Privacy Policy

1. Who we are

This privacy policy applies to nogarbeats.com, operated by Nogar, an independent music producer based in Guadeloupe, French Caribbean.

Contact: contact@nogarbeats.com

2. Data we collect

We only collect personal data that is strictly necessary to provide our services. Specifically:

When you place an order

• Identity: first name, last name, or company name
• Contact: email address
• Billing address: country, region, city, postal code
• License details: licensee type (individual or company), preferred contract language (English / French), date of birth or company registration number when applicable
• Order data: products purchased, prices, dates, license type chosen
• Technical: IP address (logged at checkout for fraud prevention)

When you contact us via the contact form

• First name, last name
• Email address
• Subject and message content
• IP address (logged for spam protection)

When you create an account

• Email address and chosen password (hashed, never stored in plain text)
• Order history associated with your account

Automatically collected

• Technical cookies required for the site to function (session, cart, login)
• Server logs (IP, timestamp, page accessed) retained briefly for security purposes

3. Why we collect it

Each piece of data is collected for one or more of these specific purposes:

• Order processing — to deliver the digital files and personalized license contract
• License contracts — the licensee details are required by law and by the contract itself to be enforceable
• Customer support — to respond to your contact requests and resolve any issue
• Account management — to give you access to your past orders
• Security — to prevent fraud, abuse, and chargeback disputes
• Legal compliance — bookkeeping and tax obligations require keeping order records for several years

We never sell, rent, or share your personal data with third parties for advertising or marketing purposes.

4. Legal basis (GDPR)

Under Article 6 of the GDPR, we process your personal data on the following legal bases:

• Contract performance — for order processing, license delivery, and customer support
• Legal obligation — for bookkeeping, tax records, and consumer law compliance
• Legitimate interest — for fraud prevention, site security, and minimal technical operation
• Consent — for any non-essential cookie or future marketing communication (opt-in only)

5. Data sharing & processors

To operate this site, we rely on a small number of trusted third-party services (data processors under GDPR). Each one only receives the minimum data needed for its specific role:

Each processor has its own privacy policy that governs what they do with the data they receive. We have selected providers that comply with GDPR and offer adequate safeguards for international transfers when applicable.

6. Cookies & tracking

This site uses only essential cookies required for technical operation:

• Session cookies — to keep you logged in and remember your cart
• Cache cookies — to deliver pages faster (LiteSpeed Cache)
• Security cookies — to prevent CSRF attacks during checkout

We do not currently use analytics tools, advertising pixels, or any tracking technology that would require cookie consent under French and EU law.

Third-party embeds (YouTube) may set their own cookies only when you actively interact with them (i.e., clicking play). YouTube embeds use the privacy-enhanced mode, which limits tracking compared to the standard YouTube embed.

7. Data retention

We keep your data only as long as needed for the purposes for which it was collected:

• Order & license records: 10 years (legal bookkeeping requirement under French commercial law)
• Account data: for as long as the account is active — deleted on request or after 3 years of inactivity
• Contact form submissions: up to 2 years after the last message exchange
• Server logs: up to 6 months

8. Your rights

Under the GDPR and French data protection law, you have the following rights regarding your personal data:

• Right of access — obtain a copy of the personal data we hold about you
• Right of rectification — ask us to correct any inaccurate or incomplete data
• Right of erasure (“right to be forgotten”) — ask us to delete your data, subject to legal retention obligations
• Right to restriction — ask us to temporarily limit the processing of your data
• Right to portability — receive your data in a structured, machine-readable format
• Right to object — oppose the processing of your data based on legitimate interest
• Right to lodge a complaint — with the French data protection authority (CNIL) at cnil.fr

To exercise any of these rights, simply email us at contact@nogarbeats.com. We respond within 30 days, as required by law.

9. Security

We take reasonable technical and organizational measures to protect your personal data against loss, misuse, unauthorized access or disclosure. These measures include:

• HTTPS encryption across the entire site
• Hashed and salted passwords (never stored in plain text)
• Secure payment processing through certified providers (PCI-DSS)
• Regular updates and security patches
• Limited access to administrative interfaces

No system can be guaranteed 100% secure. In the unlikely event of a data breach affecting your personal data, we will notify you and the CNIL within 72 hours, in accordance with Article 33 of the GDPR.

10. Children’s privacy

This site is intended for users 15 years of age or older, in line with French data protection law (Article 7-1 of the French Data Protection Act). We do not knowingly collect personal data from children under this age. If you believe we may have collected such data, please contact us and we will delete it promptly.

11. Updates to this policy

This privacy policy may be updated from time to time to reflect changes in our practices, services, or legal obligations. The “Last updated” date at the top of this page indicates when the latest version came into effect. We encourage you to review this page periodically.

12. Contact

For any question, request, or complaint regarding your personal data, contact us directly:

• Email: contact@nogarbeats.com
• Subject line suggestion: “Privacy — [your request]”

You also have the right at any time to file a complaint with the French data protection authority: CNIL, 3 Place de Fontenoy, 75007 Paris — cnil.fr.