Privacy & Data Protection Policy

1. Information We Collect

We collect information to provide you with seamless shopping, precise order fulfillment, warranty registration, and technical support. This includes:

• Customer Identification & Contact Data: Full name, billing address, shipping address, email address, and telephone number.
• Transaction & Order Information: Details of the audio gear you purchase, order history, configuration selections, and warranty serial numbers.
• Payment Processing Information: Payment transactions are handled directly through Stripe, Inc., our certified PCI-DSS Level 1 payment processor. Orbitone Audio never stores, processes, or has access to your full credit card number, CVV code, or banking credentials on our local servers.
• Technical & Device Data: IP address, browser type, operating system, device identifiers, and browsing patterns collected via essential and analytical cookies.

2. How We Use Your Information

We utilize collected information exclusively for legitimate business purposes:

• Processing, assembling, calibrating, and shipping your audio equipment orders.
• Communicating tracking numbers, delivery updates, and order confirmations.
• Administering our 3-Year Studio Warranty and 30-Day In-Home Audition program.
• Preventing fraudulent transactions and ensuring network security.
• Complying with applicable federal, state, and local legal obligations in the United States.

3. Payment Security & Stripe Processing

Orbitone Audio adheres to the highest industry standards for electronic commerce:

• Stripe Integration: All card payments, Apple Pay, and Google Pay transactions are encrypted using Transport Layer Security (TLS 1.3) with 256-bit encryption and tokenized directly by Stripe.
• PCI-DSS Compliance: Our checkout infrastructure complies with Payment Card Industry Data Security Standards (PCI-DSS) Level 1 requirements.
• No Data Retention of Card Data: Sensitive payment instrument details never touch our local database.

4. Cookies & Tracking Technologies

We use session cookies and persistent cookies to maintain your shopping cart state, remember your audio configuration preferences, and evaluate website performance. You can manage or disable cookie settings in your web browser at any time without restricting your ability to complete an order.

5. Information Sharing & Third Parties

We do not sell, rent, or trade your personal information to third parties. We share data only with essential service providers necessary for business operations:

• Payment Gateways: Stripe, Inc. for secure payment authorization and settlement.
• Logistics & Carriers: UPS, FedEx, and USPS for physical delivery and tracking of your equipment.
• Fraud Prevention: Automated fraud-detection tools to safeguard customer accounts.

6. Your Privacy Rights (CCPA / CPRA & GDPR)

Depending on your jurisdiction, you have specific statutory rights concerning your personal data:

• Right to Know / Access: You may request a detailed report of the personal information we maintain about you.
• Right to Deletion: You may request the deletion of your personal information, subject to statutory record-retention requirements.
• Right to Opt-Out: We do not sell your personal data. You may opt out of promotional communications at any time.
• Non-Discrimination: We will not deny goods, charge different prices, or provide a different quality of service for exercising your privacy rights.

7. Contact Us Regarding Privacy

If you have questions, inquiries, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer: