隐私政策
您的隐私对我们非常重要。本政策说明我们如何收集、使用和保护您的数据。
最后更新: January 15, 2024
1. 我们是谁
Andrew Cherry Music("我们")是一家位于葡萄牙的专业音乐混音和母带处理服务公司。我们为全球音乐人提供混音、母带处理、咨询和反馈服务。
2. 我们收集哪些数据
您提供的个人信息
- Account Information: Name, email address when you create an account
- Service Requests: Project details, audio files, communication preferences
- Payment Information: Billing details processed securely through Stripe (we don't store payment data)
- Communications: Messages, feedback, and correspondence with us
- Project Files: Audio files, stems, and related materials uploaded for our services
自动收集的数据
- Website Usage: Pages visited, time spent, clicks, and navigation patterns
- Device Information: Browser type, operating system, IP address (anonymized)
- Analytics Data: Aggregated usage statistics (only with your consent)
3. 我们如何使用您的数据
服务交付(法律依据:合同履行)
- Process and deliver mixing, mastering, and consultation services
- Manage your projects and communications
- Handle payments and billing
- Provide customer support
网站功能(法律依据:合法利益)
- Ensure website security and prevent fraud
- Improve website performance and user experience
- Remember your preferences and settings
分析和改进(法律依据:同意)
- Analyze website usage to improve our services (only with your consent)
- Understand which content is most valuable to visitors
- Optimize our website performance
法律合规(法律依据:法律义务)
- Comply with tax and accounting requirements
- Respond to legal requests and court orders
- Prevent fraud and ensure platform security
4. Cookie 和追踪
我们负责任地使用 Cookie
我们仅在获得您明确同意后使用分析 Cookie。您可以随时更改 Cookie 偏好。
Cookie 类型
必要 Cookie(始终启用)
Essential for website functionality, security, and your account access. Cannot be disabled.
- Session management and authentication
- Shopping cart functionality
- Security and fraud prevention
- Cookie consent preferences
分析 Cookie(需要同意)
Help us understand how visitors use our website to improve the user experience.
- Google Analytics (anonymized IP addresses)
- Page views and user journey tracking
- Performance metrics and error reporting
5. 数据共享与第三方
我们绝不出售您的个人数据。我们仅与帮助我们提供服务的可信服务商共享数据:
支付处理
Stripe processes payments securely. They have their own privacy policy and comply with PCI DSS standards.
文件存储
Google Drive stores project files securely. Access is restricted and files are protected with encryption.
电子邮件服务
We use our own email server (Postal) hosted in our controlled environment for project communications.
网站分析
Google Analytics (only with your consent) helps us understand website usage with anonymized data.
6. 您在 GDPR 下的权利
作为欧洲经济区的个人,您拥有以下权利:
访问权
Request a copy of all personal data we hold about you
更正权
Request correction of inaccurate or incomplete data
删除权
Request deletion of your personal data ("right to be forgotten")
限制处理权
Request limitation of how we process your data
数据可携权
Request your data in a machine-readable format
反对权
Object to processing based on legitimate interests
如何行使您的权利
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.
7. 数据安全与保留
安全措施
- SSL/TLS encryption for all data transmission
- Secure file storage with access controls
- Regular security updates and monitoring
- Limited access to personal data on a need-to-know basis
- Regular backups with encryption
数据保留
Account Data: Retained while your account is active, plus 7 years for tax/legal requirements
Project Files: Retained for 2 years after project completion (or as agreed contractually)
Payment Records: Retained for 7 years for tax and accounting purposes
Website Analytics: Anonymized data retained for 26 months (Google Analytics default)
Communications: Retained for 3 years for business and legal purposes
8. 国际数据传输
We are based in Portugal (EU). Some service providers may process data outside the EU:
- Google (Analytics, Drive): Complies with EU-US Data Privacy Framework
- Stripe (Payments): Uses Standard Contractual Clauses for EU data protection
All international transfers are protected by appropriate safeguards as required by GDPR.
9. 儿童隐私
Our services are not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately so we can delete it.
10. 本政策的变更
We may update this privacy policy from time to time. When we do, we will:
- Update the "last updated" date at the top of this policy
- Notify you by email if the changes significantly affect your rights
- For significant changes, we may seek your renewed consent
We encourage you to review this policy periodically to stay informed about how we protect your data.
联系我们
如果您对本隐私政策或我们如何处理您的数据有任何疑问,请联系我们:
Email: [email protected]
Website: andrewcherrymusic.com
Response Time: We aim to respond within 48 hours