Privacy Statement

Privacy Policy – beatbush.com

Effective date: January 24, 2026

Last updated: January 24, 2026

Beatbush Records (“we”, “us”, “our”) operates the website https://beatbush.com (the “Site”). We are committed to protecting your privacy and to processing your personal data in a transparent, secure, and lawful manner in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have.

1. Who is the data controller?

Controller:

BeatBush Records

The Netherlands

Email: info@beatbush.com

2. What personal data do we collect and from which sources?

We collect the following categories of personal data:

Data you actively provide to us

• Name or username
• Email address
• [If applicable: billing name, billing address, VAT number for business customers]
• Any message or details you send via our contact form
• Account credentials (if we offer user accounts or customer logins)
• Payment-related information (handled exclusively by our payment processor — we do not store full credit card details)

Data we collect automatically

• IP address
• Browser type and version
• Operating system and device type
• Approximate location (city/country level only, derived from IP)
• Pages visited, time spent on pages, and referral sources

Data we may receive from third parties

• Confirmation data from our payment processor (e.g. Stripe, Mollie, PayPal)
• [If applicable: subscriber information from our email service provider, e.g. Brevo or MailerLite]

We do not collect special categories of personal data (sensitive data such as racial or ethnic origin, political opinions, health data, etc.).

3. Why do we process your personal data and what is the legal basis?

We only process personal data when we have a valid legal basis under Article 6 GDPR. The purposes and bases are as follows:

• To provide you with access to free or purchased sample packs and downloads → Legal basis: performance of a contract (Art. 6(1)(b) GDPR) → Data involved: email, name, IP, purchase history
• To process payments and issue invoices → Legal basis: performance of a contract (Art. 6(1)(b)) + legal obligation (Art. 6(1)(c)) → Data involved: name, email, billing address, order information
• To send transactional emails (order confirmations, download links) → Legal basis: performance of a contract (Art. 6(1)(b))
• To send newsletters and marketing communications (new releases, promotions) → Legal basis: your consent (Art. 6(1)(a)) — you can withdraw consent or unsubscribe at any time
• To respond to your support requests or contact form messages → Legal basis: legitimate interests (Art. 6(1)(f)) — we have a legitimate interest in answering customer inquiries
• To improve the website, analyse usage, and prevent abuse or fraud → Legal basis: legitimate interests (Art. 6(1)(f))
• To comply with legal obligations (tax records, accounting, refunds) → Legal basis: legal obligation (Art. 6(1)(c))

4. Who do we share your personal data with?

We only share personal data when strictly necessary and always with appropriate safeguards:

• Payment processors (e.g. Stripe, Mollie, PayPal) — only the minimum data needed to complete transactions
• Email service providers (e.g. Brevo, MailerLite, Mailchimp) — for sending newsletters and transactional emails
• Hosting and technical service providers (e.g. Vercel, Cloudflare, Hetzner)
• Analytics providers (e.g. Plausible, Fathom, or Google Analytics with IP anonymisation enabled)
• Public authorities — only when required by law (e.g. tax authorities or law enforcement with a valid order)

We do not sell your personal data to third parties for their own marketing purposes.

5. International data transfers

Some of our service providers are located outside the European Economic Area (EEA), for example in the United States. When we transfer personal data to countries without an adequacy decision from the European Commission, we rely on appropriate safeguards such as:

• Standard Contractual Clauses (SCCs)
• [If applicable: EU-US Data Privacy Framework certification for relevant providers]

6. How long do we keep your personal data?

We retain your data only for as long as necessary for the purposes listed above:

• Purchase and order records → retained for 7–10 years to comply with Dutch tax and accounting laws
• Newsletter subscription lists → kept until you unsubscribe
• Support tickets and contact form messages → maximum 12 months after our last interaction
• Server logs and raw analytics data → maximum 14–26 months, after which data is deleted or fully anonymised

7. Your rights under the GDPR

You have the following rights regarding your personal data (subject to legal exceptions):

• Right to access your data (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16)
• Right to erasure (“right to be forgotten”) (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object to processing based on legitimate interests or for direct marketing (Art. 21)
• Right to withdraw consent at any time (where processing is based on consent)
• Right to lodge a complaint with a supervisory authority (in the Netherlands: Autoriteit Persoonsgegevens — www.autoriteitpersoonsgegevens.nl)

To exercise any of these rights, please email us at [your-privacy-email@beatbush.com]. We will respond within one month (extendable in complex cases).

8. Security of your personal data

We use appropriate technical and organisational measures — including HTTPS/TLS encryption, access controls, regular security updates, and limited staff access — to protect your data against unauthorised access, loss, or destruction.

9. Cookies and similar technologies

[If you use only essential cookies:]

We use only strictly necessary cookies required for the Site to function. No tracking or marketing cookies are placed without your consent.

[If you use analytics or other cookies:]

We use cookies and similar technologies to improve your experience and analyse Site usage. You can manage your preferences via our cookie banner. For full details, see our separate Cookie Policy [link if you have one] or the summary below:

• Essential cookies → based on legitimate interests or contract necessity
• Analytics cookies → based on legitimate interests (using privacy-first tools) or your consent
• Marketing cookies → only with your explicit consent

10. Children’s data

Our Site is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have done so, we will delete the data immediately. Contact us if you believe this has occurred.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The new version will be posted here with an updated “last updated” date. If changes are material, we will notify you by email (if we have your address) or with a prominent notice on the Site.

12. Contact us

If you have any questions, requests, or concerns about this Privacy Policy or your data, please contact us at:

Email: info@beatbush.com

Thank you for choosing Beatbush Records.