Privacy Policy for Borealis Beats

Welcome to Borealis Beats! Your privacy is incredibly important to us. This Privacy Policy explains how Borealis Beats collects, uses, and protects your personal information when you visit our site, purchase our products, or engage with our services. We are committed to operating in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Who We Are

Borealis Beats is a music shop offering new and used instruments, sheet music, audio equipment, music lessons, instrument repair, and vinyl records. Our website serves to showcase and sell these musical instruments, equipment, and offer music-related services. We are located at 55a Catherine Place, London, SW1E 6DY, United Kingdom.

2. Information We Collect

We collect different types of information for various purposes to provide and improve our services to you.

a. Personal Data You Provide Directly

• Contact Information: When you make a purchase, enrol in lessons, or contact us, we may collect your name, email address, postal address, and telephone number.
• Payment Data: To process transactions, we collect payment details such as credit/debit card numbers or other financial information. Please note that we do not store full payment card details on our servers; these are processed securely by third-party payment processors.
• Account Information: If you create an account on our site, we collect your username, password (hashed), and preferences.
• Correspondence: Records of your communications with us, including emails, chat messages, and phone calls.

b. Automatically Collected Data

• Usage Data: Information about how you access and use our site, such as your IP address, browser type, browser version, pages visited, time spent on those pages, unique device identifiers, and other diagnostic data.
• Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track the activity on our site and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

3. How We Use Your Information

Borealis Beats uses the collected data for various purposes:

• To Provide and Maintain Our Service: Fulfilling orders, managing your account, and ensuring the functionality of our online platform.
• To Process Transactions: Handling payments and delivering purchased items or services.
• To Manage Your Account: Providing you with access to our services, managing your preferences, and offering personalised content.
• To Communicate With You: Sending order confirmations, updates about your lessons or repairs, responding to your inquiries, and providing customer support.
• To Send Marketing Communications: With your consent, sending you updates about new products, special offers, or events relevant to our music shop. You can opt-out at any time.
• For Internal Analytics and Improvement: Understanding how our site is used to improve its design, functionality, and the relevance of our product offerings.
• For Security and Fraud Prevention: Protecting our site and users from fraudulent or illegal activities.
• To Comply with Legal Obligations: Adhering to applicable laws, regulations, and legal processes.

4. Legal Basis for Processing Personal Data Under GDPR

We process your personal data under the following legal bases:

• Contract: Processing is necessary for the performance of a contract with you (e.g., selling an instrument, providing a lesson) or to take steps at your request before entering into such a contract.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject (e.g., tax and accounting requirements).
• Legitimate Interests: Processing is necessary for the purposes of our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms (e.g., improving our services, preventing fraud, direct marketing where explicit consent is not required).
• Consent: In some cases, we rely on your explicit consent for specific processing activities (e.g., sending marketing newsletters). You have the right to withdraw your consent at any time.

5. Disclosure of Your Information

We may share your personal information with:

• Service Providers: Third-party companies and individuals who facilitate our service, perform service-related services (e.g., payment processing, shipping, web hosting, analytics), or assist us in analysing how our service is used. These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

6. Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

7. Your Data Protection Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. Borealis Beats aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal data.

• The right to access: You have the right to request copies of your personal data.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• The right to withdraw consent: You also have the right to withdraw your consent at any time where Borealis Beats relied on your consent to process your personal information.

To exercise any of these rights, please contact us using the details provided in Section 9.

8. Security of Data

The security of your data is paramount to us. We strive to use commercially acceptable means to protect your personal data. However, remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we endeavour to use strong security measures to protect your personal data, we cannot guarantee its absolute security.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• By Mail: Borealis Beats, 55a Catherine Place, London, SW1E 6DY, United Kingdom.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.