Privacy Policy

Goyo Club ("goyo," "we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have, when you visit goyo.club or shop at goyoclub.shop (together, the "Site").

By using the Site, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Site.

1. Information We Collect

1.1 Information You Provide Directly

We collect information you submit through our Contact form. The fields collected depend on what you're reaching out about:

• All inquiries: email address, name.
• General inquiries: subject, message.
• Brand / client / booking inquiries: company or brand name, Instagram or website, service type, project description, timeline.
• Artist submissions (Finding Records series): music links, an original song you'd like to perform (optional), live performance video links, best way to contact you (optional), Instagram, whether you're based in LA.
• Artist submissions (Electric Cleaners series): set/mix links, DJ experience (optional), best way to contact you (optional), Instagram, whether you're based in LA.
• Artist submissions (Neon Collection series): your role (musician, director, or both), music or video links, Instagram, whether you're based in LA.
• Newsletter / mailing list sign-up (separate subscribe form): email address, name, a phone number (optional), and an explicit marketing consent selection — we only add you to our mailing list if you affirmatively opt in through that field. If you don't opt in, we still keep the submission itself so we can see who wrote to us, but nothing about you is sent to our mailing list provider at all. If you do opt in and you give us a phone number, we store it with your sign-up, save it to your contact record in our mailing list provider (Mailchimp) as a phone number field, and use it to send you marketing text messages (SMS) through SimpleTexting, the text-messaging service integrated with our Mailchimp account. Message frequency varies, message and data rates may apply, and you can stop the texts at any time by replying STOP — see §6.

We do not require a password or account to use the Site, and we do not operate a membership/login system.

1.2 Information Collected Automatically

When you visit the Site, our hosting and analytics providers automatically collect standard technical information: IP address, browser and device type, pages viewed, referring page, and approximate timestamp of your visit. This is typical web server log data used to operate and secure the Site.

If we've configured Google Analytics (GA4) for the Site, it also collects usage statistics about how the Site is used. Outside the EEA, the UK, and Switzerland this involves a first-party cookie that lets us recognize a returning visitor; within those regions it runs cookieless. Either way it is never used for advertising — see §1.4.

1.3 Information Related to Purchases

Our online shop (goyoclub.shop) is powered by Shopify. When you add items to your cart on the Site, that cart (product selections and quantities only, no personal information) is stored locally in your browser, and while you keep browsing it is not sent to us. When you press checkout, those product selections and quantities are sent to our server so we can create the matching cart with Shopify, and you are then sent on to Shopify's checkout, where you transact directly with Shopify — Shopify collects and processes your name, shipping/billing address, email, and payment details as the payment processor and merchant platform. Shopify's own privacy policy (shopify.com/legal/privacy) governs that data. Goyo Club receives order and customer information back from Shopify as the store owner in order to fulfill your order and provide customer support.

1.4 Cookies and Local Storage

• Cart: Your shopping cart selections are stored in your browser's local storage, not a cookie, and do not leave your device until you press checkout — see §1.3.
• Functional session storage: We keep a few short-lived values in your browser's session storage so the Site behaves sensibly as you move around it: whether you've already been shown the intro video this session, how far you had watched an archive video so it can pick up where you left off, and which page you came from (so the Back button returns you there). These are not advertising identifiers, are never sent to us or to anyone else, and are cleared when you close the tab.
• Analytics (Google Analytics 4): GA4 is only loaded on the Site if we have configured a measurement ID. It runs under Google's Consent Mode v2, and what it stores depends on where you are:
  • Advertising signals are always denied, everywhere, for everyone — ad storage, ad personalization, and ad user data. We do not run advertising or remarketing, and GA4 on this Site is never permitted to build an advertising profile of you.
  • Analytics storage is enabled by default outside the EEA, the UK, and Switzerland. In those regions GA4 sets a first-party cookie (_ga, and a _ga_<container> companion) in your browser. It holds a randomly generated identifier — not your name, email, or address — so we can tell a returning visitor from a new one and count sessions rather than raw page loads. These cookies expire 400 days (about 13 months) after your most recent visit; the data itself is retained in our GA4 property for 14 months.
  • If you are in the EEA, the UK, or Switzerland, analytics storage is denied too. GA4 runs cookieless for you: no _ga cookie is set and no persistent identifier is stored on your device. This is applied automatically by region — you do not need to do anything, and we do not show you a consent banner because we are not asking you to accept anything.
• Vercel Web Analytics: cookieless page-view analytics run by our host on our behalf. It counts visits and page views in aggregate; it does not set a cookie or use a cross-site identifier to follow you between sites.
• Vercel Speed Insights: page performance measurements (Web Vitals — load speed, responsiveness, visual stability) collected so we can keep the Site fast. Performance data only, not tied to your identity.
• Bot protection (Vercel BotID): runs behavioral checks on form submissions to block spam/automated abuse. It does not build an advertising profile of you.
• Embedded video (YouTube): Archive videos are embedded through YouTube's privacy-enhanced (no-cookie) player, which does not set tracking cookies before you press play. Loading a page that contains an embed still reveals your IP address and browser to Google/YouTube, and once you start playback YouTube may store playback data under its own privacy policy — see §9.

