Privacy Policy

Last updated: October 24, 2026

Who we are

9 Star Media is a small, independent label and store sharing the best in Bahá'í-inspired music, audiobooks and film. 9 Star Media is a DBA ("doing business as" name) of Next Movement Media, Inc., 5240 Parkmoor Dr., Westerville, Ohio 43082, USA.

This page covers our store (9starmedia.com), our newsletter and our artist portal (members.9starmedia.com). Questions about your privacy? Write to info@9starmedia.com and a real person will answer.

What we collect, and why

• Your account. Your name, email address, password (stored scrambled, so even we can't read it), billing address and, if you choose to give it, a phone number. We use these to run your account and get your purchases to you.
• Your orders. What you bought, what you paid, any sales tax, and the internet (IP) address the order came from. We use these to deliver your downloads, help if something goes wrong, prevent fraud, and keep the tax records the law asks for.
• Payments. PayPal handles every payment, so we never see or store your card or bank details. PayPal tells us whether the payment went through, along with the name, email and address on it.
• Our newsletter. If you sign up, we keep your name, your email address, and when and where you said yes (the date, your IP address and country). Our newsletter software also notes when an email is opened or a link is clicked, so we can tell what you enjoy. Turning off images in your email app stops that.
• Messages. When you contact us, we keep your name, email and message so we can help.
• Reviews. If you write a review, we show it with the name you choose.
• Gift certificates. If you send one, we use your friend's name and email address only to deliver it.
• The artist portal. If you're an artist, we keep your account and profile details, your sign-up answers, and the music, images and words you upload, so we can work with you and share your work. When you join, you can also choose to get our newsletter.
• Behind the scenes. Like every website, our servers keep short logs (your IP address, browser type and the pages you visit) to keep the site safe and working. We delete them after about two weeks.

The legal bit, made simple

If you're in the European Union or the UK, data protection law (the GDPR) asks us to explain why we're allowed to use your information. For us, it's always one of these:

• To keep our side of the deal: running your account, taking your order and delivering your downloads.
• Because you said yes: our newsletter and product notifications. You can change your mind at any time.
• Because the law requires it: keeping order and tax records.
• Because it's reasonable: keeping the site secure, preventing fraud, answering your messages and making the store better. We always weigh this against your privacy.

Cookies

Our store always uses one cookie, called nsid. It remembers your cart, keeps you logged in, and disappears when you close your browser. The store can't work without it. A second one, ns_consent, remembers your cookie choice for a year, so we don't ask on every page.

Everything else is up to you. We're getting ready to use Google Analytics, to see which pages and releases people enjoy, and the Meta (Facebook) Pixel, to show our releases to people who might like them. Neither runs unless you click Accept on the banner you see on your first visit. Saying no is just as easy as saying yes, and you can change your mind at any time with "Cookie settings" at the bottom of every page.

Our Facebook, Instagram, YouTube, X and Pinterest links are plain links: those sites learn nothing about you until you click one.

A few things come from other companies, and only when you use them:

• PayPal's payment options appear on the cart and checkout pages, and PayPal may set its own cookies there.
• Some product pages show YouTube videos in YouTube's privacy-enhanced mode. YouTube stores information only once you press play.
• The artist portal uses a sign-in cookie and a form cookie, which its sign-up and contact forms need.

Who else sees your information

We never sell or rent your information, and we don't share it with advertisers. A few trusted companies help us run things, and they may only use your information to do that work for us:

• PayPal processes payments.
• Hetzner runs our servers, in a data center in the USA.
• Cloudflare runs our domain name, and stores and delivers the music and video files you download.
• Google Workspace carries our email, including order emails.
• Amazon Web Services sends our newsletter.
• Google (Analytics) and Meta (Facebook Pixel), but only if you accept those cookies.

We may also share information with tax authorities or our accountant when the law requires it, or to protect our customers or ourselves from fraud.

Where your information lives

We're based in the United States, so your information is stored and handled there. If you're in the EU or the UK, we send it to the US to give you what you've asked for, and the companies above protect it with EU-approved safeguards such as the EU–U.S. Data Privacy Framework or Standard Contractual Clauses.

How long we keep it

• Your account: until you ask us to close it.
• Order records: seven years, because tax law asks us to.
• The newsletter: until you unsubscribe. After that we keep just your email address on a "do not send" list, so you never hear from us by mistake.
• Messages: for as long as we need to help you.
• Server logs: about two weeks.

Your choices and rights

It's your information. Wherever you live, you can ask us to:

• show you what we hold about you, or send you a copy to take elsewhere;
• correct anything that's wrong;
• delete your account and information (we do have to keep order records for tax);
• stop or limit how we use it;
• stop emailing you. Every newsletter has an unsubscribe link at the bottom.

Just email info@9starmedia.com. We'll reply within 30 days, and we may ask you to confirm it's really you. If you're in the EU or the UK and unhappy with how we've handled something, you can complain to your local data protection authority. We'd love the chance to put it right first, though.

Keeping it safe

Every page is served over a secure (HTTPS) connection, passwords are stored scrambled, card details never touch our servers, and only the people who need your information can see it. No website can promise perfect security, but we take it seriously.

Children

Accounts are for people 16 and older. If you're younger, ask a parent or guardian to buy for you (plenty of our music is made for families). We don't knowingly collect information from children under 16, so if you think a child has given us their details, tell us and we'll delete them.

Changes

If we change how we handle your information, we'll update this page and the date at the top. For big changes, we'll email account holders too.