PRIVACY POLICY

Effective Date: October 28, 2026
Platform Domain: https://store.briangwalton.com
Governance: Mountaineers Board

This E-Commerce Privacy Policy (“Policy”) sets forth the legal and operational framework governing the collection, processing, storage, disclosure, and protection of Personally Identifiable Information (PII) and transactional data acquired through the e-commerce store platform hosted at https://store.briangwalton.com (“Store” or “Platform”), operated under the oversight of the Mountaineers Board and Walton International Business Group LLC (“Company”).

1. Scope & Legal Framework

This Policy applies strictly to all consumers, registered account holders, newsletter subscribers, and site visitors accessing the e-commerce storefront, commercial cart interfaces, payment gateways, customer support channels, digital asset downloads, and automated mailing lists managed via store.briangwalton.com.

Commercial and administrative operations for the Store are directed by the Mountaineers Board and regional operational chairs, as designated below:

• US & International Operations: Directed by Tanya Mellons, Director of International Operations.
• Asia-Pacific (APAC) Operations: Directed by Tim Yo.
• Europe, Middle East, & Africa (EMEA) Operations: Directed by Klaus Neumann.

2. Information We Collect

To support community features, email communications, and digital content delivery, we process personal data members provide directly, as well as data collected automatically through network interactions.

• Information Provided Directly by Members
  • Customer & Transaction Identity Data: Full legal name, billing address, shipping address, email address, phone number, and user credentials provided during checkout or account creation.
  • Commercial & Financial Transaction Data: Order history, item selections (e.g., physical merchandise, vinyl records, digital downloads), payment confirmation tokens, transaction IDs, and billing preferences processed via PCI-DSS compliant third-party payment gateways.
  • Newsletter & Marketing Subscription Data: Opt-in consent timestamps, subscriber email address, preference selections, tracking pixels for open/click engagement rates, and unsubscribe history.
  • Customer Support & Communication Records: Inquiries submitted via contact forms, email communications, fulfillment inquiries, and return/refund requests.
• Information Collected Automatically
  • Technical & Telemetry Data: Internet Protocol (IP) address, browser software type, operating system characteristics, referral URLs, access timestamps, and session tokens.
  • E-Commerce Analytics & Navigation Logs: Shopping cart persistence, product page view metrics, search query logs, and checkout funnel conversion steps.
  • Artificial Intelligence (AI) & Automated Processing Data: Interaction logs with AI-driven customer service bots, query inputs, automated recommendations, and model processing logs.
  • Cookies & Session Storage: Data files utilized to authenticate sessions, remember preference configurations, and maintain site navigation.

3. Summary of Processing Activities

4. Purposes of Data Processing

We process personal data in accordance with applicable privacy laws and the operational objectives of the platform:

1. E-Commerce Order Fulfillment & Logistics: Processing commercial transactions, managing cart state, dispatching physical goods, providing tracking updates, and executing digital asset access.
2. Newsletter & Marketing Communications Policy: Email communications are distributed strictly on a double opt-in or explicit consent basis. Subscriber PII is utilized solely to send store announcements, new arrival notifications, vinyl/merchandise promotions, and exclusive subscriber deals. Subscribers maintain the right to revoke consent at any time via the embedded “Unsubscribe” link or account control settings. Tracking technologies (such as web beacons) measure open rates and link engagement to optimize content relevance without selling subscriber data.
3. Artificial Intelligence (AI) & Automated Systems Policy: The Platform may deploy Artificial Intelligence, natural language processing, and machine learning models to support customer service, generate personalized product recommendations, process support tickets, and analyze store traffic patterns. Customer interactions with AI systems are monitored and logged to ensure quality control, fraud detection, and model safety. Customer PII input into AI support interfaces is strictly used for real-time service execution and is not used to train public machine learning models or sold to external AI vendors.
   Transaction Security & Compliance: Verifying identity, auditing checkout integrity, preventing fraudulent credit card transactions, and complying with applicable statutory tax reporting rules.
4. Security & System Integrity: To monitor system activity, prevent unauthorized access, safeguard personal data, and maintain platform security.

5. Data Sharing, Disclosures, & Third Parties

Personal information and subscriber data collected through the Store will never be sold, rented, leased, commercialized, or traded to third-party data brokers or advertisers under any circumstances.

Operational Disclosures & Legal Exceptions

Personal data is processed strictly for internal operational purposes and is disclosed only under the following limited circumstances:

• PCI-DSS Payment Gateways: Payment details are transmitted directly to certified third-party payment processors (e.g., Stripe, PayPal). The Store does not store complete payment card credentials on its local servers.
• Fulfillment & Logistics Partners: Necessary shipping metrics (name, address, telephone number) are transmitted to external shipping carriers and fulfillment hubs strictly to execute product delivery.
• AI & Technology Service Providers: Anonymized or necessary interaction logs are processed by contractually bound technology sub-processors supporting store hosting, email dispatch, and AI infrastructure under strict confidentiality standards.
• Statutory Mandates: Disclosure may occur where required by subpoena, court order, or binding regulatory mandate.

6. User Privacy Controls & Opt-In Governance

The Mountaineers VIP Club enforces an opt-in model, ensuring members maintain complete authority over their personal data and communication preferences:

• Newsletter Unsubscribe & Opt-Out: Direct marketing recipients may revoke subscription consent at any time via the “Unsubscribe” mechanism attached to commercial emails or via account settings.
• AI Interaction Preferences: Customers may request human customer service assistance at any time if automated or AI-assisted support interfaces fail to resolve inquiries.
• Account & Cookie Management: Customers retain controls to adjust account profile preferences and manage browser cookies used for session tracking.

7. Data Security & Storage Standards

We employ commercial-grade administrative, technical, and physical security measures to safeguard member data against loss, theft, unauthorized access, alteration, or disclosure.

• Self-Contained Ecosystem: Hosting infrastructure is maintained directly on briangwalton.com to prevent tracking by external networks.
• Data Protection: Direct messaging, account passwords, and session tokens are encrypted using standard protocol protections.
• Security Disclaimer: While we maintain robust security controls, no digital transmission or electronic storage method can guarantee absolute security.

8. Individual Legal Rights

All registered Mountaineers General Store members are granted comprehensive data privacy rights regardless of geographic location:

• Right to Access: Members may request a complete transcript of the personal data the platform holds.
• Right to Rectification: Members may update or correct inaccurate profile details, contact information, or account data.
• Right to Erasure (“Right to be Forgotten”): Members may request complete account deletion and data removal, subject to statutory record retention requirements.

To exercise any of these legal rights, please contact platform administration at info@briangwalton.com.

9. Protection of Minors

The Mountaineers General Store e-commerce platform is directed to general commercial audiences and is not intended for individuals under the age of 13 (or 16 in specified European jurisdictions). We do not knowingly process transactions or store personal data of minors without verified parental consent.

10. Revisions & Contact Information

This Privacy Policy may be updated periodically to reflect platform updates, regulatory changes, or structural adjustments. We will communicate material amendments via sitewide network notices or direct email notifications before the effective date.

For inquiries, privacy requests, or regional chapter governance questions, contact legal administration at:

Mountaineers General Store Administration

Website: https://store.briangwalton.com
Legal & Privacy Inquiries: legal@briangwalton.com
Regional Operations Contact: Tanya Mellons (US/International)