This Privacy Policy describes how DC Beats ("I", "me", "my") collects, uses and protects your personal information when you visit dcbeats.net and purchase beats or services. This policy complies with the EU General Data Protection Regulation (GDPR).
Who We Are
DC Beats is an independent music production business operated by a sole producer based in Portugal, EU. References to "DC Beats", "I", "me" or "my" in this policy all refer to this entity.
Data Controller:
DC Beats
Portugal, European Union
contact@dcbeats.net
Information We Collect
Personal Information. When you purchase a license or contact me, I may collect your name, email address, billing address, and payment details (processed securely via BeatStars / payment providers — I do not store raw card data).
Usage Information. I collect information about how you interact with this website — pages visited, links clicked, session duration and referral source — primarily through Google Analytics.
Device & Technical Information. Your IP address, browser type, operating system, and device type may be collected automatically when you visit the site.
Communications. If you contact me via the contact form or email, I retain that correspondence to respond to your enquiry.
How We Use Your Data
I use the information collected to:
- Process and fulfil your beat purchases and license agreements.
- Send order confirmations, download links and license PDFs.
- Respond to customer support requests and enquiries.
- Improve website performance and user experience.
- Send marketing communications about new beats and offers (only with your consent).
- Comply with legal obligations and resolve disputes.
- Measure advertising effectiveness via Google Ads conversion tracking.
Legal Basis for Processing (GDPR)
As a business operating within the EU, I process your personal data under the following lawful bases:
Contract. Processing necessary to fulfil a purchase you have made (order processing, licence delivery).
Consent. For analytics cookies (Google Analytics), advertising cookies (Google Ads), and marketing emails — only where you have given explicit consent via the cookie banner or opt-in.
Legitimate Interest. For basic website security, fraud prevention and improving the site experience.
Legal Obligation. Where processing is required to comply with applicable law (e.g. tax records).
Data Sharing
I do not sell your personal data. I may share it only with:
Service Providers. Third-party platforms that help operate my business, including:
- BeatStars — beat store, payment processing and licence delivery.
- Google LLC — analytics (Google Analytics), advertising (Google Ads) and tag management (Google Tag Manager).
- PayPal / Visa / Mastercard — payment processing.
- Email service providers — for transactional and marketing communications.
Legal Authorities. Where required by law, court order, or to protect the rights and safety of DC Beats or others.
Google Analytics and Google Ads may transfer data to servers outside the EU. These transfers are covered by Google's Standard Contractual Clauses and adequacy decisions where applicable.
Cookies & Tracking Technologies
Essential Cookies. Required for the website to function. These cannot be disabled.
Analytics Cookies (Google Analytics). Used to understand how visitors interact with the site. Only activated with your consent.
Advertising Cookies (Google Ads). Used to measure ad campaign performance and show relevant ads. Only activated with your consent.
You can manage or withdraw cookie consent at any time via the cookie preferences panel at the bottom of this page. You may also disable cookies in your browser settings, though some site features may not function correctly.
Data Retention
I retain your personal data only for as long as necessary:
- Purchase and licence records are kept for a minimum of 7 years to comply with Portuguese and EU tax law.
- Support correspondence is retained for up to 2 years after the last interaction.
- Analytics data is retained according to Google Analytics default retention settings (up to 26 months).
- Marketing consent records are kept until you withdraw consent.
Data Security
I take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. All payment data is handled by certified PCI-DSS compliant processors — I never store raw card details on my systems.
In the event of a data breach affecting your rights and freedoms, I will notify you and the relevant supervisory authority within 72 hours as required by GDPR.
Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access — Request a copy of the data I hold about you.
- Right to Rectification — Ask me to correct inaccurate or incomplete data.
- Right to Erasure — Request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
- Right to Restrict Processing — Ask me to limit how I use your data.
- Right to Data Portability — Receive your data in a structured, machine-readable format.
- Right to Object — Object to processing based on legitimate interest, including direct marketing.
- Right to Withdraw Consent — Withdraw consent for cookies or marketing at any time without affecting prior lawful processing.
To exercise any of these rights, contact me at contact@dcbeats.net. I will respond within 30 days. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD) or your local supervisory authority.
Children's Privacy
This website and its services are not directed at individuals under the age of 16. I do not knowingly collect personal data from minors. If you believe a minor has provided personal information, please contact me immediately so I can delete it.
Changes to This Policy
I may update this Privacy Policy from time to time to reflect changes in my practices or legal requirements. The "Last updated" date at the top of this page will always reflect the most recent revision. For material changes, I will notify you by email or a prominent notice on the site.
Contact
For any questions about this Privacy Policy or to exercise your data rights, please get in touch: