Last updated: April 29, 2026
This Privacy Policy explains how Galactic Empire (“we,” “us,” or “our”) collects, uses, and protects information about you when you visit galacticempireband.com (the “Site”), sign up for our email list, or buy merch from us.
We’re a band, not a data company. We collect the minimum we need to send you stuff you asked for and to run our merch operation. This page tells you exactly what that means.
Galactic Empire is a music project. The data controller for the purposes of GDPR is Galactic Empire. If you have any questions about this policy or your data, contact us at info@galacticempireband.com.
We collect information in three ways:
Information you give us directly. When you sign up for our email list, you give us your email address. When you buy merch in person at a show, our point-of-sale provider (Square) collects what’s needed to process the transaction.
Information collected automatically when you use the Site. Like most websites, our Site logs basic technical information when you visit — IP address, browser type, pages visited, referring URL, and timestamps. Our email marketing platform (Klaviyo) places cookies that help us understand which emails and pages you interact with so we can send better content.
Information from third parties. If you sign up via a partner site or share your details through a tour promoter, we may receive your contact information from them. We only use it for the purpose you gave it for.
We do not collect special categories of personal data (race, religion, health, biometrics, etc.).
We use your information to:
We do not sell your personal information. Ever.
If you’re in the European Economic Area, UK, or Switzerland, our legal basis for processing your data is:
You can withdraw consent at any time by clicking the unsubscribe link in any email or by contacting us.
We share your information with service providers who help us run our operation. These providers process data on our behalf and are bound by contract to protect it.
We may also disclose information when required by law (subpoena, court order, government request) or to protect our rights, safety, or property, or yours.
We do not share your information with advertisers or data brokers.
If you’re outside the United States, your information will be transferred to and processed in the United States, where our service providers operate. We rely on Standard Contractual Clauses or equivalent safeguards where required.
We keep your email and signup information for as long as you stay subscribed, plus a reasonable period after you unsubscribe so we honor your opt-out and meet legal obligations. Order records are kept for as long as we need them for tax and accounting purposes (typically 7 years).
You can request deletion at any time — see Section 9.
Our Site uses cookies and similar technologies for:
You can disable cookies in your browser settings. Disabling essential cookies may break parts of the Site.
Depending on where you live, you have the following rights:
Everyone:
California residents (CCPA/CPRA):
EEA/UK residents (GDPR):
To exercise any of these rights, email us at info@galacticempireband.com. We will respond within 30 days.
The Site is not directed at children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect information from them. If you believe a child has given us their information, contact us and we will delete it.
We use industry-standard measures to protect your information, including encryption in transit (HTTPS) and limiting access to authorized personnel and service providers. No system is 100% secure, but we take reasonable steps.
We may update this Privacy Policy occasionally. The “Last updated” date at the top reflects the most recent revision. For material changes, we’ll notify you by email if we have your address, or by a notice on the Site.
For privacy questions, data requests, or any concerns about this policy:
Email: info@galacticempireband.com
Mail: Galactic Empire, 501 Rock Lititz Blvd, Pod 5, Suite 105, Lititz, PA 17543, USA
This policy reflects standard small-business / band-merch operations and references the data processors in use (Klaviyo, Square, WordPress). It is not legal advice.