Privacy | James TJ Lee

Who operates the store

jamestjlee.com is the James TJ Lee official website and digital store operated by CLUBHEB HONGKONG LIMITED. Questions about privacy or a purchase may be sent through the Contact page or to james@jamestjlee.com.

Information we process

When you buy a digital product or commercial music license, we process the checkout email; order, amount, and payment status; licensee, named venue or project scope; effective and expiration dates; certificate, download, and transactional-email records. We do not receive or store complete payment-card numbers. Payment-method details are handled by Stripe.

When you use the contact form, we store the name, email address, inquiry category, message, and consent record that you provide.

How we use information

We use purchase information to process and reconcile payments, send receipts and secure download links, resend a link on request, provide order support, prevent abuse or fraud, handle refunds and payment disputes, and keep records reasonably required for accounting, audit, and service security.

The email supplied at checkout is not automatically subscribed to marketing, newsletters, or promotional campaigns, and is not automatically used as an analytics identity or public profile. Marketing email requires separate, explicit consent. Withdrawing marketing consent does not stop necessary transactional messages such as receipts, downloads, or order support.

First-party analytics

If first-party analytics is enabled, it accepts only a bounded event name, song identifier and slug, locale, source, event time, and an optional anonymous session identifier. Analytics events do not accept customer email, raw IP address, raw user-agent string, Stripe keys or Checkout secrets, download tokens, or arbitrary JSON. Abuse prevention may briefly use a salted hash of a network address in memory for rate limiting, but does not store it as an analytics event.

Service providers

Stripe processes payments. Resend sends transactional email. Vercel hosts and runs the website. Neon provides the database. Cloudflare R2 stores and delivers protected digital assets. Clerk is used only for owner and administrator authentication. Backblaze provides independent backup infrastructure. These providers may process limited personal or technical data needed to supply their services under their own terms and privacy practices.

Retention

Our typical maximum targets are seven years for orders, payment records, and the email attached to an order; twenty-four months for download grants and download events; twelve months for email-outbox records and provider message identifiers; thirteen months for first-party analytics; twenty-four months for contact inquiries; and a rolling maximum of twelve months for backups. Actual periods may be shorter or longer where reasonably required for legal, accounting, security, fraud or dispute operations, or customer support.

Cookies and similar technology

The site and its service providers may use cookies or similar browser storage needed for site security, checkout, and protected administration. Stripe or Clerk may also set cookies when you use their relevant services, subject to their own policies.

Your choices

You may request access, correction, or deletion through the Contact page or james@jamestjlee.com. A deletion request may be limited or delayed where transaction, dispute, security, accounting, or legal obligations still require a record.