Effective date: September 24, 2026
This Privacy Policy explains how TECHNOLOGY BEATS ("prod. by Technology", "we", "us", "our") collects, uses, stores, shares and protects personal data when you visit tchnbeats.com (the "Site"), browse beats, beat packs and sound kits, send a service request, submit a checkout request, sign up for our newsletter or otherwise interact with us. It also explains the rights you have over your data and how to exercise them. We have written it to be read, not just to exist: where something is technical, we explain what it actually means in practice.
1. Who we are
TECHNOLOGY BEATS is an independent music producer and online beat store specialising in hyperpop, rage, trap, plugg and digicore production. We license instrumentals (MP3 Lease, WAV Lease, Trackout Lease, Unlimited Lease and Exclusive Rights), sell beat packs, loop kits and sound kits, and offer services including custom beat production, mixing and mastering, beat customization and stems, production lessons, custom sound kit design and release strategy.
For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR and similar laws, TECHNOLOGY BEATS is the data controller for personal data collected through the Site. That means we decide why and how your data is processed and we are responsible for it. The only way to reach us about privacy matters is through our contact form (see How to contact us).
2. Scope of this policy
This policy applies to:
- all pages of the Site, including the beat catalogue, beat packs, sound kits, memberships, Beat Lab and blog;
- the contact / service-request form, the checkout request form and the newsletter signup form;
- email correspondence that follows from a form submission (for example, when we reply with a quote for a custom beat or send license paperwork);
- the newsletter itself, if you subscribe.
This policy does not apply to third-party platforms, even when we link to them or use them to complete a sale. In particular, beat license purchases completed on BeatStars are processed by BeatStars under its own terms and privacy policy. The same applies to YouTube, Instagram, TikTok, SoundCloud, Spotify and any other external service we link to. See Third-party links and platforms.
This policy should be read together with our Cookie Policy, Terms of Use, Refund Policy and licensing guide.
3. Personal data we collect
We follow a data-minimisation approach: forms ask only for what we need to answer you or fulfil a request, and optional fields are clearly optional. The table below lists every category of personal data we process through the Site.
| Category | Examples | Source | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|---|---|
| Contact and identity data | Name or artist name, email address | You, via the contact, checkout request or newsletter form | Replying to you, identifying your request, sending license documents | Contract / pre-contract steps (6(1)(b)); legitimate interests (6(1)(f)) for general enquiries |
| Service request details | Service type (e.g. custom beat, mix & master), budget range, deadline, genre and BPM references, reference track links, project description | You, via the contact / service-request form | Assessing your project and preparing a quote | Steps at your request before entering a contract (6(1)(b)) |
| Order and license data | Beat titles and license tiers in your checkout request (e.g. WAV Lease), the name to appear on the license, intended release platforms, messages about Exclusive Rights offers | You, via the checkout request form (cart contents are copied from your browser only when you submit) | Processing the order, issuing the license, delivering files | Performance of a contract (6(1)(b)); legal obligation for records (6(1)(c)) |
| Transaction records | Order reference, amount, currency, date, payment status, invoice details you provide | You, and payment confirmations from the payment channel used | Bookkeeping, tax compliance, handling refunds and disputes | Legal obligation (6(1)(c)); legitimate interests in defending claims (6(1)(f)) |
| Newsletter data | Email address, signup date and time, confirmation status, unsubscribe status | You, via the newsletter form | Sending new beat drops, kit releases and offers | Consent (6(1)(a)) |
| Correspondence | Emails and attachments you send in reply to us (e.g. vocal stems for mixing, rough demos) | You | Delivering the service you requested, keeping a record of what was agreed | Contract (6(1)(b)); legitimate interests (6(1)(f)) |
| Technical server data | IP address, date and time of request, requested URL, HTTP status, browser user-agent, referring URL | Your browser, automatically, when it requests a page | Delivering pages, security, detecting abuse and spam, troubleshooting | Legitimate interests (6(1)(f)) |
| Anti-spam signals | Honeypot field values, submission timing, rate-limit counters tied to IP address | Your browser, when you submit a form | Blocking automated spam and form abuse | Legitimate interests (6(1)(f)) |
Data that stays on your device. Your cart (tb_cart), cookie choice (tb_consent), newsletter signup flag (tb_newsletter) and Beat Lab pattern (tb_theme_seq) are stored in your browser's localStorage. We do not receive this data unless you actively submit a form that includes it (for example, your cart items are included in a checkout request when you press submit). Details are in the Cookie Policy.
Data we do not collect. We do not ask for, and ask you not to send, special-category data (health, religion, political opinions, sexual orientation, biometric data) or government identification numbers. We do not collect payment card numbers on the Site; card and wallet payments are handled by the payment platform used (such as BeatStars) and never pass through our forms.
4. How we use your personal data
We use personal data only for the purposes listed below, and never for a new, unrelated purpose without telling you first.
- Answering enquiries. When you send the contact form, we read your message and reply by email. For a custom beat request, for example, we use the genre, BPM range (say, 150–170 BPM for rage or 140–160 BPM for hyperpop), references and deadline you provided to give an accurate quote and timeline.