We do not use third-party advertising or retargeting cookies. The only cookies we set are the first-party Google Analytics cookies described above (_ga and its _ga_… companion), and only for visitors outside the EEA, the UK, and Switzerland. The one other case where a cookie can end up on your device through this Site is if you press play on an embedded YouTube video, which is YouTube's own cookie under Google's privacy policy, not ours — see §9.

We do not operate a cookie-consent banner. Visitors in regions where consent is required for analytics cookies are served cookieless by default, so there is nothing for them to consent to. You can block or clear our analytics cookies at any time in your browser settings, or install Google's opt-out browser add-on (tools.google.com/dlpage/gaoptout) — see §6.

2. How We Use Your Information

We use the information described above to:

• Respond to inquiries, bookings, and artist submissions you send us.
• Operate, secure, and improve the Site.
• Send you marketing/newsletter communications by email, but only if you've opted in via the subscription consent field.
• Send you marketing text messages (SMS) about goyo events, releases, and announcements — only if you've opted in via that same consent field and given us a phone number.
• Fulfill and support orders placed through goyoclub.shop (in conjunction with Shopify).
• Understand aggregate Site usage (analytics) when enabled.

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

3. How We Share Your Information

We do not sell your personal information. We share information only with the service providers who help us run the Site, each acting on our behalf for the purpose listed:

Provider	Purpose	Data Involved
Vercel Inc.	Website hosting, edge delivery, cookieless Web Analytics, Speed Insights (Web Vitals), bot protection on form submissions (BotID), and storage of Contact and sign-up form submissions at rest	IP address, request logs, aggregate usage and performance data, behavioral signals from form submissions used to tell a person from a bot, the contents of forms you submit
Google LLC (Google Fonts, Google Analytics, YouTube)	Web font delivery; usage analytics; embedded video playback and video thumbnail delivery	IP address (font, video, and thumbnail requests), usage data with a first-party analytics cookie outside the EEA/UK/Switzerland and cookieless within them (analytics), playback data if you press play on an embedded video
Bunny (BunnyWay d.o.o.)	Video/image content delivery (CDN)	IP address (delivery only)
Resident Advisor Ltd.	Event poster image delivery on our events pages — posters load directly from RA	IP address (delivery only)
Shopify Inc.	Online store, checkout, payment processing, order fulfillment; product image delivery from Shopify's CDN while you browse the shop	Name, contact info, shipping/billing address, payment details (at checkout); IP address (image delivery while browsing)
Resend	Delivery of the internal email notification we receive when you submit the Contact form or the newsletter sign-up form	The contents of that submission (name, email, message content; phone number if you provided one on the sign-up form)
Mailchimp (Intuit Inc.)	Newsletter/mailing list delivery, and the contact record that our SMS marketing is sent from — only for contacts who opt in	Email address, name (if provided), phone number (if provided), marketing consent status (a single opt-in covering both email and SMS)
SimpleTexting (SimpleTexting, LLC)	Marketing text message (SMS) delivery — the text-messaging service integrated with our Mailchimp account; used only for contacts who opted in and gave us a phone number	Phone number, SMS consent status, and message send/delivery history (including STOP and HELP replies)
HYPT Inc. (하잎트)	Website development and technical maintenance on our behalf	Access to the systems above as our service provider

Some of the rows above — YouTube video and thumbnails, Shopify product images, Resident Advisor event posters, and Bunny video — see your IP address simply because your browser requests those images and videos directly from them as a page loads. We are not sending them anything about you; that's how the media reaches your screen.

We do not permit these providers to use your information for their own independent marketing purposes. We may also disclose information if required by law, to protect our rights, or in connection with a business transfer (e.g., merger or acquisition), in which case this Privacy Policy would continue to apply to your information.

4. International Data Transfers

Several of our service providers (Vercel, Google, Mailchimp, SimpleTexting, Shopify) process data on servers located in the United States. Two may involve processing outside the United States: Bunny, which may deliver media via infrastructure located elsewhere (e.g., the EU), and Resident Advisor, a UK company whose event posters are delivered to your browser through a global content delivery network. By using the Site, you understand your information may be processed in these locations.

