Privacy Policy
Last updated: June 13, 2026
Who we are
Back to the Movie Theater (“we,” “us,” “our”) operates the website at bttmtpodcast.com and the merch store available on it. For the purposes of the EU/UK General Data Protection Regulation (GDPR), we are the data controller for the personal data described below. If you have any questions, contact us at support [at] bttmtpodcast.com.
What we collect
- Account data — when you sign in, your email address and the display name you choose.
- Order data — when you buy merch, your name, email, phone (optional), shipping address, and the items, amounts, and status of your order.
- Contact data — if you use our contact form, your name, email, and message.
- Payment data— your card details are entered directly into Square's secure payment fields and are processed by Square. We never receive or store your full card number.
- Usage data — if you consent (see Cookies below), Google Analytics collects standard analytics data such as pages viewed and approximate location. Basic server logs (e.g. IP address) are kept by our host for security and reliability.
Why we use it and our legal bases
- To create and manage your account and process sign-in — performance of a contract.
- To process, fulfill, and support your orders — performance of a contract.
- To respond to messages you send us — legitimate interests (helping you).
- To prevent spam and fraud (e.g. reCAPTCHA) — legitimate interests.
- To measure and improve the site via analytics — your consent.
- To meet legal, tax, and accounting obligations — legal obligation.
Cookies and analytics
We use a small number of essential cookies required to run the site (such as keeping you signed in and remembering your cart and consent choice). These do not require consent.
We also use Google Analytics, which sets analytics cookies. If you are in the EEA, the UK, or Switzerland, Google Analytics does not load until you accept it via our cookie banner, and you can decline. Outside those regions, analytics runs by default. Our contact form uses Google reCAPTCHAto prevent spam; this is subject to Google's Privacy Policy and Terms.
Who we share it with
We share personal data only with the service providers that make the site work, each acting as our processor:
- Square — payment processing.
- Printful — printing and shipping your order (receives your name and shipping address).
- Supabase — database and authentication hosting.
- Resend — sending transactional email (e.g. order confirmations).
- Google — analytics and reCAPTCHA.
- Vercel — website hosting and security.
We do not sell your personal data, and we do not share it for cross-context behavioral advertising.
International transfers
We are based in the United States, and our providers may process data in the U.S. and elsewhere. Where data is transferred out of the EEA/UK, our providers rely on appropriate safeguards such as the EU Standard Contractual Clauses.
How long we keep it
We keep account data while your account is active, and order records for as long as needed to provide support and to meet tax and accounting obligations. Contact-form messages are kept only as long as needed to handle your request. Analytics data is retained per Google's default retention settings.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent at any time. If you are in the EEA/UK, you also have the right to lodge a complaint with your local data protection authority.
California residents: you have the right to know what personal information we collect, to request deletion, and to correct it, and the right not to be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA.
If you have an account, you can delete your data yourself from your account page. Otherwise, email us at support [at] bttmtpodcast.comand we'll handle your request. We may need to verify your identity first, and may retain limited records where the law requires it.
Children
The site is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect their personal data.
Changes to this policy
We may update this policy from time to time. When we do, we'll revise the “Last updated” date above and, for material changes, provide a more prominent notice.
Contact
Questions or requests? Email us at support [at] bttmtpodcast.com.
See also our Terms of Service.
