Privacy policy

Effective: October 23, 2026

This privacy policy explains how Whitey Morgan Music LLC ("we," "us") and the people who help us run our website and store, such as our management team and service providers, collect, use and share information about you. It also explains the choices you have. We are responsible for the personal information described in this policy.

The disclosures in this privacy policy cover whiteymorgan.com (the official website of Whitey Morgan and the 78's), our official merch store at whiteymorgan.myshopify.com ("Whitey Morgan Merch"), our email and text lists, and our tour, presave, and music links, all run by or on behalf of Whitey Morgan Music LLC. We refer to all of these together as our "Sites."

Some third-party platforms and tools we use or link to from the Sites, such as Shopify, Laylo, Bandsintown, Feature.fm, and Meta, may also collect data for their own purposes. In those cases, that platform's own privacy policy applies to its independent collection and use of data. We do our best to work with companies we trust to collect and use data about you responsibly, but please read their privacy policies to understand how they will handle your data.

How to contact us

If you have questions or concerns about this privacy policy or our data practices, or want to make a privacy request, contact us at:

Information we collect and how we use it

We collect and use data about you as described here. Some data may be optional. The uses described here may be subject to your consent or other choices, as required by privacy laws or other legal requirements.

Our website lets you choose how you hear from us: by email or by text message. Both signups run on our Laylo signup page (laylo.com/whiteymorgan). You give only the contact detail for the option you pick.

If you: We may collect: And use it to:
Visit our Sites. IP address or similar network information, browser information, device identifiers, cookie or similar identifiers, location based on IP address, language and time zone settings, and page interactions (such as pages and products viewed, links clicked, and how you got to the Sites). Understand traffic and use of our Sites, identify and fix technical problems, measure how our ads on Meta (Facebook and Instagram) perform, and build audiences for those ads.
Sign up for our email list. Email address. Laylo and Mailchimp may also record engagement information, such as whether emails are opened and links are clicked. Operate our mailing list and send you tour, music, and merch news, understand and improve the performance of our mailing list, create audience segments on advertising platforms (Meta), and keep records of our fans.
Sign up for our text (SMS) list. Phone number, the country that goes with it, messages you send us (such as STOP or HELP), and engagement information, such as how often links are clicked. Laylo may also use your approximate location (based on your internet connection) and other technical info from your browser. Operate our text list and send you alerts, understand and improve the performance of our text list, create audience segments on Meta in hashed form as described in "Advertising on Meta" below, and keep records of our fans.
Buy something from our store. Name, billing and shipping address, email address, phone number, and products ordered. Payments are handled by Shopify and its payment processors; we do not receive or store your full card number. Fill and ship your order (including pre-orders), provide customer support, manage past orders, screen orders for fraud, create audience segments of past buyers on advertising platforms (Meta), and keep records of our fans.
Presave a release or use one of our music links (Feature.fm, e.g., sym.ffm.to links), including by connecting a Spotify, Apple Music, or other streaming account. Feature.fm collects information such as your browser and device, your approximate location (based on your IP address), and which streaming service you pick. Feature.fm only collects your name and email address if you opt in. If you connect a streaming account or choose to share your email address with us, Feature.fm may pass us your email address, which streaming service you use and whether your subscription there is free or paid, your streaming profile link and follower count, your general location (such as postal code, city, and country), and, where available, your birthdate. Complete the presave or follow you asked for, tell you when new music is out, understand our fans and their preferences, and create audience segments on advertising platforms (Meta).
Follow us on Bandsintown, or share your contact details with us through Bandsintown (for example, through a Bandsintown widget, link, or signup form; the tour dates on our website are shown with a Bandsintown widget). Name, email address, phone number, and general location. Bandsintown only shares your email address or phone number with us after you opt in and confirm it with a verification code. Send you tour news and let you know about shows near you.
Contact us with a question or customer service request. Name, mailing or email address, order information, and anything you tell us about your question or concern. Respond to your questions or concerns, and research and fix product or service problems.

Buying from our store doesn't sign you up for marketing emails or texts. Store customers only get them if they choose to sign up, and new email signups are asked to confirm their address. We don't currently offer text-message signup at checkout.

When you sign up on our Laylo page, you agree to receive recurring automated marketing messages at the phone number or email address you give, and you agree to Laylo's Terms of Service (https://laylo.com/terms), Cookie Policy (https://laylo.com/cookies), and Privacy Policy (https://laylo.com/privacy). Signing up is never a condition of buying anything. Our text program is also covered by the text-message program terms in our Terms of Use.

In addition to the above, we may use any data collected about you to manage your rights and choices, comply with legal or regulatory obligations, resolve disputes and enforce our agreements, secure our Sites, prevent fraud or other misuse, and protect the safety of our fans and customers.

For individuals in the European Economic Area or United Kingdom, our legal bases for processing are:

  • Consent for direct marketing, such as sending you emails and texts, and for any online advertising or tracking where consent is required.
  • Performance of a contract for filling your merch orders.
  • Compliance with legal obligations where the law requires the processing.
  • Legitimate interests for other uses.

How we share information about you

Our fan lists are our own data. The email addresses, phone numbers, and other details that fans and customers share with us are Whitey Morgan Music LLC's own data. We never sell or rent our fan lists, and the vendors listed below only process them for us. (Laylo, Bandsintown, and Feature.fm also keep their own records about you under their own privacy policies.)

We may share information about you in the following ways:

  • With vendors who provide services on our behalf. These vendors only use data about you to provide services to us, and not for their own benefit. They include:
Service What it does for us Their privacy policy
Shopify Runs our online merch store, checkout, payments, store analytics, and Shopify's store email tool https://www.shopify.com/legal/privacy
Laylo Fan signups (email and text) and text-message (SMS) alerts https://laylo.com/privacy
Mailchimp (Intuit) Sends our email newsletters https://www.intuit.com/privacy/statement/
Bandsintown Tour dates and tour-follow notifications https://corp.bandsintown.com/privacy
Feature.fm Presave campaigns and music smart links (e.g., sym.ffm.to) https://help.feature.fm/hc/en-us/articles/360042764451-Privacy-Policy
Meta (Facebook/Instagram) Advertising, Custom Audiences, and ad measurement https://www.facebook.com/privacy/policy
Google Workspace Our email system, if you email us https://policies.google.com/privacy
GoDaddy Hosts our website (whiteymorgan.com) https://www.godaddy.com/legal/agreements/privacy-policy
Google (Google & YouTube app for Shopify) Measures visits and purchases on our store https://policies.google.com/privacy
ShipStation and ShippingEasy Shipping labels and order fulfillment for store orders https://www.shipstation.com/privacy-policy/ and https://support.shippingeasy.com/hc/en-us/articles/115003637406-ShippingEasy-Privacy-Policy
Timesact Pre-order Pre-orders on our store https://timesact.com/policies/privacy-policy
Other Shopify store apps Apps that help us run and promote the store, such as Sales Pop and qikify (store notices and promotions) Each app's own privacy policy
Elfsight Loads the Instagram feed on our website https://elfsight.com/privacy-policy/
  • With your consent, or after giving you notice and a chance to opt out, as the law requires.
  • In response to a legally enforceable subpoena, court order, government inquiry, or other binding legal process.
  • Where necessary to protect the rights, safety, or security of you, our fans, us, or others.
  • With a buyer or successor if the business (or the band's website or store) is sold or transferred.

We use some standard data practices that are considered a "sale" or "sharing" of personal information under certain laws, including the California Consumer Privacy Act. These are Meta's "Custom Audiences" advertising feature and the Meta Pixel on our website and store, which we use to advertise on Facebook and Instagram (see "Advertising on Meta" below). You can opt out as described in "Do Not Sell or Share My Personal Information" below.

Text-message signups. We never sell, rent, or share the mobile phone numbers you give us when you sign up for texts with any third party or affiliate for their own marketing or promotional purposes. Your text-message opt-in consent itself is never sold or shared with any third party. We share text-signup phone numbers only with service providers that run our text program for us, such as Laylo, and with Meta in hashed (scrambled) form, used only to match accounts so we can show our own ads, as described in "Advertising on Meta" below.

Service-specific disclosures

If you presave a release or otherwise connect one of our Sites (such as a Feature.fm presave page) with your account on a music service such as Spotify or Apple Music, Feature.fm may access some information from that account, as described in "Information we collect and how we use it" above, and use the connection to complete the action you asked for, such as saving our new music to your library or following us. Feature.fm may share some of that information with us, and we may use it to tell you about new music, to understand our fans, and to create audience segments on Meta.

To remove access to your account, visit the music service and follow its instructions:

You can ask us to delete information we received this way by contacting us as described in "How to contact us" above. You will still need to remove the original permission in the music service, as described above.