5. Data Retention

• Contact form submissions are retained for as long as reasonably necessary to respond to and document your inquiry, and are periodically reviewed for deletion.
• Newsletter contacts are retained until you unsubscribe or we delete the list.
• Google Analytics user and event data is retained in our GA4 property for 14 months, after which Google deletes it automatically. The analytics cookies in your browser (set only outside the EEA, UK, and Switzerland — see §1.4) expire 400 days after your most recent visit, and you can clear them yourself at any time.
• Other automatically collected server logs are retained per each provider's standard retention window (typically a matter of months) and are not indefinitely archived by us.
• Order and payment information is retained by Shopify per its own retention practices.

6. Your Choices and Rights

• Marketing emails: every newsletter email includes an unsubscribe link; you can also email us at info@goyo.club to be removed.
• Marketing text messages (SMS): reply STOP to any text you receive from us and we will stop texting you; reply HELP for help. You can also email info@goyo.club to have your number removed. Message frequency varies and message and data rates may apply.
• Email and SMS are separate channels: replying STOP ends the texts but does not unsubscribe you from our emails, and clicking unsubscribe in an email does not stop the texts. Tell us at info@goyo.club if you want out of both.
• Access, correction, or deletion: you can request a copy, correction, or deletion of the personal information we hold about you by emailing us at info@goyo.club. We will respond within a reasonable time.
• Browser controls: you can block or clear local storage/cookies in your browser settings at any time; this may disable cart persistence but will not affect your ability to browse the Site.
• Opting out of analytics: if you are outside the EEA, UK, and Switzerland and would prefer not to be counted, you can clear or block our analytics cookies (_ga and its _ga_… companion) in your browser settings, use your browser's tracking-protection mode, or install Google's official opt-out browser add-on at tools.google.com/dlpage/gaoptout. None of this affects your ability to use the Site. Visitors inside those regions are already served cookieless and need do nothing.
• Orders: for anything related to a Shopify order (refunds, address changes, payment issues), contact us directly and we'll coordinate with Shopify on your behalf.
• Do Not Track: some browsers can send a "Do Not Track" (DNT) signal. There is no common industry standard for how sites should respond to it, and the Site does not currently act on DNT signals — the analytics described in §1.4 behave the same whether or not your browser sends one. The controls listed above (clearing or blocking our analytics cookies, tracking-protection mode, Google's opt-out add-on) work regardless, and visitors in the EEA, UK, and Switzerland are served cookieless in the first place.

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have the right to:

• Know what categories of personal information we've collected about you and why.
• Request deletion of personal information we hold about you, subject to certain exceptions.
• Correct inaccurate personal information.
• Opt out of the "sale" or "sharing" of personal information — we do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of today. This is also why you will not find a "Do Not Sell or Share My Personal Information" link on the Site: that link exists for businesses that do sell or share, and we do not. For the same reason, an opt-out preference signal such as Global Privacy Control (GPC) has nothing to act on here — we already do not sell or share, for every visitor, whether or not the signal is sent. The advertising signals we send to Google Analytics are denied for everyone (§1.4), and Google Signals is turned off on our analytics property.
• Not be discriminated against for exercising any of these rights.

To exercise any of these rights, email us at info@goyo.club. You may also designate an authorized agent to submit a request on your behalf.

8. Children's Privacy

The Site is not directed to children, and our events are 21-and-over. We do not knowingly collect personal information from anyone under 13 (or under 16, for California purposes). If you believe a child has provided us with personal information, contact us at info@goyo.club and we will delete it.

9. Third-Party Links

Our Site links out to third-party platforms we don't control, including Instagram, TikTok, X, Facebook, YouTube, SoundCloud, Bandcamp, Spotify, Apple Music, Resident Advisor, and artists' own websites (via artist profiles and the social links on our About page). We embed YouTube videos throughout our archive using YouTube's privacy-enhanced (no-cookie) player, so no tracking cookies are set before you press play — once you start playback, whatever YouTube/Google stores is governed by their own privacy policy, independent of this one. We are not responsible for the privacy practices of any third-party site you reach through our links.

10. Data Security

We use industry-standard measures to protect the information we hold, including encrypted transport (HTTPS) for all Site traffic and access controls on the systems and providers listed in §3. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Effective Date" above. We encourage you to review this page periodically.

12. Contact Us

Goyo Artist Collective, LLC (doing business as "Goyo Club")

• Address: 800 S Western Ave Apt 610, Los Angeles, CA 90005-5600
• Email: info@goyo.club
• Website: goyo.club
• Shop: goyoclub.shop