This Privacy Policy explains how AFAYR's website collects, uses, protects and shares personal information when people visit the site, contact us, create an account, buy music or merchandise, and participate in The Observant when that community is enabled. The operator responsible for this policy is Kupanda LLC, which operates afayrmusic.com; you can reach the operator through the Contact page.
Who we are
AFAYR is the artist identity presented through this website. References to "AFAYR," "we" and "us" mean the legal operator of this website and its authorized service providers where the context requires. Privacy questions and requests may be submitted through our Contact page. We will verify the request when needed to protect account holders and transaction data.
Information we collect
Contact inquiries. We collect the name, email address, inquiry type and message entered into the contact form, together with optional organization/publication, event date and location details. The inquiry is stored in a restricted website administrative area and a notification containing the submitted message is emailed to the website administrator. A temporary keyed anti-abuse value may be processed to limit form abuse.
Orders and purchases. WooCommerce processes product selections, quantities, transaction status, customer name, email, billing and, for shipped goods, delivery details and a telephone number where necessary. Customer and order records may be retained even if a shopping account is later deleted, where lawful retention is necessary. When the store accepts payments, they are processed by the payment method or provider offered at checkout, which operates under its own terms and privacy notices. This website does not itself store complete payment-card numbers.
Digital downloads. We process download permissions, download-request timestamps, usage counts and order-related download history to deliver purchased files, enforce disclosed limits, prevent abuse and support customers.
Accounts. Account registration and use involve email, account identifiers, login-related information and any details added to the account. WordPress and WooCommerce can use authentication and session data to secure access and maintain account and cart functions.
The Observant, when enabled. We process membership status, the chosen public-facing community name, eligible comments, replies, Likes, content reports and necessary moderation and security records. Other members can see the community name and contributions made visible through the community; account email addresses, passwords and private purchases are not intended to be displayed to other members.
Technical data and security. The site, hosting provider and security tools may process limited device, browser, connection, error and usage information needed for website functionality, troubleshooting, spam prevention and security. What is retained depends on actual hosting and service configuration.
Cookies and similar technologies
WordPress and WooCommerce use functional cookies or session data for logging in, remembering cart contents and operating checkout. The website does not currently use analytics, advertising or marketing trackers. If a payment, analytics, marketing, security or embedded-media service that sets its own cookies or similar technologies is added, we will describe it here and will not treat a technology as essential merely because it is available.
You can manage cookies using browser settings. Blocking necessary cookies may interfere with account or checkout functions. Where applicable law requires consent for nonessential technologies, we will present appropriate notice and choices.
Embedded media and outbound links
Where an approved YouTube embed is offered, the website is designed to use privacy-enhanced embedding and defer loading until interaction. When you choose to play or interact with an embed, the provider may process information under its own privacy policy. External links may lead to websites with different privacy practices.
Why we use personal information
We process information where needed to respond to requests, provide requested services, carry out purchases and delivery, manage accounts and community participation, prevent abuse, administer the site, retain necessary financial records, comply with law, enforce site rules or protect legitimate rights. Where the law of your country requires a specific legal ground for processing, we rely on the ground that fits the activity, such as performing a contract with you, meeting a legal obligation, our legitimate interest in running and protecting the website, or your consent. Contacting AFAYR does not itself subscribe you to promotional email marketing.
Who information is shared with
Depending on the feature used, personal data may be shared with:
- Payment processors and banks to authorize, settle or refund payments and address payment disputes.
- When merchandise is offered and ordered, a print-on-demand fulfillment partner that manufactures and dispatches it. The recipient, address, order and contact information needed for the order may be transferred to that provider and its delivery partners.
- Shipping carriers to transport goods, deliver packages and resolve delivery issues.
- Hosting, email and technical service providers that operate the site, store inquiries, deliver administrative notifications, maintain backups or protect website infrastructure.
- Embedded content providers if you choose to interact with their media or visit their websites.
- Public authorities or professional advisers where reasonably necessary to comply with law, protect legal rights or investigate fraud.
We do not disclose personal data for unrelated third-party direct marketing without appropriate notice and, where required, permission. We do not sell personal information for money. If that changes, we will update this policy and provide any choices the law requires.
How long information is kept
We keep personal information only for as long as it is needed for the purpose for which it was collected and for our legal obligations. In general:
- Contact inquiries: for communication, ongoing work, reasonable business records or legal needs.
- Orders, taxes and payments: for transaction fulfillment, accounting, fraud review, tax and other applicable retention duties.
- Digital download records: while needed to administer purchase access, troubleshoot problems or meet required records obligations.
- Accounts and membership: while active and afterward where necessary for legitimate retained records, safety, disputes or law.
- Community content, reports and moderation: for publication and moderation. The text of comments removed by moderators is kept only for a limited evidence period and is then emptied automatically, and the notes and reporter details of resolved reports are anonymized automatically after a limited period; a daily process does this.
- Technical and abuse-prevention records: for security and service reliability, using appropriate limits. The anti-abuse code used by the contact form is kept only briefly.
- Backups and archives: for as long as the hosting provider's backup cycle requires, so deletion from live records may not immediately remove copies held in backups.
Order, tax and accounting records may be kept for the period that the law requires. Personal details held in the purchase audit record are redacted automatically once their retention period has ended, while the tamper-evident record itself is preserved. You can ask about retention of your own data through the Contact page.
Your choices and privacy rights
Depending on your jurisdiction and circumstances, you may request to access, correct, export or erase eligible personal data, object to certain processing, restrict use or withdraw consent where processing relies on consent. Submit a request through our Contact page. We may need to verify your identity before disclosing or changing data.
WordPress and WooCommerce have personal-data export and erasure facilities, and contact inquiries and community data are covered by the same tools. The community systems also support privacy workflows, but a request may require review and may not erase records the operator must preserve for tax, transactions, moderation, fraud prevention, legal claims or other permitted reasons. Leaving The Observant is separate from deleting a website account. Download permissions may end if the related account is lawfully deleted.
Residents of some jurisdictions may have additional rights and ways to appeal privacy decisions. If you believe your rights have not been respected, you may have a right to complain to a relevant data-protection or consumer authority.
Security
We use safeguards appropriate to the service and information, including limited administrative permissions, site-access controls, a restricted private store for downloadable files and tamper-evident purchase records. Hosting, authentication, payment and email protections depend in part on our service providers. No online system can be guaranteed completely secure. Please avoid sending passwords or payment-card numbers through general inquiry forms.
Children
The website is not designed to solicit information from children under 13, and we do not knowingly seek personal information from children under 13. If you believe a child has submitted such information, contact us so it can be reviewed and handled under applicable law. Placing an order requires you to be 18 or older, and joining The Observant requires you to confirm that you are 16 or older.
International use and processing
Visitors and customers may be located in different countries. Personal data may be processed in countries where the website operator and its hosting, payment, email, delivery or fulfillment providers operate. Applicable legal rights and restrictions continue to apply. Where international transfers are regulated, we rely on suitable legal and contractual safeguards.
Changes to this policy
We may update this policy when site features, service providers, legal obligations or data practices change. The current version is always the one on this page. Where law requires additional notice or renewed consent, we will provide it.
Contact
For privacy requests and policy questions, use Contact AFAYR.