Privacy Policy

Introduction This Privacy Policy explains howAGStudio (“we”, “us”, “our”) collects, uses, stores, discloses and protects personal data in relation to our website, products and services (the “Services”). It applies to all users, customers, visitors and other individuals whose personal data we process. By using our Services you accept the practices described in this policy.

Controller AGStudio acousticghoststudio@gmail.com

If we act as a data processor for certain services, a separate data processing agreement will govern that processing.

Personal data we collect We collect personal data you provide directly and data we collect automatically.

  1. Data you provide

  • Account information: name, email address, username, password, profile photo.

  • Contact information: postal address, telephone number, billing address.

  • Payment information: payment card details, PayPal or other payment provider identifiers (processed via third-party payment processors; we do not store full card details unless explicitly stated).

  • Communications: messages, feedback, support requests and other correspondence.

  • Content you provide: text, images, files and other content you upload or submit when using our Services.

  • Marketing preferences and consents.

  1. Data collected automatically

  • Usage data: pages visited, features used, session durations, clickstream and other interaction data.

  • Device and technical data: IP address, device identifiers, browser type and version, operating system, screen resolution, language, time zone.

  • Location data: inferred from IP address or explicit geolocation data where permitted and consented.

  1. Special categories We do not intentionally collect special category (sensitive) personal data about you. If you provide such data, you consent to our processing of it for the purposes you have indicated.

Lawful bases for processing We process personal data on one or more of these lawful bases:

  • Performance of a contract: to provide products or services you request.

  • Legal obligation: to comply with statutory or regulatory obligations.

  • Legitimate interests: to operate, secure and improve our Services, prevent fraud, and manage relationship with users, balanced against your privacy rights.

  • Consent: where you have given clear consent (for example, for marketing communications or certain cookies).

  • Vital interests or public task: only where applicable.

Purposes of processing We use personal data for the following purposes:

  • To provide, operate and maintain our Services.

  • To create and manage user accounts.

  • To process payments and prevent fraud.

  • To communicate with you, including responding to enquiries and sending service updates and administrative messages.

  • To personalise and improve your experience and our Services.

  • To send marketing communications where you have consented or where permitted by law.

  • To comply with legal obligations and respond to legal requests.

  • To conduct analytics and research to improve functionality and reliability.

Third-party services and disclosures We may share personal data with:

  • Service providers and processors who perform functions on our behalf (hosting, payment processing, analytics, customer support, email delivery).

  • Professional advisers and auditors.

  • Related companies and business partners where necessary to deliver Services.

  • Law enforcement, courts or regulatory bodies where required by law or to protect rights, safety or property.

  • Third parties in connection with a merger, acquisition, reorganisation or sale of assets (subject to confidentiality and protection obligations).

We require third parties to process personal data in accordance with this Privacy Policy and applicable law. Where third parties are located outside the UK or EEA, we will apply appropriate safeguards (such as standard contractual clauses) or rely on an authorised transfer mechanism.

Data retention We retain personal data only for as long as necessary for the purposes set out in this policy, including to:

  • fulfil contractual obligations,

  • comply with legal and regulatory requirements,

  • resolve disputes and enforce agreements,

  • maintain backups for a reasonable period.

Retention periods differ by category of data; please contact us for specifics. When personal data is no longer required we will securely delete or anonymise it.

Security We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or destruction. Measures include encryption, access controls, secure servers and regular security assessments. However, no system is completely secure; we cannot guarantee absolute security.

Cookies and similar technologies We use cookies, web beacons and similar technologies to collect information about usage and to provide personalised content and advertising. You may manage cookie preferences via our cookie banner or your browser settings. Disabling cookies may affect functionality of the Services.

Your rights Depending on applicable law, you may have the following rights in relation to your personal data:

  • Right to access: obtain a copy of the personal data we hold about you.

  • Right to rectification: correct inaccurate or incomplete data.

  • Right to erasure: request deletion of your personal data (subject