Privacy Policy

1. Who We Are

Abstract Rhythm Records operates the online store at abstractrhythm.com. We are the data controller for the personal data collected through this website. Contact: hello@abstractrhythm.com.

2. Data We Collect

When you place an order we collect:

Name and email address
Shipping address
Payment information (processed directly by Stripe — we do not store card details)
IP address at the time of checkout
Timestamp of your consent to our policies

If you create an account we additionally store your authentication credentials (hashed password) and any saved delivery addresses.

3. How We Use Your Data

To fulfil your order and deliver purchased goods or downloads
To send order confirmation, shipping, and download emails
To handle refunds, disputes, and customer support
To comply with legal obligations and defend against chargebacks

4. Legal Basis (GDPR)

Processing is based on contract performance (Art. 6(1)(b) GDPR) for order fulfilment and legitimate interests (Art. 6(1)(f) GDPR) for fraud prevention and dispute resolution. Where we rely on consent we will ask for it explicitly and you may withdraw it at any time.

5. Third-Party Processors

Stripe — payment processing (stripe.com/privacy)
Resend — transactional email delivery (resend.com/privacy)
Cloudflare — infrastructure and DDoS protection (cloudflare.com/privacypolicy)

6. Data Retention

Order records (including personal data) are retained for 7 years to comply with German commercial and tax law. Account data is retained until you request deletion. Download tokens expire after 30 days.

7. Your Rights

Under GDPR you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. To exercise any of these rights emailhello@abstractrhythm.com. You also have the right to lodge a complaint with your national data protection authority.

8. Cookies

We use only functional cookies required for authentication and cart persistence. No tracking or advertising cookies are used.