Privacy Policy

Last updated: 8 September 2026

1. Who we are

Saints of the Broken (“Saints of the Broken”, “we”, “us” or “our”) operates https://www.saintsofthebroken.com, its installable web application, online store, community features and related forms and services (collectively, the “Services”).

For data-protection purposes, Saints of the Broken, based in Malta, is responsible for deciding how your personal information is processed.

Privacy contact: thesaintsofthebroken@gmail.com

2. Information we collect

Depending on how you use our Services, we may collect:

• Contact and account information: Your name, email address, telephone number, delivery address, billing address, account details and community profile information.

• Order information: Products purchased, order history, delivery information, transaction status and limited payment information. Complete card details are normally processed directly by Shopify or the relevant payment provider and are not made available to us.

• Device and usage information: IP address, browser type, device type, operating system, time zone, pages viewed, referring website, interactions with the Services and cookie or similar identifiers.

• Communications: Information you provide when contacting us, requesting support, joining our mailing list or interacting with our community.

• Marketing information: Your marketing preferences and information about whether you opened or interacted with an email or advertisement.

• Story submissions: Your email address, chosen name and any information voluntarily included in a story submitted through our “Share Your Story” feature.

• App information: Basic preferences and cached files stored locally on your device when you install or use our web application.

3. Story submissions and sensitive information

Stories submitted to Saints of the Broken may concern painful or personal experiences. They might include information about health, relationships, abuse, beliefs or other sensitive matters.

Submitting a story is voluntary. Where a story contains sensitive personal information, we rely on the explicit consent provided through the story-submission form to review and process it.

Please do not submit:

• Passwords or security codes;

• Bank or payment details;

• Copies of identity documents;

• Medical records;

• Information that could place you or another person in danger; or

• Another person’s identifying information unless you have permission or another lawful reason to provide it.

Story submissions are treated as private unless you deliberately publish information in a public community area or separately consent to another use.

We will not publish your surname, reproduce your story publicly or identify you without specific permission. If you provide the relevant consent, an anonymised version of your experiences may inspire or inform music or other creative work. Submission does not guarantee that a story will be selected or turned into a song.

Consent to receive marketing is separate from consent to submit or process a story. You are not required to subscribe to marketing in order to share a story.

4. How and why we use personal information

We use personal information to:

• Process payments, fulfil orders and arrange delivery;

• Provide customer accounts, memberships and community services;

• Respond to questions and provide customer support;

• Review story submissions and communicate with their authors;

• Send marketing communications when you have consented;

• Measure and improve our website, app, products and campaigns;

• Detect fraud, abuse, security threats and technical problems;

• Maintain business, tax and accounting records;

• Enforce our terms and protect our legal rights; and

• Comply with applicable laws and lawful requests.

Under European data-protection law, our legal bases include:

• Performance of a contract: To process purchases, subscriptions, memberships and requested services.

• Consent: For optional marketing, non-essential cookies, story submissions containing sensitive information and other optional uses clearly explained when consent is requested.

• Legitimate interests: To secure and improve our Services, prevent fraud, provide support and operate our business, where those interests are not overridden by your rights.

• Legal obligations: To comply with tax, accounting, consumer-protection and other legal requirements.

You may withdraw consent at any time. Withdrawal does not affect processing that lawfully occurred before consent was withdrawn.

5. Cookies and similar technologies

We and our service providers, including Shopify, may use cookies, pixels, local storage and similar technologies.

Essential technologies are used to operate the website, remember your cart, secure checkout and provide requested features. Analytics, personalisation and advertising technologies are used only where permitted and, where required, after you provide consent.

You can manage optional technologies through the cookie banner or Cookie Preferences link on the website. You can also adjust your browser settings, although blocking essential cookies may prevent parts of the Services from working correctly.

6. Marketing and advertising

If you subscribe, we may send you news about music releases, community activity, products or other Saints of the Broken updates. You may unsubscribe at any time using the link included in our emails or by contacting us.

Where enabled and permitted, we may use services such as Meta or Google to measure campaigns or deliver relevant advertising. Some jurisdictions may describe this activity as “sharing” information for targeted advertising.

We do not sell personal information for money. You can withdraw consent or adjust your choices through our cookie and privacy controls.

7. When we share information

We may share only the information reasonably necessary with:

• Shopify, which powers our store and related services;

• Payment processors and fraud-prevention providers;

• Product manufacturers, print-on-demand suppliers, fulfilment partners and delivery companies;

• Website, application, cloud-hosting and technical-service providers;

• Email, customer-support and community-service providers;

• Analytics and advertising providers where permitted;

• Accountants, insurers, professional advisers and authorities when legally necessary; and

• A purchaser or successor if our business is reorganised or transferred.

Service providers may use information only in accordance with their own legal responsibilities and their agreements with us.

Information about Shopify’s handling of customer data is available at https://privacy.shopify.com/.

8. International transfers

Some service providers may process information outside Malta or the European Economic Area, including in Canada or the United States.

Where required, these transfers are protected using recognised safeguards, such as adequacy decisions, contractual protections approved by the European Commission or another lawful transfer mechanism.

9. Data retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected:

• Order and transaction records are retained for the period required by applicable tax, accounting and legal obligations.

• Mailing-list information is retained until you unsubscribe. We may retain a minimal suppression record to ensure that you are not contacted again.

• Private story submissions that are not selected for further contact are deleted or anonymised within 24 months.

• Stories selected for further discussion are retained while the project or communication remains active, subject to your consent and applicable legal obligations.

• Community and account information is generally retained until the account is closed, followed by any limited period necessary for security, disputes or legal compliance.

• Technical and analytics information is retained according to our settings and the applicable provider’s retention periods.

We may retain anonymised information that can no longer identify you.

10. Public community areas and external links

Information you deliberately post in a public community area may be visible to other people. Do not post sensitive information publicly.

Our Services contain links to third-party platforms, including music-streaming services and social networks. Once you leave our Services, the third party’s privacy policy applies.

11. Your rights

Depending on applicable law, you may have the right to:

• Request access to your personal information;

• Correct inaccurate or incomplete information;

• Request deletion of your information;

• Restrict certain processing;

• Object to processing based on legitimate interests or direct marketing;

• Receive certain information in a portable format;

• Withdraw consent at any time; and

• Lodge a complaint with a data-protection authority.

To exercise your rights, contact us at thesaintsofthebroken@gmail.com. We may need to verify your identity before completing a request. We normally respond within one month, subject to legally permitted extensions.

As Saints of the Broken operates from Malta, you may also complain to the Office of the Information and Data Protection Commissioner of Malta:

https://idpc.org.mt/

12. Security

We use reasonable administrative, technical and organisational measures designed to protect personal information. However, no internet transmission or storage system can be guaranteed to be completely secure.

If you believe information submitted to us has been compromised, contact us immediately.

13. Children

The Services and story-submission feature are not intended for children under 16. We do not knowingly collect personal information or sensitive stories from children under 16 without appropriate authorisation.

If you believe a child has provided information to us, contact us so that we can investigate and, where appropriate, delete it.

14. Changes to this policy

We may update this Privacy Policy when our Services, providers or legal obligations change. The revised version will be published on this page with a new “Last updated” date.

If a change materially affects how we use information already collected, we will provide additional notice or request new consent where required.

15. Contact us

For privacy questions, complaints or requests concerning your personal information, contact:

Saints of the Broken
Malta
Website: https://www.saintsofthebroken.com
Email: thesaintsofthebroken@gmail.com