Privacy Policy
Last Updated: 2024-12-17
- Privacy Policy
- Introduction
- Data Controller
- Information I Collect
- Data Collected by Payment Processors
- How I Collect Your Data
- Purpose of Data Collection
- CCPA/CPRA Privacy Notice (For California Residents)
- Data Retention and Unsubscribing
- Legal Basis for Service Emails
- Cookies
- What Are Cookies?
- How I Use Cookies
- Third-Party Cookies
- Managing Cookies
- Data Storage
- Data Disclosure and Security
- Legacy Data from Past Transactions
- Your Rights
- External Services
- Children's Privacy
- Third-Party Links
- Changes to This Privacy Policy
- Contact Me
Introduction
I respect your privacy and am committed to transparency and honesty. This Privacy Policy explains how I collect, use, store, and disclose your personal information when you use my website and services. Please read this policy carefully. By accessing or using my website, subscribing to my newsletter, or purchasing my products, you agree to the terms outlined in this Privacy Policy. If you have any questions, please contact me at spektralisk@gmail.com
Data Controller
Spektralisk Audio Daniel Stańczykiewicz
Zachodnia 21/80
30-350 Kraków
Information I Collect
I collect the following personal data to provide, improve, and personalize my services:
- Email Address
- To communicate with you and provide relevant updates, newsletters, and product-related information.
- Consent Flags
- Information about whether you have explicitly consented to receive marketing communications, which I store as part of your subscription preferences.
- Name (optional)
- I don’t explicitly collect your name, but it may become available to me if you update your preferences through Kit (my newsletter provider) or if you purchased a product on Gumroad using PayPal in the past (this is a legacy issue that only affects previous customers).
Data Collected by Payment Processors
When you make a purchase, the payment processors I use (e.g., Lemon Squeezy, Gumroad) may collect additional information, such as:
- Billing Address
- Payment Information
- Approximate Location
I do not have access to your payment card details or full billing address. Refer to the privacy policies (below) of these payment processors for more information. Payment processor make your approximate location (city and zip code) available to me but I do not use this data in any way.
How I Collect Your Data
I collect personal data through the following means:
- Newsletter Subscriptions
- When you subscribe via forms on my website. All subscriptions are explicit and require you to fill out the form to give consent.
- Gumroad Followers List
- When you subscribe to my followers list on Gumroad, this is considered implied consent for receiving marketing communications. There is no checkbox or mechanism for collecting explicit consent on Gumroad at this time.
- Purchases
- When you make a purchase via Lemon Squeezy or Gumroad, I receive your email address for service-related communications only.
- Direct Contact
- When you contact me directly via email or contact forms.
Purpose of Data Collection
I use your personal data for the following purposes:
- Service Communications
- To inform you about updates to the products or services you have purchased, fulfill your purchase (e.g., sending receipts or invoices via payment processors), and provide product-related updates. This is considered part of fulfilling my service to you and does not require additional consent.
- Marketing Communications (With Consent)
- To send you newsletters, product announcements, discounts, and other promotional content. This applies only if you have explicitly subscribed or given implied consent (e.g., through the Gumroad followers list).
- Legal Compliance (Legacy)
- To fulfill legal obligations, such as tax and accounting requirements.
- Note: This applies only to legacy data for customers who purchased from me in the past on Gumroad using PayPal as the payment method. (it also affects customers subscribed to Sample Stream at Gumroad paying via PayPal)
CCPA/CPRA Privacy Notice (For California Residents)
If you are a California resident, you are entitled to certain rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
Categories of Personal Information Collected
I collect the following categories of personal information:
- Identifiers, such as your email address.
- Commercial information, such as records of your purchases.
Your Rights Under the CCPA/CPRA
As a California resident, you have the following rights:
- Right to Know
- You may request to know what personal information I have collected about you and how it is used or shared.
- Right to Delete
- You may request the deletion of your personal information, subject to certain legal exceptions (e.g., tax and accounting obligations).
- Right to Opt-Out of Sale/Sharing
- I do not sell or share your personal information with third parties for monetary or other valuable consideration.
- Right to Correct
- You may request corrections to inaccurate personal information I hold about you.
- Right to Limit Use of Sensitive Information
- I do not collect or use sensitive personal information for purposes that would require limiting under the CPRA.
Exercising Your Rights
To exercise your rights under the CCPA/CPRA, please contact me. I will verify your identity before processing your request to ensure that only the rightful owner of the personal information can exercise these rights. This may include confirming your email address or verifying details of a past transaction.
Non-Discrimination
I will not discriminate against you for exercising your rights under the CCPA/CPRA.
Data Retention and Unsubscribing
- Unsubscribing from Marketing Communications
- When you unsubscribe from marketing emails, your data is not deleted. Instead, you are marked as unsubscribed, and your data is retained as legal proof of your prior consent. (applies to my main newsletter subscription at kit.com)
- Once unsubscribed, your data is no longer processed for any purpose, and you will not receive any further communications, including service or transactional emails.
- Important: If you wish to continue receiving product-related updates (e.g., service-related emails), do not unsubscribe entirely. Instead, update your consent preferences by removing marketing consent and retaining service-related consent.
- Retention of Data for Legal Purposes
- I retain data related to transactions as required by applicable laws, even after unsubscribing or deleting marketing consent.
Legal Basis for Service Emails
When you purchase a product, you automatically consent to receive service-related emails as part of fulfilling my service to you. These emails include:
- Invoice or receipt delivery.
- Product-related updates or support notifications.
- Invitations to subscribe to my newsletter for marketing communications.
If you want to receive marketing emails, such as offers, discounts, and other promotional materials, you must provide separate consent by subscribing via a dedicated online form or implied consent through Gumroad followers.
Cookies
What Are Cookies?
Cookies are small text files stored on your device when you visit websites. They are used by websites to function properly and provide certain features.
How I Use Cookies
I do not use cookies for my own purposes. However, cookies may be placed on your device by external services integrated into my website.
Third-Party Cookies
My website includes content and services from external providers that may use cookies:
- YouTube: For embedded videos.
- SoundCloud: For embedded audio.
- Lemon Squeezy: For payment processing.
These third-party services may use cookies necessary for their functionality. I do not have control over these cookies. Please refer to their respective privacy policies for more information.
Managing Cookies
You can manage your cookie preferences by clicking on the cookie icon at the bottom left of the screen. You can also adjust your browser settings to refuse cookies or alert you when cookies are being sent. Disabling cookies may affect the functionality of external services on my website.
Data Storage
Your personal data is stored securely on the servers of the following external services that I use:
- Kit (Newsletter Service): For managing email subscriptions and marketing communication.
- Lemon Squeezy: For processing and managing purchases made on my website.
- Gumroad: For processing and managing purchases made through my Gumroad store.
In addition to the above, I may create backups of the newsletter subscribers list and sales data for redundancy and data recovery purposes. These backups are:
- Compressed and Password-Protected: The backup files are securely compressed and protected with a strong password.
- Stored Offline: Backups are kept on an external storage device that is not connected to the network.
- Physically Secured: The storage device is kept in a safe and secure location to prevent unauthorized access.
These measures ensure that your personal data remains protected even in the unlikely event of a service disruption.
Data Disclosure and Security
I do not share or sell your personal data to third parties. However, your data may be processed by external services for specific purposes:
- Kit: To manage email campaigns and subscriber preferences.
- Lemon Squeezy and Gumroad: To process your purchases.
Refer to their privacy policies for more details (below).
Legacy Data from Past Transactions
If you purchased from me in the past on Gumroad using PayPal, please note:
- Data Collected: Your name and email address associated with your PayPal account.
- Data Storage: This data is stored locally or printed, as required by Polish law for accounting purposes.
- Data Disclosure: Your transaction details were shared with my accounting service provider, Infakt.pl, solely for tax compliance.
- Data Retention: I am legally required to retain this data for a specified period under applicable laws.
Your Rights
You have the following rights regarding your personal data:
- Right to Access: You may request a copy of the personal data I hold about you.
- Right to Rectification: You may request correction of any inaccurate or incomplete data.
- Right to Erasure: You may request that I delete your personal data. Please note that I may be required by law to retain certain data for a specified period, especially data related to past transactions required for accounting purposes.
- Right to Data Portability: You have the right to request that I transfer your personal data to you or to a third party in a structured, commonly used, and machine-readable format.
To exercise these rights, please [contact me](mailto:[Your Email Address]).
External Services
I use the following external services, which act as data processors. Please review their privacy policies for more information on how they handle your data:
- Lemon Squeezy: Payment processing and customer management. Privacy Policy: https://www.lemonsqueezy.com/privacy
- Gumroad: Payment processing and customer management. Privacy Policy: https://gumroad.com/privacy
- Infakt.pl: Accounting services (applies to past PayPal transactions). Privacy Policy: https://www.infakt.pl/polityka-prywatnosci
- Kit: Email marketing and newsletter management. Privacy Policy: https://kit.com/privacy
- YouTube: Embedded videos. Privacy Policy: https://policies.google.com/privacy
- SoundCloud: Embedded audio. Privacy Policy: https://soundcloud.com/pages/privacy
Children's Privacy
My website and services are not directed at children under the age of 13, and I do not knowingly collect personal information from children.
If I become aware that I have inadvertently collected personal information from a child under the age of 13, I will take immediate steps to delete such information.
If you are a parent or guardian and believe that your child has provided me with personal information without your consent, please contact me so I can address the issue.
Third-Party Links
My website may contain links to external websites not operated by me. This Privacy Policy does not apply to those websites. I encourage you to review the privacy policies of any third-party sites you visit. I have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services.
Changes to This Privacy Policy
I may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. I encourage you to review this policy periodically. Your continued use of my website after any changes constitutes your acceptance of the new Privacy Policy.
Contact Me
If you have any questions or concerns about this Privacy Policy or my data practices, please contact me at spektralisk@gmail.com