Hostile City Industries, LLC

hcdistro.com

Effective Date: May 25, 2026 | Last Updated: June 4, 2026

1. Introduction

Hostile City Industries, LLC (“Hostile City,” “HC,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what personal information we collect through hcdistro.com (the “Site”), how we use it, with whom we share it, your rights, and how to contact us.

This Policy applies to information we collect online through the Site, in connection with orders you place, and through related communications. It does not apply to information collected by third parties whose services you access through links from the Site, or to information you provide to our distribution partners or label affiliates directly.

By using the Site or placing an order, you confirm that you have read and understood this Policy.

2. Who We Are

Hostile City Industries, LLC is the “data controller” for purposes of EU/UK data protection law and the “business” for purposes of U.S. state privacy laws (where applicable):

Hostile City Industries, LLC

PO Box 29383, Philadelphia, PA 19125, United States

Phone: +1-610-557-0944

Email: [email protected]

3. Information We Collect

We collect the following categories of personal information:

3.1 Information You Provide

Identifiers: name, email address, billing and shipping address, phone number;
Account information: username, password (stored hashed), order history, saved preferences;
Transaction information: items purchased, order amounts, dates, and gift-message text;
Payment information: card details and billing data are submitted directly to our payment processors (WooPayments/Stripe and PayPal); we do not store full card numbers on our systems.
Communications: messages you send to customer support, product reviews, and any other content you submit;
Marketing preferences: whether you have opted in to email lists or other marketing.

3.2 Information Collected Automatically

Device and connection data: IP address, browser type and version, operating system, device identifiers, referring URL;
Usage data: pages visited, items viewed, time on site, clickstream, cart contents, search queries;
Cookies and similar technologies: see Section 9 below.

3.3 Information from Third Parties

Payment processors: confirmation of payment, fraud and risk signals, last four digits of payment card;
Shipping carriers: tracking events and delivery confirmation;
Social media: if you interact with our pages on Facebook, Instagram, or similar services, those platforms may share limited information with us, subject to your privacy settings on those services.
Analytics and advertising partners (where applicable): aggregated and pseudonymized data about your interactions with the Site and our marketing.

4. How We Use Your Information

We use personal information for the following purposes:

Process and fulfill orders, including payment, shipping, and customer service;
Manage your account, including authentication, password reset, and order history;
Communicate with you about your orders, account, and policy changes (transactional);
Send marketing communications if you have opted in, and allow you to opt out at any time.
Operate, maintain, and improve the Site, including analytics and troubleshooting;
Detect, prevent, and respond to fraud, abuse, security incidents, and illegal activity;
Comply with legal obligations, including tax, accounting, and recordkeeping;
Enforce our Terms of Service and protect our rights, property, and users.

5. Legal Bases for Processing (EU/UK Residents)

If you are located in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases:

Performance of a contract: to process your orders, fulfill purchases, and provide customer service;
Legitimate interests: to operate and improve the Site, prevent fraud, secure our systems, and conduct direct marketing to existing customers (where permitted);
Consent: for marketing emails (where required) and for non-essential cookies;
Legal obligation: to comply with tax, accounting, and law-enforcement requirements.

You may withdraw consent at any time where consent is the legal basis. Withdrawal does not affect the lawfulness of processing before withdrawal.

We do not sell your personal information for money. We share personal information only as described below:

6.1 Service Providers

We share information with service providers who help us operate the Site and fulfill orders, and they are bound by contractual obligations to protect that information. Current categories include:

Payment processors: WooPayments/Stripe; PayPal;
Hosting and infrastructure: DreamHost; Cloudflare; BunnyCDN;
Shipping carriers: USPS, UPS, FedEx, DHL, and international postal services;
Email and customer communications: Google Workspace
Marketing platforms (if applicable): Brevo, HubSpot;
Analytics providers (if applicable): Google, HubSpot;
Security and fraud-prevention: Wordfence and similar tools;
Accounting and tax: Intuit;
Professional advisors: attorneys, accountants, and auditors, as needed.

6.2 Distribution and Label Partners

Our distribution partner (MVD Entertainment Group) and the labels whose products are sold on the Site receive only aggregated sales reporting that identifies products and quantities, not individual customer identities, except as needed to fulfill a specific drop-ship or direct-to-customer arrangement you have agreed to.

6.3 Legal Requirements and Protection of Rights

We may disclose information when we believe in good faith that disclosure is required by law, legal process, or government request, or is necessary to protect our rights, property, or safety, or the rights, property, or safety of others. We may also disclose information in connection with a corporate transaction such as a merger, acquisition, financing, or sale of assets.

We may share information with other parties when you direct us to or otherwise consent.

7. How Long We Keep Information

We retain personal information only as long as needed for the purposes described in this Policy or as required by law. General retention periods:

Order and transaction records: 7 years, to meet tax and accounting requirements;
Customer account data: while your account is active, plus a reasonable period for fraud prevention and dispute resolution.
Marketing data: until you opt out, plus a short suppression period to honor your opt-out;
Web analytics and log data: typically 24 months or less, then deleted or aggregated;
Customer support communications: 3 years, unless retention is required longer.

