back to map

privacy notice

Last updated: June 2026

1. Who we are

VAST (Vinyl Atlas Store Tracer) is operated by Catalog Music Pty Ltd. We are the data controller for personal information processed through the service.

2. Information we collect

  • Account data: name, email address, login credentials.
  • Submitted content: store listings, photos, reports, and reviews you create.
  • Support correspondence: messages you send us.
  • Usage and device data: IP address, browser, device identifiers, pages visited, telemetry.
  • Cookies: essential cookies for sign-in and session; limited analytics cookies.

3. How we use it

  • Provide and operate the service (contract performance).
  • Create and secure your account (contract / legitimate interests).
  • Prevent fraud and abuse (legitimate interests, legal obligation).
  • Improve and develop features (legitimate interests).
  • Send service-related communications (contract).
  • Marketing emails only with your consent, which you can withdraw at any time.

4. Who we share it with

  • Paddle.com — our Merchant of Record for sales, subscription management, payment processing, tax compliance, and invoicing.
  • Service providers: hosting, database, authentication, analytics, and email delivery — bound by confidentiality and data-processing terms.
  • Professional advisers (legal, accounting) where necessary.
  • Authorities where required by law.

5. International transfers

Our service providers may process data outside your country. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions).

6. Data retention

We keep your data for as long as your account is active and as needed to provide the service. After account closure we delete or anonymise personal data within a reasonable period, except where retention is required by law (e.g. tax records).

7. Your rights

Subject to your local law (including GDPR for UK/EEA users), you may have the right to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent. UK/EEA users may also complain to their supervisory authority. We aim to respond within one month. Contact us to exercise these rights.

8. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and audit logging, to protect your data.

9. Contact

For privacy questions, contact Catalog Music Pty Ltd via the contact details on our site.