Legal
Privacy Policy
Effective date: 1 January 2021
1. Who we are
J Sewell Beats ("we", "our", "us") is a UK-based business selling downloadable digital music production products. We are the data controller for the personal data described in this policy. For any privacy question, contact jordan@jsewellbeats.net.
This policy explains what personal data we collect, how we use it, and the rights you have under the UK GDPR and the Data Protection Act 2018.
2. What information we collect
- Order and contact details: name, email address, billing address and country, provided when you check out.
- Purchase information: the products you buy, order value, currency, order number and download activity.
- Payment information: processed by our payment providers. We receive confirmation of payment and limited details such as card type and last four digits — never your full card number.
- Support messages: the content of any email or contact form message you send us.
- Marketing preferences: your consent status if you subscribe to emails, plus email engagement such as opens and clicks.
- Technical and usage data: IP address, browser and device type, pages viewed and referring website, collected through cookies and similar technologies.
3. How we use your information
- To process your order, take payment and deliver your digital downloads (necessary to perform our contract with you).
- To provide customer support and resolve download or access issues (contract and legitimate interests).
- To keep records for accounting and tax purposes (legal obligation).
- To detect, prevent and investigate fraud, chargebacks and licence abuse (legitimate interests).
- To send marketing emails about new kits, releases and offers where you have consented, or where permitted for existing customers (consent / legitimate interests).
- To understand how the website is used and improve performance and conversion (consent for non-essential cookies).
4. Cookies
We use cookies and similar browser storage to keep your cart and session working, remember preferences such as your display currency, and — where you consent — to measure traffic and site performance. Essential cookies are required for the store and checkout to function.
You can block or delete cookies in your browser settings. Disabling essential cookies may prevent the cart or checkout from working correctly.
5. Analytics
We use the analytics reporting built into Shopify to understand aggregate store activity, such as sessions, traffic sources and conversion rates. This data is used in aggregate to improve the store and is not used to make automated decisions about you.
6. Shopify processing
Our store runs on Shopify. Shopify hosts our product catalogue, cart, checkout, customer accounts and order records, and acts as a data processor on our behalf. Personal data submitted at checkout is processed and stored by Shopify in accordance with its own privacy practices and may be transferred outside the UK under appropriate safeguards.
7. Payment processing
Payments are handled by Shopify Payments and the other payment methods offered at checkout, such as PayPal. These providers process your payment data as independent controllers or processors under their own terms, using industry-standard encryption. We never receive or store your full card details.
8. Email marketing and Klaviyo
We use Klaviyo as our email marketing platform. If you subscribe to our list, claim a free kit or opt in at checkout, your email address, name and purchase or engagement data may be stored in Klaviyo so we can send you relevant emails about our products.
Every marketing email includes an unsubscribe link, and you can opt out at any time or email jordan@jsewellbeats.net to be removed. Unsubscribing does not affect transactional emails such as order confirmations and download links.
9. Sharing your information
We do not sell your personal data. We share it only with the service providers needed to run the store — Shopify, our payment providers and Klaviyo — and with professional advisers or authorities where we are legally required to do so.
10. Data retention
Order and transaction records are kept for as long as required for accounting and tax purposes, and to support your product licence. Marketing data is kept until you unsubscribe or ask us to delete it. Support correspondence is kept only as long as needed to resolve your query and keep a reasonable record.
11. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Ask us to correct inaccurate or incomplete data.
- Ask us to delete your data where there is no ongoing legal or contractual reason to keep it.
- Object to, or ask us to restrict, certain processing.
- Withdraw consent for marketing at any time.
- Request a copy of your data in a portable format.
- Complain to the Information Commissioner's Office (ico.org.uk).
To exercise any of these rights, email jordan@jsewellbeats.net and we will respond within the timeframes required by law.
12. Data security
Our store and checkout are served over encrypted HTTPS connections, and payment data is handled by PCI-compliant payment providers. We limit access to customer data to what is necessary to run the business. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take appropriate technical and organisational measures to protect your data.
13. Changes to this policy
We may update this policy to reflect changes to our practices or legal requirements. The latest version will always be published on this page.
14. Contact details
J Sewell Beats
Email: jordan@jsewellbeats.net