Analytics, cookies, and tracking

Our Sites use cookies, tags, pixels, and similar technologies ("Cookies"). Cookies are small files saved to your browser that help websites work and remember things. We and our service providers use:

  • Essential cookies that make the site and store work (for example, your shopping cart and checkout).
  • Analytics cookies that help us understand how people use the site and store. On our store, this includes Shopify's built-in analytics and Google's tag (added through Shopify's Google & YouTube app), and some store apps we use may also collect visit data for analytics and marketing. Our website doesn't currently use Google Analytics; GoDaddy, our web host, runs a small performance-monitoring script on it.
  • Advertising cookies and pixels, including the Meta Pixel described below. These let us find fans who may be interested and show them our promotions and ads on Facebook and Instagram.
  • Embedded content: some pages include embedded content from other services: Spotify players on our album pages, and an Instagram feed (loaded through Elfsight) on our home page. When you view or play these, those companies may set their own cookies and collect information about you under their own privacy policies (Spotify: https://www.spotify.com/us/legal/privacy-policy/; Instagram/Meta: https://www.facebook.com/privacy/policy; Elfsight: https://elfsight.com/privacy-policy/).

Shopify's list of the cookies it uses on stores is at https://www.shopify.com/legal/cookies.

Advertising on Meta (Facebook and Instagram)

We advertise on Facebook and Instagram, which are run by Meta. Some of these ads may be personalized, meaning they are meant to be relevant to you based on your past activity or on information we or Meta have about you. We do this in two ways:

  1. Custom Audiences from our fan and customer lists. We may use our lists of past buyers and fans who signed up with us, including email addresses and phone numbers, to create audience segments on Meta. Before a list is uploaded, the contact details are hashed: turned into a scrambled code. Meta compares the hashed details with its own information only to match them to Facebook and Instagram accounts and build our audience, so we can show those people our ads or find other people with similar interests. Under Meta's Custom Audience terms, Meta may not share our list with other advertisers or third parties, and Meta deletes the hashed details after the matching process is complete.
  2. The Meta Pixel. Our website and store use the Meta Pixel, a small piece of code that lets Meta collect information about your activity on our site and store (such as pages viewed and purchases) through cookies and similar technologies, so we can measure how our ads perform and show ads to people who have visited.

Third parties, including Meta, may use cookies, web beacons, and similar technologies to collect or receive information from our site and store and elsewhere on the internet, and use that information to provide measurement services and target ads.

Who we leave out. We do not include people in our Custom Audiences if they have unsubscribed from our emails or texts, marked our emails as spam, asked us to delete their information, or asked us not to use their information for ads. If you make one of those requests after you've already been added to an audience, we will remove you from it. We do not build audiences from information about children under 13 or from sensitive information.

How to opt out of ads:

  • Ask us directly: email us or write to us as described in "How to contact us" above, with "Ad opt-out" in the subject line or at the top of your letter, and include the email address and/or phone number you used with us. We'll exclude you from our Custom Audiences.
  • Adjust your ad settings in your Facebook or Instagram account (Meta's Ad Preferences: https://www.facebook.com/adpreferences).
  • Use the Digital Advertising Alliance's opt-out tool at https://optout.aboutads.info/.
  • Block or delete cookies in your browser (note this won't stop ads based on lists, so also contact us if you want that).

Most modern browsers include cookie controls, including whether to accept first- or third-party cookies and options to delete cookies. See your browser's help pages for instructions. You may not be able to use all features of the Sites, like the shopping cart, if you block or delete cookies. General information on cookies can be found at www.allaboutcookies.org.

Do Not Track: there's no common standard for how websites should respond to browser "Do Not Track" signals, so we don't currently respond to them.

Your rights

You may have the right to control how we collect, use, or share information about you, including rights to access, correct, delete, or get a copy of it, to withdraw consent, or to opt out of our processing of data about you.

  • Emails: click "unsubscribe" at the bottom of any marketing email. We'll stop sending you marketing emails (you may still get order confirmations and shipping updates if you buy something).
  • Texts: reply STOP to any text to cancel; reply HELP for help. Message frequency varies. Message and data rates may apply. Signing up for texts is never required to buy anything. See the text-message program terms in our Terms of Use.
  • Ads: see "How to opt out of ads" above.
  • Do Not Sell or Share: see "Do Not Sell or Share My Personal Information" below.
  • See, correct, or delete your info: contact us as described in "How to contact us" above. We may need to confirm your identity (for example, by asking you to reply from the email address you used with us) before we act on the request. We may keep some information when we're required to (for example, order records for tax and accounting).

