PRIVACY POLICY.
1. Who we are
This policy describes how 9th Man Social Club LLC (“the club”, “we”, “us”), based in Oceanside, California, handles personal information collected through 9thmansocial.club and its online store. The club is the business responsible for that information.
The site is built and operated for the club by Interlink Collaborations, which acts as our service provider and as the Stripe platform through which payments are processed. It handles personal information only to run the site for us, on our instructions.
2. What we collect, and why
We only collect what a given interaction actually requires. If you never join the list and never buy anything, the only information involved is the ordinary request data every website receives.
If you join the email list
- Your email address — so we can send you club news, event invitations, and new-drop announcements. That is the only thing we do with it.
- Which page you signed up from, your browser’s user-agent string, and the country your request came from — recorded automatically with the signup. This exists to spot bot signups and junk data, not to profile you. We record the country only, never a precise location.
- The date and time you signed up — our record of consent.
If you place an order
- Your name, email address, phone number, and shipping address — collected by Stripe on its checkout page and passed to us and to our print partner. The phone number is required because several print carriers reject a delivery without one.
- Your billing address — collected by Stripe for payment verification.
- What you ordered, what you paid, and the currency — our record of the sale.
- Payment identifiers from Stripe that let us look your order up and issue a refund.
We never receive your card number. Checkout takes place on Stripe’s own hosted page. Complete card numbers, expiry dates and security codes are submitted directly to Stripe and are never transmitted to, processed by, or stored on this website or the club’s systems. We receive confirmation that a payment succeeded and nothing more.
If you email us
We keep the correspondence and whatever you chose to put in it, so that we can answer you and refer back to the conversation if you write again.
Automatically, as you browse
- Standard request data — IP address, browser type, referring page, and the pages you requested — logged by our hosting provider for security, abuse prevention, and to keep the site running. We do not use it to build a profile of you.
- Your shopping bag — stored in your own browser, not on our servers. See cookies and tracking.
What we deliberately do not collect
We do not collect your date of birth, government ID numbers, precise geolocation, biometric data, health information, racial or ethnic origin, religious beliefs, union membership, or the contents of your communications with anyone but us. Under the CCPA, we do not collect or process sensitive personal information, and we do not use personal information to make automated decisions or to profile you.
Categories, in the CCPA’s own terms
| Statutory category | What that means here | Why we have it |
|---|---|---|
| Identifiers | Name, email address, postal address, phone number, IP address | Fulfilling and delivering orders; sending club news you asked for; site security |
| Customer records (Civ. Code § 1798.80(e)) | Name, address, and telephone number tied to a purchase | Fulfilling orders and keeping the sales records the law requires |
| Commercial information | Items purchased, order totals, order history | Fulfilment, customer service, refunds, accounting |
| Internet or network activity | Browser user-agent string, pages requested, server logs | Security, abuse and fraud prevention, keeping the site working |
| Geolocation data | Country only, derived from your IP address. Never precise location. | Filtering bot signups and knowing where the club’s audience is |
| Sensitive personal information | None collected | — |
3. Where it comes from
- Directly from you — what you type into the signup form or into Stripe’s checkout page.
- Automatically from your device — the request data described above, received by our hosting provider.
- From Stripe — the order and delivery details you gave it, passed to us so we can fulfil the order.
We do not buy personal information, and we do not obtain it from data brokers, advertising networks, or public records.
4. Who we share it with
We disclose personal information only to the service providers that make the club and its store function, and only for that purpose. Each is bound to use it solely to perform its service for us. We do not disclose your information to anyone for their own marketing.
| Who | What they receive | Why |
|---|---|---|
| Stripe, Inc. | Name, email, phone, billing and shipping address, payment details, order contents | Processing your payment and preventing fraud |
| Printify, Inc. and its print providers | Name, email, phone, shipping address, and the items ordered | Printing your order and shipping it to you |
| Supabase, Inc. | Email-list entries; the order record, which holds your email but not your address | Hosting the club’s database |
| Cloudflare, Inc. | IP address and request data | Hosting and delivering the website; blocking abuse |
| Interlink Collaborations | Access to the above in the course of operating the site | Building, running, and supporting the storefront for the club |
We may also disclose information where the law requires it — to comply with a valid legal process, to enforce our terms, or to protect the rights and safety of the club, our members, or the public. If the club is ever sold or merged, order and member records may transfer with it; this policy would continue to apply to information collected before that transfer.
5. We do not sell or share your information
In the twelve months preceding the date at the top of this page, and as a matter of standing policy, we have not sold personal information and have not shared it for cross-context behavioural advertising, as those terms are defined by the CCPA. We do not disclose personal information to third parties for their own direct marketing purposes, which is also our answer under California’s Shine the Light law (Civ. Code § 1798.83).
