This privacy policy was last updated March 17, 2025.
Fans make artist careers possible, and data is how artists understand and interact with fans. This privacy policy describes how St. Paul & The Broken Bones, including managers, partners, and agents working on our behalf, collects, uses, and shares data. It also describes your rights to control data about you. Legally speaking, St. Paul & The Broken Bones LLC. is the “controller” of this data and is primarily responsible for how it is collected, used, and shared.
The disclosures in this privacy policy cover websites, stores, campaign tools, fan clubs, live events, social media accounts, and similar technologies that are operated by or on behalf of St. Paul & The Broken Bones. We refer to all of these together as our “Sites”.
Some platforms or partners we use or link to from the Sites may collect data for their own purposes as controller or joint controller. Those platforms or partners will provide their own privacy policy, which will apply to their collection and use of data collected for their own or joint purposes. We do our best to partner with companies we trust to responsibly handle data about you, but please have a look at these other privacy policies so you understand how those partners will use your data.
We use Port Merch to assist with payment processing, fulfillment, and customer support for our online merch store. Because of the way the banking system works, Port Merch acts as a “data controller” for payment processing data and uses that data independently in accordance with their privacy policy, located at https://portmerch.com/info/#faq. For everything else, Port Merch acts as a service provider and only uses data about you on our behalf.
How to contact us
If you have questions or concerns about this privacy policy or our data practices, contact us at info@qprime.com.
Information we collect and how we use it
We collect and use data about you as described here. Some data may be optional. The uses described here may be subject to your consent or other choices as required by privacy laws or other legal requirements.
If you: | We may collect: | And use it to: |
Visit our Sites. | IP address or similar network information, browser information, device identifiers information, cookie or similar identifiers, location based on IP address, language and time zone settings, and page interactions (such as scrolling, clicks, length of visits, pages viewed). | Understand traffic volume and use of our Sites, understand user demographics, identify and resolve technical issues, develop and personalize new features, generate audiences for online advertising, and measure the effectiveness of online advertising. |
Sign up for our mailing list. | Email address, name, and in some cases city/country. We also collect information about how often emails are opened and links clicked from our emails. | Operate our mailing list, understand and improve the performance of our mailing list, create audience segments on social media or advertising platforms, and maintain records of our fans. |
Log in to a Site, including a pre-save landing page or listening party, using a social media login. | Name, email address, password, location information such as city/country/postcode, and if signing up through a social media site other information about your social media account disclosed at the time of login. | Create, manage, and operate your account on the Site, connect your activity on the social media site to our Site, provide a better account creation and login experience, and better understand our fans and their preferences. |
Purchase a ticket to a St. Paul & The Broken Bones show, interact with a promotion by our label or on a social media platform, or interact with certain features on streaming platforms. | Information about your purchase or interaction. | Operate the event or promotion and help us understand our fans and personalize marketing and advertising messages. |
Contact us with a question or customer service request. | Name, email address, order information, and any information you provide about your question or concern. | Respond to your questions or concerns, research and address product or service issues. |
In addition to the above, we may use any data collected about you to manage your rights and choices, comply with legal or regulatory obligations, resolve disputes and enforce our agreements, secure our Sites, prevent fraud or other misuse, and protect the safety of our customers.
For individuals in the European Economic Area or United Kingdom, our legal bases of processing are:
- Consent for direct marketing such as sending you emails and any online advertising or tracking where consent is required.
- Necessary for performance of a contract for fulfilling merch purchases or other orders.
- Necessary for compliance with legal obligations where the data processing is required by law.
- Legitimate interest for other uses.
How we share information about you
We may share information about you in the following ways:
- With vendors who provide services on our behalf. These vendors will only use data about you for the purpose of providing services and not for their own benefit.
- With your consent or upon notice and opportunity to opt out, according to legal requirements.
- In response to a legally enforceable subpoena, court order, government inquiry, or other binding legal process.
- Where necessary to protect the rights, safety, or security of you or others.
We may engage in common data practices that are considered a “sale” of personal information under certain laws including the California Consumer Privacy Act. These include use of “custom audience” advertising features and standard online advertising tools on social media platforms such as TikTok, Meta, Google, and Snapchat.
We do not sell or share your mobile phone number with third parties or affiliates for marketing purposes. However, your phone number may be transferred to a third party as part of a sale or merger of our company or assets.
Your rights
You may have the right to control how we collect, use, or share information about you, including rights to access, correct, delete, obtain copies of, withdraw consent for, or opt out of our processing of data about you.
To exercise these rights, please contact us as described in the “How to contact us” section above. We will respond as quickly as we can within the time periods required by applicable laws, which in most cases is between 30 and 45 days.
Storage and retention of data
Our default rule is that we keep information about you as long as it is needed for the purpose it was collected or for a use disclosed above. We will use reasonable security measures to protect your data.
We may use service providers that store data in different parts of the world, including the United States. We take reasonable steps to ensure our service providers comply with international data transfer requirements, usually through approved data transfer agreements.
