This policy explains what personal information Bobsy Beat Store ("Bobsy", "we", "us") collects when you use bobsybeatstore.com, why we collect it, and your rights over it. Bobsy is a sole trader based in the United Kingdom and is the data controller for the information described here.

1. Information we collect

• When you buy a beat: your email address and billing details. Card payments are processed by Stripe — we never see or store your full card number.
• When you contact us: the name, email address and message you submit through the contact form.
• When you subscribe: your email address, so we can email you about new beats.
• Automatically: anonymous, aggregated usage data (such as page views and referring site) via privacy-friendly analytics. This does not identify you personally.
• In your browser only: your basket and favourites are stored locally on your device (localStorage). This data never leaves your browser and is not sent to us.

2. How we use it

• To take payment and deliver your purchased files and license agreement by email.
• To reply to your enquiries.
• To send new-beat announcements — only if you subscribed, and you can unsubscribe from any email.
• To understand, in aggregate, how the site is used so we can improve it.

Our lawful bases under UK GDPR are: contract (to fulfil your order), consent (marketing emails, which you may withdraw at any time), and legitimate interests (answering enquiries and keeping the site secure and functional).

3. Who we share it with

We do not sell your personal information. We share it only with the service providers that make the store work, and only as needed:

• Stripe — payment processing.
• Resend — sending your delivery, contact and subscription emails.
• Cloudflare R2 — secure storage of the beat files you download.
• Vercel — website hosting and privacy-friendly analytics.

These providers process data on our behalf under their own privacy and security terms. Some may process data outside the UK; where they do, appropriate safeguards apply.

4. How long we keep it

We keep order and email records for as long as needed to provide the service and to meet legal and accounting obligations. Marketing subscribers are kept until you unsubscribe. Download links expire 7 days after purchase.

5. Your rights

Under UK data protection law you can ask us to access, correct, or delete your personal information, to restrict or object to its use, or to receive a copy of it. You can unsubscribe from marketing emails at any time using the link in each email. To exercise any right, email prod.bobsy@gmail.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

6. Cookies & local storage

We do not use advertising or tracking cookies. We use your browser's local storage only to remember your basket and favourites on your device. Analytics is aggregated and does not use identifying cookies.

7. Changes

We may update this policy from time to time. The "last updated" date above shows when it last changed.