Because we do not sell or share personal information, there is no “Do Not Sell or Share My Personal Information” process to operate — but any opt-out preference signal your browser sends, including Global Privacy Control, is consistent with what we already do.
6. Cookies, tracking, and Do Not Track
This site sets no advertising cookies, no analytics cookies, and no tracking pixels. There is no Google Analytics, no Meta pixel, no advertising SDK, and no third-party tag manager anywhere on it.
The only thing stored in your browser is your shopping bag, kept in your browser’s own local storage under the name 9msc.cart.v1 so that your bag survives a refresh. It stays on your device, is never transmitted to us as a profile, and clearing your browser data removes it.
When you proceed to checkout you leave this site for Stripe’s hosted checkout page. Stripe sets its own cookies on its own domain to run and secure that page, governed by Stripe’s privacy policy rather than this one.
Do Not Track. Some browsers can send a “Do Not Track” signal. There is no common standard for how a site must respond to one, so — as CalOPPA requires us to state plainly — we do not respond to Do Not Track signals. That is because we do not do the thing the signal is meant to stop: we do not track you over time or across third-party sites, and we do not permit anyone else to do so through this site.
7. How long we keep it
- Email-list entries — until you unsubscribe or ask us to delete them. Unsubscribing is recorded so we do not accidentally add you back.
- Order records — at least four years from the date of the order, because California tax and accounting rules require sellers to keep sales records for that period, and because it is the window in which a payment dispute can arise.
- Correspondence — up to two years after the matter is resolved.
- Server logs — kept short-term by our hosting provider for security purposes.
Stripe and Printify retain their own records of transactions they processed, for their own legal and financial obligations, under their own retention policies. Deleting information from our systems does not delete theirs.
8. Your California privacy rights
If you are a California resident, you have the rights below. We honour them for anyone who asks, whether or not the club is required by statute to do so.
- Right to know. Ask what personal information we have collected about you, where it came from, why we collected it, who we disclosed it to, and get a copy of the specific pieces.
- Right to delete. Ask us to delete personal information we collected from you.
- Right to correct. Ask us to fix personal information about you that is inaccurate.
- Right to portability. Receive your information in a portable, readable format.
- Right to opt out of sale or sharing. Already satisfied — see section 5.
- Right to limit use of sensitive personal information. Not applicable; we collect none.
- Right to non-discrimination. We will never charge you a different price, give you worse service, or refuse to sell to you because you exercised a privacy right.
- Right to review and change your information — CalOPPA’s requirement, satisfied by the request process below.
We may decline part of a deletion request where the law requires us to keep the information — most often a completed order, which we must retain for tax and accounting purposes. If that happens we will tell you which exception applies and delete everything else.
9. How to make a request
Email info@9thman.club with “Privacy Request” in the subject line, and tell us what you would like us to do.
- How we verify you. We match your request against information we already hold — usually the email address on your order or signup, and for order-specific requests, details of the order itself. We will never ask you for a password, a card number, or a government ID to verify a privacy request, and we use what you send us for verification only.
- How long we take. We acknowledge requests within 10 business days and respond substantively within 45 calendar days. If we genuinely need more time we will tell you why, and take no more than a further 45 days.
- What it costs. Nothing, for up to two requests in a twelve-month period.
- Authorised agents. Someone may make a request for you if they provide your signed written permission. We may still contact you directly to confirm.
- Unsubscribing. Every club email carries an unsubscribe link, and it works. You can also just email us.
10. How we protect it
- The whole site is served over HTTPS.
- Card data is handled exclusively by Stripe, a PCI Service Provider Level 1 certified processor, and never reaches our systems.
- The club’s database enforces row-level security with no public access policies, so no browser-side key can read or write member or order records. Every write happens server-side with a secret key that is never sent to the browser.
- Access to member and order data is limited to the people who need it to run the club and its store.
No method of transmission or storage is perfectly secure, and we will not claim otherwise. If a breach affects your personal information we will notify you as required by California Civil Code § 1798.82.
11. Children
The club’s events are family-friendly, but this website and store are intended for adults. We do not knowingly collect personal information from anyone under 13, and no one under 18 should make a purchase without a parent or guardian. If you believe a child has given us personal information, email us and we will delete it promptly. We do not sell or share the personal information of anyone under 16 — we do not sell or share anyone’s.
12. Changes to this policy
If we change this policy we will post the revised version on this page and update the “last updated” date at the top. If a change materially affects how we handle information already collected from you, we will say so prominently on the site and, where we hold your email address and the change warrants it, tell you by email before it takes effect. Your continued use of the site after a change takes effect means you accept the revised policy.
13. Contact us
Questions about this policy, or about anything we hold on you: info@9thman.club.
9th Man Social Club LLC
Oceanside, California
Last updated August 7, 2026