Privacy

Who we are

This policy covers the TORNADO website (tornadorockband.com) and the TORNADO mobile app for iOS and Android, both operated by the rock band TORNADO, Sofia, Bulgaria. For any privacy question or request, write to shop@tornadorockband.com; for anything about the app, apps@tornadorockband.com.

Browsing the website

The website uses no analytics, no advertising and no tracking cookies. Your shopping basket and the delivery form are saved only in your own browser (local storage) so they survive a page reload; they are never sent to us until you confirm an order.

The site is hosted on Cloudflare, which processes technical data such as your IP address to deliver pages and protect against abuse. The order form uses Cloudflare Turnstile to tell people from bots. Embedded YouTube and Facebook videos load from those services only when you play them, under their own privacy policies.

Orders and restock requests

When you place an order we receive your name, phone number, email address, the delivery address or courier office you chose, and the items ordered. When you ask to be told about a sold-out item we receive your email address and the product.

We use this only to fulfil and deliver your order, to contact you about it, and to send the confirmation email. The legal basis is performing the contract with you. Payment is cash on delivery — we never receive card details.

Your order details are shared only with the courier you chose, to deliver it. We do not sell your data or use it for marketing. We keep order records only as long as needed to fulfil the order and meet legal accounting obligations.

The mobile app

The app has no accounts and needs no sign-in. It loads its content from our website; news images and videos come from Facebook's servers and video thumbnails from YouTube's as you browse, so those companies see your device's internet address the same way a web browser would.

If you allow notifications, we store your device's push token together with your chosen language, platform (iOS/Android), app version and notification topics (concerts, news), so we can tell you about new shows and posts. The token is not linked to your name or any contact details. Notifications are delivered through Expo's push service (which receives a device identifier for this purpose) and Apple/Google.

Adding a concert to your calendar happens on your device; we do not read your calendar. The app sends us no analytics or crash reports.

Your data

If you turn notifications off in the app, we delete your device's notification token; if you uninstall the app, it is removed automatically after the next notification cannot be delivered.

You can ask us at any time to see, correct or delete the personal data we hold about you, or to stop using it — just email shop@tornadorockband.com.