Privacy Policy

(Governing law: Sweden & GDPR)

1. Introduction

This Privacy Policy explains how MD SOUND PRODUCTIONS collects, uses, stores, and protects your personal data.
By using this website, placing an order, or communicating with MD SOUND PRODUCTIONS, you agree to the practices described in this policy.
MD SOUND PRODUCTIONS complies with the EU General Data Protection Regulation (GDPR) and applicable Swedish data protection laws.
This website is not intended for children under 16, and MD SOUND PRODUCTIONS does not knowingly collect data from minors.

2. Data Controller

MD SOUND PRODUCTIONS
Location: Sweden
Email: info@mdsoundproductions.com
Website: www.mdsoundproductions.com

3. What Personal Data Is Collected

MD SOUND PRODUCTIONS collects only the data necessary to deliver services, process orders, and communicate with clients.

3.1 Data you provide directly

• Name
• Email address
• Billing address
• Payment details (processed securely by Stripe — not stored by MD SOUND PRODUCTIONS)
• Project files (audio files, documents, reference materials)
• Communication messages (email or other agreed channels)

3.2 Data collected automatically

• IP address
• Browser type and device information
• Basic analytics data (via privacy‑friendly tools or standard website logs)

3.3 Data collected through WooCommerce & Stripe

• Order details
• Transaction status
• Payment confirmation

Payment information is processed directly by Stripe, which acts as an independent data controller for payment data.
MD SOUND PRODUCTIONS does not store credit card numbers.

4. Purpose of Data Processing

Your data is used for the following purposes:

• To process and deliver orders
• To communicate about your project
• To provide revisions and support
• To send download links and deliver digital files
• To maintain legal and accounting records
• To improve website functionality and user experience
• To protect the website from fraud or abuse

Your data is never sold, rented, or shared with third parties for marketing purposes.

5. Legal Basis for Processing (GDPR)

MD SOUND PRODUCTIONS processes personal data based on:

• Contractual necessity (to deliver purchased services)
• Legal obligations (accounting, tax records)
• Legitimate interest (business communication, website security)
• Consent (when you voluntarily provide information or subscribe to updates)

6. Storage & Security

MD SOUND PRODUCTIONS takes appropriate technical and organizational measures to protect your data, including:

• Secure servers
• Encrypted communication (HTTPS)
• Limited access to project files
• Secure payment processing via Stripe
• Regular data cleanup and deletion of unnecessary files

Project files are stored only for as long as needed to complete the service unless otherwise agreed.

7. Sharing of Personal Data

Your data may be shared only with:

• Payment processors (Stripe)
• Website platform (WordPress/WooCommerce)
• Email service providers
• Cloud storage providers (for project file delivery)

All third‑party providers comply with GDPR or equivalent data protection standards.
Your data is never shared with advertisers or unrelated third parties.

8. Client Files & Project Materials

Audio files, documents, and creative materials you provide are used exclusively for the purpose of delivering the agreed service.

They are:

• stored securely
• never shared with third parties
• deleted when no longer needed

You may request deletion of your files at any time.

9. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion (“right to be forgotten”)
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent at any time

To exercise these rights, contact: info@mdsoundproductions.com

10. Cookies

This website may use cookies for:

• basic functionality
• analytics
• remembering preferences
• improving user experience

You can manage or disable cookies in your browser settings.
A separate Cookie Notice may be provided if required.

11. Data Retention

MD SOUND PRODUCTIONS retains:

• Order and invoice data: 7 years (required by Swedish accounting law)
• Project files: until the project is completed, unless otherwise agreed
• Communication: as long as necessary for project support or legal obligations

12. International Transfers

If data is stored or processed outside the EU/EEA, MD SOUND PRODUCTIONS ensures that appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCC)
• GDPR‑compliant service providers

13. Changes to This Policy

This Privacy Policy may be updated to reflect changes in services, legal requirements, or data protection practices.
The latest version will always be available on this website.

14. Contact

For questions about this Privacy Policy or your personal data, contact:
info@mdsoundproductions.com