Legal
隐私政策
您的隐私对我们非常重要。本政策说明我们如何收集、使用和保护您的数据。
最后更新： April 1, 2026
1. 我们是谁
Andrew Cherry Music（"我们"）是一家位于葡萄牙的专业音乐混音和母带处理服务公司。我们为全球音乐人提供混音、母带处理、咨询和反馈服务。
2. 我们收集哪些数据
您提供的个人信息
- Account: Name, email when you create an account
- Services: Project details, audio files, preferences
- Payments: Billing details via Stripe (we don't store card data)
- Communications: Messages and correspondence
- Files: Audio stems and materials uploaded for services
自动收集的数据
- Usage: Pages visited, time spent, navigation patterns
- Device: Browser type, OS, anonymized IP address
- Analytics: Aggregated statistics (with consent only)
3. 我们如何使用您的数据
服务交付（法律依据：合同履行）
- Process and deliver services
- Manage projects and communications
- Handle payments
- Provide support
网站功能（法律依据：合法利益）
- Ensure security and prevent fraud
- Improve performance and UX
- Remember preferences
分析和改进（法律依据：同意）
- Analyze usage to improve services (with consent)
- Understand valuable content
- Optimize performance
法律合规（法律依据：法律义务）
- Tax and accounting compliance
- Legal requests
- Fraud prevention
4. Cookie 和追踪
我们负责任地使用 Cookie
我们仅在获得您明确同意后使用分析 Cookie。您可以随时更改 Cookie 偏好。
必要 Cookie（始终启用）
Session, cart, security, consent preferences. Cannot be disabled.
分析 Cookie（需要同意）
Google Analytics (anonymized, with consent). Page views, performance metrics.
5. 数据共享与第三方
我们绝不出售您的个人数据。我们仅与帮助我们提供服务的可信服务商共享数据：
支付处理
Stripe processes payments securely (PCI DSS compliant).
文件存储
Google Drive stores project files with encryption and access controls.
电子邮件服务
Self-hosted Postal email server for all communications.
网站分析
Google Analytics (with consent) for anonymized usage data.
6. 您在 GDPR 下的权利
作为欧洲经济区的个人，您拥有以下权利：
访问权
Request a copy of your data
更正权
Correct inaccurate data
删除权
Request deletion
限制处理权
Limit processing
数据可携权
Export your data
反对权
Object to processing
Contact [email protected] to exercise any right. Response within 30 days.
7. 数据安全与保留
- SSL/TLS encryption for all data
- Secure file storage with access controls
- Regular security updates and monitoring
- Limited data access on need-to-know basis
数据保留
Account: While active + 7 years (tax/legal)
Files: 2 years after project completion
Payments: 7 years (accounting)
Analytics: 26 months (anonymized)
8. 国际数据传输
Based in Portugal (EU). Some providers process data outside the EU:
- Google: EU-US Data Privacy Framework
- Stripe: Standard Contractual Clauses
9. 儿童隐私
Not intended for under-16s. Contact us if a child has provided personal data.
10. 本政策的变更
We may update this policy. Significant changes will be communicated via email.