This policy explains what personal data Cid Inc Mastering collects, why, and who it is shared with. It follows the EU General Data Protection Regulation (GDPR).
1. Who is responsible
Cid Inc Music Oy (business ID 3327142-1), Finland, is the controller of your data. Contact: contact@cidincmastering.com.
2. What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Name, email, billing address, company and VAT ID, phone if given | To take and deliver your order, invoice you and apply the right VAT | Contract; legal obligation (accounting and tax) |
| Order details and payment status | To process and track your order | Contract; legal obligation |
| Your audio files and notes | To do the work you ordered | Contract |
| Account login and order history | To give you access to orders, invoices and downloads | Contract |
| Messages you send us | To answer you | Legitimate interest |
| Reviews you post | To show them on the site, with the name you choose | Consent |
| IP address and basic technical data | To keep the site secure and stop spam and fraud | Legitimate interest |
| Analytics data (pages visited, device type) | To understand how the site is used | Consent (cookie banner) |
We don't sell your data or use it for advertising.
3. Who receives your data
We only share what each service needs to do its job.
| Service | What it does | Where |
|---|---|---|
| Stripe | Card and other online payments | EU (Stripe Payments Europe, Ireland), may transfer to the US |
| PayPal | PayPal payments | EU (PayPal Europe, Luxembourg), may transfer to the US |
| WeTransfer | Sending files to us and masters to you | EU (Netherlands) |
| Suncomet | Hosts the website, its database and our email | Finland |
| Google (Site Kit, Analytics) | Site statistics, only if you accept statistics cookies | May transfer to the US |
| Cloudflare Turnstile | Checks that forms are sent by people, not bots | May transfer to the US |
| SoundCloud | Plays the music on the home page, only after you press Play | May transfer outside the EU |
| Our accountant | Bookkeeping and tax | Finland |
When data goes outside the EU, the service uses the EU–US Data Privacy Framework or the EU's standard contract clauses.
4. How long we keep it
- Invoices and order records: 6 years from the end of the year of the sale, as Finnish accounting law requires.
- Your audio files and masters: about 3 months after delivery.
- Your account: until you ask us to delete it. Order records we must keep for accounting stay for the period above.
- Messages: as long as needed to deal with your question, and at most 2 years.
5. Cookies
The site uses cookies needed to run the shop and your account. Statistics cookies are only set if you accept them in the cookie banner, and you can change your choice at any time. See the Cookie Policy for the full list.
6. Your rights
You can ask to see the data we hold about you, have it corrected or deleted, get a copy to take elsewhere, object to or restrict how we use it, and withdraw consent at any time. Email contact@cidincmastering.com and we will reply within a month.
If you think we handle your data wrongly, you can complain to the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).
7. Changes
We may update this policy. The date at the top shows when it last changed.