirms its compliance with the PIPEDA, and any other applicable provincial privacy laws. PIPEDA prescribes the manner in which the Company may collect, use, and disclose personal information in the course of its business activities throughout Canada.

• Collection and Use of Personal Information: The Company collects personal information strictly for the purposes of:
  • fulfilling orders,
  • communicating with Customers and responding to inquiries,
  • improving its products and Website,
  • providing information about promotions and product updates.

The Company will obtain the Customer’s consent prior to or at the time of collecting, using, or disclosing personal information, except as otherwise required or permitted by law.

• Disclosure and Retention of Personal Information: The Company discloses personal information solely to third-party service providers involved in the delivery of its services, such as payment processors, shipping service providers, emailing tools and marketing companies. These service providers are bound by agreements that mandate them to protect the information and utilise it exclusively for the purposes for which it was disclosed. The Company retains personal information only for the duration necessary to fulfil the aforementioned purposes or as mandated by law and has implemented retention policies that govern the treatment of personal data.
• Accuracy and Access: The Company endeavours to ensure that the personal information it collects and uses is accurate and complete. The Customer retains the right to access personal information under the Company’s control and to request corrections in case of inaccuracies.
• Safeguards: The Company has implemented physical, organisational, and technological safeguards aimed at protecting the Customer’s personal information from loss, theft, unauthorised access, disclosure, copying, use, or modification.
• Openness and Transparency: The Company is committed to providing clear, understandable, and easily accessible information about its privacy practices. The Customer may request more detailed information or raise any concerns via the contact information provided.
• Individual Access and Redress: Should the Customer have any questions or concerns regarding the handling of personal information or wish to request access to, or correction of, personal information, they may contact the Company at the email address provided in Section 2 of this Privacy Policy.
• The Customer’s use of the Website constitutes acknowledgement and consent to the processing of personal information in accordance with this policy.

8. Storage and Processing

We are committed to the principles of the General Data Protection Regulation (GDPR) in relation to the protection of personal data. However, in the course of our global operations, we may utilise third-party tools and services based outside the European Economic Area (EEA) for data processing purposes, including, but not limited to, countries such as the United States.

Please be advised that data protection and privacy laws in countries outside the EEA may not offer the same level of protection as those within the EEA. By providing your personal data to us, you consent to the transfer, storage, and processing of your data in countries outside the EEA, including but not limited to the United States.

We implement appropriate safeguards to ensure that your personal data is protected in accordance with the standards outlined in this privacy policy and in compliance with legal requirements. These safeguards include the adoption of the European Commission’s Standard Contractual Clauses for transfers of personal information between our organisation and third-party service providers and partners, who are obligated to maintain confidentiality.

In the event that we transfer your data to a third party situated in a country not acknowledged by the European Commission as providing an adequate level of protection for personal data, we will do so under a framework that ensures secure handling of your data, such as the aforementioned Standard Contractual Clauses.

Your consent to this Privacy Policy, followed by your provision of personal data, indicates your agreement to such transfer.

For more information on the mechanisms employed to ensure the legal transfer of your data, please contact us using the contact details provided in Section 2 of this Privacy Policy.

9. Children’s Privacy

We do not knowingly collect any personal information from children under the age of 13. If you are a parent of a child who has submitted any personal information through the Website, please contact us, and we will immediately investigate and delete any personal information relating to minors.

10. Security of personal data

The security of your personal data is important to us. We take all reasonable and financially viable steps to safeguard your personal data from any unauthorised access, use, modification, destruction, or loss. We have integrated various security measures into the design of our Website and in our day-to-day operations. Although we make our best effort to safeguard your personal data, you acknowledge that no mode of transmission over the Internet is one hundred percent secure; therefore, we cannot offer you any guarantees as to the absolute security of your personal data. By using the Website, you understand and accept that the transmission of data through the Website is carried out at your own risk.

11. Third-party links

Our Website may contain links that will redirect you to third-party websites. Such third-party websites are not owned or operated by us. These third-party websites are governed by their own legal terms and conditions and privacy policy. We advise our users to review all third-party legal agreements before making use of such websites. You understand that the presence of any third-party links on our Website does not constitute an endorsement of such a third party, and we cannot be held responsible for such a third party’s actions. Your decision to visit these third-party sites is entirely at your own risk.

12. Amendments

We reserve the right to make changes to this privacy policy by inclusion, modification, or removal of any part at any time. When we make any material changes to this privacy policy, we will notify you by email or by changing the last modified date on top of this privacy policy. You agree that it is solely your responsibility to review this privacy policy when you revisit the Website. Your continued use of the Website after we post the updated privacy policy will constitute your acceptance of such changes.