When information is no longer needed, we delete or anonymize it using commercially reasonable methods.

8. Your Privacy Rights

8.1 All Users

Subject to applicable law and identity verification, you may:

Access the personal information we hold about you;
Correct inaccurate information;
Request deletion of your personal information;
Opt out of marketing communications at any time using the unsubscribe link in any marketing email or by contacting us.
Close your account.

To exercise these rights, contact us at [email protected]. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law (typically 30 to 45 days).

8.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

Right to know what personal information we collect, use, disclose, and “sell” or “share” (as those terms are defined under California law);
Right to delete personal information we have collected about you;
Right to correct inaccurate personal information;
Right to opt out of the sale or sharing of personal information for cross-context behavioral advertising;
Right to limit the use and disclosure of sensitive personal information;
Right to non-discrimination for exercising your rights.

We do not knowingly “sell” personal information for money. If we engage in “sharing” of personal information for cross-context behavioral advertising (for example, through advertising cookies), you may opt out by [OPT-OUT MECHANISM — e.g., the cookie preferences link in the site footer, or by emailing us]. We honor Global Privacy Control (GPC) signals where technically feasible.

In the past 12 months, we have collected the categories of information described in Section 3 and shared the categories described in Section 6. We have not sold personal information for money. We do not knowingly collect personal information from children under 16.

8.3 Other U.S. State Residents

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws may have rights similar to those above, including access, deletion, correction, portability, and the right to opt out of targeted advertising. To exercise these rights, contact us at [email protected]. Verification and response timelines follow applicable state law.

8.4 EU/UK/EEA Residents

In addition to the rights above, residents of the EU, UK, and EEA have the right to:

Restrict or object to processing in certain circumstances;
Receive a portable copy of your information.
Lodge a complaint with your local data protection authority (a list is available at edpb.europa.eu).

8.5 Authorized Agents

Where permitted by law, you may use an authorized agent to submit a request on your behalf. We will require proof of the agent’s authority and may require you to verify your own identity.

9. Cookies and Tracking Technologies

The Site uses cookies and similar technologies to operate, secure, and improve the Site, and (where applicable and consented) for analytics and marketing. Cookie categories:

Strictly necessary: required for the Site to function (e.g., shopping cart, login, security, fraud prevention). These cannot be disabled.
Functional: remember preferences such as language or currency display.
Analytics: help us understand how visitors use the Site so we can improve it. e.g., Google Analytics 4 with IP anonymization
Advertising and marketing: deliver and measure relevant ads. e.g., Meta/Facebook Pixel, TikTok Pixel, Google Ads

You can manage non-essential cookies through the cookie preferences control on the Site (where applicable), through your browser settings, or by following opt-out links provided by individual advertisers. Disabling certain cookies may affect Site functionality.

We honor the Global Privacy Control (“GPC”) signal as an opt-out preference signal for users in jurisdictions where this is required.

10. Children’s Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from them. If we learn we have collected personal information from a child under 13 without parental consent, we will delete it. If you believe a child under 13 has provided us with personal information, contact us at [email protected].

Some of the music and merchandise available on the Site is intended for mature audiences and contains explicit language or themes. Purchase requires that you be at least 18 years old (or the age of majority in your jurisdiction).

11. International Transfers

Hostile City is based in the United States. If you access the Site from outside the United States, your information will be transferred to, processed in, and stored in the United States, where data protection laws may differ from those in your country.

For transfers of personal information from the EU, the UK, or the EEA to the United States, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and supplementary measures where required. To request a copy of the safeguards we use, contact us at [email protected].

12. How We Protect Information

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information. These include encryption in transit (TLS), encrypted storage of sensitive data, access controls, security plugins, network protection, and regular security review.

No method of online transmission or electronic storage is completely secure. We cannot guarantee absolute security, but we commit to investigating and responding to any suspected breach. Where required by law, we will notify affected individuals and authorities of qualifying security incidents.

13. Third-Party Links and Services

The Site may contain links to third-party websites, embedded content from third parties (such as audio players or social media widgets), or integrations with third-party services. We are not responsible for the privacy practices of those third parties. Review their privacy policies before providing them with personal information.

14. Marketing Communications

If you have opted in, we may send you marketing emails about new releases, restocks, sales, and label news. Every marketing email includes an unsubscribe link, and you can opt out at any time by clicking that link or contacting [email protected].

Even if you have opted out of marketing, we will continue to send transactional messages related to your account, orders, and policy changes.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top reflects the most recent change. For material changes, we will provide notice on the Site or by email at least 30 days before the change takes effect. Continued use of the Site after the effective date constitutes acceptance.

16. How to Contact Us

Questions, requests, or complaints about this Policy or about how we handle your personal information: