1. Who we are
First State Music is operated by Sander van der Waal, a sole trader (autónomo) based in Alicante, Spain (the "data controller" under GDPR), the same identity behind OneMix Mastering. For any privacy question or request, contact sander@firststatemusic.com.
2. What we collect
Only what's needed to respond to your enquiry or deliver a service:
| Where | What's collected | Why |
|---|---|---|
| Contact form | Name, email, subject, message | To respond to your message, quote a production, or arrange a lesson |
| Future: plugin/sample-pack purchases | Email, payment details (via a third-party processor, never stored by us directly) | To deliver a purchased product (not live yet) |
3. How we use it
Solely to respond to your enquiry, quote or deliver a production, arrange tutoring, or (once live) process a plugin/sample-pack purchase. We don't sell your data or use it for advertising.
4. Legal basis for processing
Taking steps to enter into a contract with you (when you request a quote or book a lesson), performance of that contract once booked, and legitimate interest in responding to general enquiries.
5. Who else sees it
A small number of third-party services run the site, each acting as a data processor:
- EmailJS: delivers contact form submissions to our inbox.
- Strato: web hosting provider, serving the website itself.
- A payment processor: will handle plugin/sample-pack purchases once that's live; not in use yet.
6. Cookies and tracking
This site does not currently use cookies, analytics, or advertising trackers. If that changes, this policy will be updated first and a cookie consent option added.
7. How long we keep it
Contact submissions are kept as long as needed to respond and, where a project goes ahead, for its duration plus a reasonable period for follow-up and any legal/tax record-keeping.
8. Your rights
Under GDPR, you can access, correct, delete, restrict, or export the personal data we hold about you, and object to certain processing. Email sander@firststatemusic.com. You can also lodge a complaint with the Agencia Española de Protección de Datos (AEPD).
9. Security
The site is served over HTTPS. We don't store payment card details ourselves; any future purchases will go through a dedicated, PCI-compliant payment provider.
10. Changes to this policy
This policy will be updated as functionality changes, most notably once plugin and sample-pack purchases go live. The "Last updated" date above reflects the most recent revision.