Children
Our Sites are not directed to children. If you believe we have collected data about your child, please contact us and we will either delete that data or obtain your parental consent for its use.
Analytics, cookies, and tracking
We may use advertising technologies including cookies, tags, pixels, or similar. These technologies allow us to identify audiences of interested fans and target those fans with promotions and advertisements that we think may be of interest.
Some of these ads may be personalized, meaning they are intended to be relevant based on your prior activity or demographic information we or the advertising partner has about you.
We may also use cookies to track items you put into your shopping cart on our Sites. If you leave the Site without making a purchase and are subscribed to receive SMS messages we may use this cookie information to determine the timing and content of abandoned shopping cart messages sent to you via SMS.
We use analytics to better understand how our Sites are used. This includes Google Analytics by Google, who requires us to disclose how they process data collected through Google Analytics. Please see this link for information on Google’s processing of data.
Service-specific Disclosures
Spotify and Apple Music. Information obtained (including through a technology partner): Once you approve our or our technology partner’s connection with an applicable music service or other third party provider, until such connection expires or until the time you terminate such connection using one of the methods described below, we may access and store some or all of the following types of information (“Third Party Data“) from your user account: the e-mail address registered with the music service or other third party provider, where available to us; information about your user account, including but not limited to your country and geo-location; and activity information, including but not limited to content you’ve interacted with (e.g., playlists and artists you follow, recently played tracks and/or channel subscriptions). Actions taken using Third Party Data: Depending on the type of campaign in which you have chosen to participate, we will use the connection with the applicable music service or other third party provider to fulfill one or more of the following actions relevant to that campaign in respect of your user account: adding and removing items to your library/collection; creating, editing and/or following playlists; subscribing to channels or other service features; and following artists. In addition, we may utilize some or all of your Third Party Data for any of the following purposes: to enhance our relationship with you by sending email updates or related special offers; to send you other relevant marketing communications, including by targeting and serving to you via third party platforms advertisements which we think will be of interest; and to conduct research and analysis. To remove our access to your account, please visit the website of the applicable music or other third party service and follow the relevant instructions:
Spotify: https://spotify.com/account/apps
Apple Music: https://appleid.apple.com/account/manage
You can request a deletion of your Third Party Data history by emailing info@qprime.com. Please note that this action will discontinue our collection of Third Party Data but you will still need to remove the original permission within the third party service as set forth above.
Changes to this privacy policy
Any material changes we make to o ur privacy policy in the future will be posted here. We will also notify you of changes through email or login notifications. We encourage you to check our privacy policy periodically to refresh your understanding of our data practices.
Local rights and disclosures
Certain local and regional privacy laws require specific disclosures related to our data practices.
US State Disclosures
Residents of certain US states (including California, Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia) may have some or all of the following rights, which can be exercised by contacting us as described in the “How to contact us” section above:
- Access and obtain a copy of personal information about you.
- Confirm the categories and/or specific pieces of personal information about you we have collected, used, disclosed, or shared with third parties.
- Correct inaccuracies or delete personal information about you.
- Opt out from profiling that may produce legal or other significant effects.
- Opt out from targeted advertising and/or the sale or sharing of personal information about you.
- Request a list of categories, or for Oregon residents specific names, of third parties to which we have disclosed personal information about you.
- Non-discrimination for the exercise of your privacy rights.
If you are a resident of California, you may opt out of having your personal information shared with third parties for the third party’s direct marketing purposes.
We collect personal information from:
- Individuals directly.
- Social networks.
- Business partners and affiliates.
- Service providers.
If you are not satisfied with the results of a privacy rights request you can contact us to appeal our decision as described in the “How to contact us” section above. Please include “Appeal” in the subject line of your message.
We may require validation of your identity before fulfilling your privacy rights request. Validation will vary depending on the type of request and risk of disclosure to an unauthorized person. Validation steps may include providing a copy of a government-issued identification or similar, logging in with an account, or providing other details that support the authenticity of the request.
You may designate a third party as an agent to make privacy rights requests on your behalf. An agent must be designated in writing or through a power of attorney. We will require a designated agent to validate their authority prior to fulfilling requests made on your behalf.
EEA and UK disclosures
If you are located in the European Economic Area or United Kingdom, you may have additional rights regarding our processing of personal data about you.
You may have the right to:
- Access and obtain a copy of personal data about you.
- Confirm the categories and specific pieces of personal data about that we have collected, used, disclosed, or shared with third parties.
- Correct inaccuracies or delete personal data about you.
- Object to or restrict processing of personal data about you.
- Opt out from direct marketing, profiling, and/or targeted advertising.
If you believe our processing of personal data about you does not comply with applicable laws, you may also have the right to lodge a complaint with your local supervisory authority.
We do not process your personal data for automated decision-making.
Our processing of your personal data may require transfer of your personal data outside of the European Economic Area and United Kingdom. In these cases we will take steps to apply approved safeguards, usually through approved data transfer agreements. You may have the right to request a copy of these safeguards, which you can do by contacting us as described in the “How to contact us” section above.
This privacy policy is ©2025 Fandation Inc.