GDPR Privacy Notice
This notice is provided under Articles 13 and 14 of the EU General Data Protection Regulation (GDPR) and the UK GDPR (together, "GDPR"). It applies when we process personal data of individuals in the EEA, United Kingdom, Switzerland, or other jurisdictions with similar rules, in connection with https://beatprod.com.
It supplements our Privacy Policy. If there is a conflict for GDPR-covered users, this notice and mandatory GDPR rights control to the extent required by law.
1. Controller identity and contact
Beatprod operates an online marketplace for beats, kits, and related services. For GDPR purposes, Beatprod is the controller of personal data collected through the Site, except where a third party acts as an independent controller (for example, a payment institution processing card data under its own terms).
- Privacy / DSAR email: [email protected]
- Support: @beatprodsupport
If we appoint a Data Protection Officer or EU/UK representative, we will publish those details here.
2. Categories of personal data
- Identity & account — name, username/nickname, email, profile photo, bio, social links;
- Commercial — purchases, cart, licenses, subscriptions, payouts, invoices, order history;
- Content — uploaded audio, covers, metadata, comments, messages;
- Technical — IP address, device/browser, logs, cookies, approximate location derived from IP;
- Support — tickets, emails, chat history, preferences;
- Auth providers — limited profile data from Google OAuth if you use social login.
3. Sources
Most data comes directly from you. We also obtain data automatically from your device/browser, from payment and authentication providers when you use those features, and (rarely) from public sources or other users (for example reports about content).
4. Purposes and lawful bases (Art. 6 GDPR)
| Purpose | Examples | Lawful basis |
|---|---|---|
| Provide the service | Accounts, uploads, storefronts, purchases, licenses, subscriptions | Contract (Art. 6(1)(b)) |
| Payments & payouts | Checkout, refunds, seller withdrawals | Contract; legal obligation (tax/accounting) |
| Security & abuse prevention | Fraud checks, rate limits, account integrity | Legitimate interests (Art. 6(1)(f)); legal obligation where applicable |
| Customer support | Respond to inquiries and disputes | Contract; legitimate interests |
| Product analytics & improvement | Usage metrics, performance monitoring | Legitimate interests and/or consent for non-essential cookies |
| Marketing communications | Newsletters, product tips (if enabled) | Consent (Art. 6(1)(a)) or soft opt-in where permitted |
| Legal compliance | Respond to lawful requests, keep required records | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we balance those interests against your rights and freedoms. You may object under Art. 21 GDPR.
5. Recipients / processors
We share personal data with service providers acting under our instructions or as independent controllers where required, including:
- Hosting, storage, and CDN providers;
- Payment processors (e.g. Stripe; other regional payment methods where offered);
- Email delivery and support tooling;
- Analytics providers (Google Analytics, Yandex Metrika) where enabled and lawful;
- Professional advisers and authorities when legally required.
6. International transfers
We may process and store personal data in the United States and other countries. Where we transfer personal data from the EEA/UK to a country without an adequacy decision, we use appropriate safeguards under GDPR Chapter V, typically the European Commission Standard Contractual Clauses (SCCs), plus supplementary measures where needed following a transfer impact assessment (Schrems II / Case C-311/18).
You may request information about relevant safeguards by emailing [email protected].
7. Retention
We keep personal data only as long as necessary for the purposes above, including:
- Account data — while the account is active, then up to about 3 years for security/disputes unless law requires longer;
- Transaction/tax records — up to about 7 years where required by accounting or tax law, otherwise shorter when no longer needed;
- Support tickets — for a reasonable period to resolve issues and prevent abuse;
- Logs/security data — typically shorter rolling windows unless needed for investigations;
- Marketing consents — until withdrawn or no longer needed (generally up to about 3 years after last marketing interaction).
When data is no longer needed, we delete or anonymize it, subject to legal holds.
8. Your rights
Subject to conditions and exceptions in the GDPR, you may:
- Access your data (Art. 15);
- Rectify inaccurate data (Art. 16);
- Erase data (Art. 17);
- Restrict processing (Art. 18);
- Data portability (Art. 20);
- Object to processing based on legitimate interests or to direct marketing (Art. 21);
- Withdraw consent at any time where processing is based on consent (Art. 7(3));
- Lodge a complaint with a supervisory authority in your Member State / UK ICO.
To exercise rights, email [email protected] with "GDPR Request" in the subject. We may verify identity. We respond within one month (extendable by two months for complex requests, with notice).
9. Obligation to provide data
Some data is required to enter a contract (account email, payment details for purchases). If you do not provide required data, we may be unable to create an account, complete a purchase, or pay out earnings.
10. Automated decision-making
We may use automated tools for recommendations, spam/fraud signals, and content moderation. We do not make solely automated decisions that produce legal or similarly significant effects about you without human involvement, except where permitted by law. See also the Privacy Policy section on profiling.
11. Cookies
Details are in the Cookie Policy. Non-essential cookies in the EEA/UK generally require consent.
12. Children
Beatprod is intended for users 18+. We do not knowingly process children's data for the Site.
13. Updates
We may update this notice. Continued use after the updated effective date indicates acknowledgment of the revised notice, without limiting your GDPR rights.
14. Contact
Related: Privacy Policy · Cookie Policy · CCPA
