Privacy Policy | Paul Mahon Acoustic

This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you visit our Website.

1. Data Controller

The data controller is Paul Mahon (trading as Paul Mahon Acoustic), Northern Ireland, UK.

2. What Data We Collect

Personal data you provide: When you fill in forms (e.g., contact/enquiry form), purchase/download music, we may collect your name, email address, billing address, IP address, payment information (via third-party processor), and other details you choose to provide.
Automatically collected data: We may collect technical data (device type, browser version, IP address, operating system, referral source) via standard web-analytics tools (e.g., cookies, log files).
Third-party data: If you link to our social media pages or use third-party platforms, they may share data with us (subject to their own privacy policies).

3. How We Use Your Data

We use personal data for the following purposes:

To provide you the services/digital music you purchase.
To communicate with you (e.g., respond to enquiries, send updates if you opt-in).
To process payments and keep proper records for accounting and tax purposes.
To operate, maintain and improve our Website (analytics, troubleshooting, security).
To comply with legal obligations (e.g., tax, record-keeping).

4. Legal Basis for Processing

Our lawful bases for processing your personal data include:

Contractual necessity: For the performance of a contract when you purchase music.
Legitimate interests: Running our business, improving our service, ensuring security (provided these do not override your rights).
Consent: Where we ask you for explicit consent (e.g., to receive marketing emails).
Legal obligation: To comply with accounting, tax and other regulatory requirements.

5. Sharing Your Personal Data

We may share personal data with:

Payment processors (to process your purchase)
Wix and their service providers (hosting, analytics, email services)
Professional advisors (accountants, legal advisers) as required.
We do not sell your personal data to third parties for marketing purposes.

6. Cookies & Tracking

Our Website uses cookies and similar tracking technologies (e.g., via Wix). You can adjust your browser settings to refuse cookies, but this may impact your experience. Details of cookies used are available in our cookie-banner or cookie settings.

7. Data Retention

We will retain your personal data for as long as needed for the purposes stated (e.g., to maintain your purchase records, for tax compliance). When no longer required, we will securely delete or anonymise your data.

8. Your Rights

Depending on your jurisdiction you may have the following rights:

To access your personal data.
To correct inaccurate or incomplete data.
To request erasure of your personal data (where lawful).
To restrict or object to processing of your data.
To receive a portable copy of your data (where applicable).
To withdraw consent (where processing is based on consent).
To exercise these rights, please contact us (see section 10 below). We will respond within the time-limits required by law.

9. International Transfers

As our data processing and hosting may involve third-party services outside the UK/EU, appropriate safeguards (e.g., Standard Contractual Clauses) will be in place to protect your data.

10. Contact & Complaints

If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
Paul Mahon [via the Contact page on the Website]
If you believe we have not complied with applicable data protection law, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date will reflect the revision. We encourage you to review this policy periodically.