We will respond as quickly as we can, within the time periods required by applicable law.

Storage and retention of data

We keep personal information only as long as we need it for the reasons described in this policy, or as long as the law requires. If you join our email or text list, we keep your contact details until you unsubscribe or ask us to delete them. We keep order records as long as we need them for shipping, returns, taxes, accounting and legal reasons.

We use reputable service providers and take reasonable steps to protect your information. But no website, app, or method of sending data over the internet is 100% secure, so we can't guarantee absolute security.

We're based in the United States, and our service providers may store and process your information in the U.S. and other countries.

Children

Our Sites are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Our Laylo signups (texts and emails) are for people 18 and older. If you believe we have collected information about your child, contact us as described in "How to contact us" above and we'll delete it.

Changes to this privacy policy

Any material changes we make to this privacy policy will be posted here, and we'll update the "Effective" date at the top. If we make big changes, we'll take reasonable steps to let you know (for example, a notice on the site).

Local rights and disclosures

Certain local and regional privacy laws require specific disclosures about our data practices.

U.S. state disclosures

Depending on where you live (for example, California, Texas, Colorado, Virginia, Montana, and other states with privacy laws), you may have some or all of the following rights, which you can exercise by contacting us as described in "How to contact us" above:

  • Access and get a copy of personal information about you.
  • Confirm the categories and/or specific pieces of personal information about you that we have collected, used, disclosed, or shared with third parties.
  • Correct inaccuracies in, or delete, personal information about you.
  • Opt out of targeted advertising and/or the "sale" or "sharing" of personal information about you.
  • Not be discriminated against for using your privacy rights. We won't treat you differently for using any of these rights.

If state privacy laws apply and you live in one of those states, you may also have the right to opt out of profiling that produces legal or similarly significant effects. If the California Consumer Privacy Act applies and you are a California resident, you may have the right to opt out of having your personal information shared with third parties for their own direct marketing purposes.

We collect personal information from:

  • You directly.
  • Service providers and platforms you use to interact with us, such as Shopify, Laylo, Bandsintown, and Feature.fm.

Appeals. If you're not satisfied with the result of a privacy rights request, you can appeal our decision by contacting us as described in "How to contact us" above. Please put "Appeal" in the subject line of your email or at the top of your letter.

Verification. We may need to verify your identity before fulfilling your privacy rights request. Verification will depend on the type of request and the risk of disclosing information to the wrong person. Steps may include asking you to reply from the email address you used with us, or to provide other details that support the request.

Authorized agents. You may designate someone else as your agent to make privacy rights requests for you. An agent must be designated in writing or through a power of attorney, and we will ask the agent to show proof of their authority before we act on the request.

Do Not Sell or Share My Personal Information

You have the right to opt out of the "sale" of your personal information, or the "sharing" of your personal information for cross-context behavioral (targeted) advertising, including our use of Meta Custom Audiences and the Meta Pixel. To opt out, email us at merch@truegritmanagement.com or write to us at Whitey Morgan Music LLC, PO Box 6009, Bozeman, MT 59771, with "Do Not Sell or Share" in the subject line or at the top of your letter, or use the "Do Not Sell or Share My Personal Information" link on our website.

EEA and UK disclosures

If you are in the European Economic Area or the United Kingdom, you may have additional rights regarding our processing of personal data about you. You may have the right to:

  • Access and get a copy of personal data about you.
  • Confirm the categories and specific pieces of personal data about you that we have collected, used, disclosed, or shared with third parties.
  • Correct inaccuracies in, or delete, personal data about you.
  • Object to or restrict our processing of personal data about you.
  • Opt out of direct marketing, profiling, and/or targeted advertising.
  • Withdraw your consent at any time, where we rely on your consent.

Our legal bases for processing are listed in "Information we collect and how we use it" above. If you believe our processing of personal data about you does not comply with applicable laws, you may also have the right to lodge a complaint with your local data protection authority.

We do not use your personal data for automated decision-making that has legal or similarly significant effects on you.

Our processing of your personal data may require transferring it outside the European Economic Area and United Kingdom, mainly to the United States. When that happens, we take steps to apply approved safeguards, usually through approved data transfer agreements.