- Fulfilling orders and issuing licenses. For checkout requests we match the beats and license tiers in your request to our catalogue, confirm pricing, arrange payment, issue a license agreement in the name you specify and deliver the files (MP3, WAV or trackout stems, depending on the tier).
- Delivering services. For mixing, mastering, stems or lessons, we use the material and information you send to do the work and communicate progress, revisions and delivery.
- Sending the newsletter. If you opted in, we email you about new beats, packs, kits, memberships and occasional offers. Every email contains an unsubscribe link.
- Keeping records. We keep order and license records so we can prove who holds which license, answer Content ID or distribution questions, handle refund requests under our Refund Policy and meet tax and accounting obligations.
- Protecting the Site. We use server logs and anti-spam signals to keep the Site available, block bots and investigate abuse.
- Enforcing our rights. Where necessary, we use relevant records to establish, exercise or defend legal claims, for example if a leased beat is used outside its license terms.
We do not build advertising profiles, we do not run behavioural tracking, and we do not combine your data with data bought from third parties.
5. Legal bases for processing (GDPR art. 6)
If you are in the European Economic Area (EEA) or the United Kingdom, we must have a lawful basis for each processing activity. We rely on the following bases under Article 6(1) GDPR and the UK GDPR:
- Consent – art. 6(1)(a). Used for the newsletter and for any optional cookies or embedded third-party content that require consent. You can withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
- Contract – art. 6(1)(b). Used when processing is necessary to perform a contract with you (a beat license, a mixing job, a lesson) or to take steps you asked for before entering one (preparing a quote).
- Legal obligation – art. 6(1)(c). Used for retaining transaction and invoicing records required by tax and accounting law, and for responding to lawful requests from authorities.
- Legitimate interests – art. 6(1)(f). Used for answering general questions, securing the Site, preventing spam and fraud, and defending legal claims. Our interests are running a secure, functioning business and protecting our catalogue. We have balanced these against your interests and rights; the processing is limited, expected and low-impact. You can object to it (see Your rights).
Where the lawful basis is contract, providing the data is necessary to enter into the contract: if you do not give us an email address, we cannot send you your license or files.
6. Cookies and local storage
The Site is built to work without tracking cookies. We use four browser localStorage items, all first-party and all set by our own code: tb_cart (cart contents), tb_consent (your cookie choice), tb_newsletter (whether you already signed up, so we stop showing the prompt) and tb_theme_seq (your saved Beat Lab pattern). None of these are sent to our server automatically, and none are shared with third parties.
No third-party analytics are loaded by default. Fonts and scripts are served from our own server, so viewing a page does not send your IP address to a font or script CDN. If we ever introduce optional analytics or embeds that set cookies, they will stay switched off until you accept them in the cookie banner, and we will update the Cookie Policy first.
You can review or change your choice at any time with the Cookie settings button in the footer of every page. Full details are in our Cookie Policy.
7. Sharing and processors
We do not sell personal data and we do not share it for cross-context behavioural advertising. We share data only with the categories of recipients below, and only as far as needed.
Processors acting on our behalf
- Website hosting provider – stores the Site and processes server logs.
- Form-handling and email service providers – receive form submissions and deliver email between you and us.
- Newsletter delivery service – stores subscriber email addresses and sends campaigns, if you subscribed.
- File delivery / cloud storage – used to send you WAV files, trackout stems or mixed and mastered masters, and to receive large files from you.
Processors may use your data only on our documented instructions, under a data processing agreement meeting the requirements of Article 28 GDPR, and must keep it confidential and secure.
Independent controllers
- BeatStars – when you buy a license through BeatStars, BeatStars collects and processes your account, payment and order data under its own privacy policy. We receive order information from BeatStars so we can honour your license and support you.
- Payment providers – if a payment is arranged outside BeatStars (for example, for an Exclusive Rights deal or a custom service), the payment provider processes payment data as an independent controller under its own terms.
- Professional advisers – accountants, lawyers or auditors, under confidentiality, where needed for compliance or legal claims.
- Authorities – courts, regulators or law enforcement, only where we are legally required to disclose or where necessary to protect our rights.
Business changes
If the TECHNOLOGY BEATS catalogue or business is transferred (for example, sold or merged), personal data may be transferred to the new owner, who will be bound by this policy or will notify you of any change.
8. International transfers
Our service providers may store or access data in countries outside the EEA or UK, including the United States. Those countries may not offer the same level of data protection as your own. Where personal data from the EEA or UK is transferred to a country without an adequacy decision, we rely on appropriate safeguards, principally:
- the Standard Contractual Clauses (SCCs) adopted by the European Commission (Implementing Decision (EU) 2021/914), together with the UK International Data Transfer Addendum where UK data is involved;
- certification under the EU–U.S. Data Privacy Framework (and its UK Extension) where the recipient is certified;
- adequacy decisions of the European Commission or the UK government, where they apply.
Where required, we assess the laws of the destination country and apply supplementary measures such as encryption in transit and at rest. You can ask for more information about the safeguards used, including a copy of relevant clauses (with commercial terms redacted), through the contact form.
9. How long we keep data
We keep personal data only as long as it is needed for the purpose it was collected for, then delete or anonymise it. The periods below are our standard retention periods; a longer period may apply if a legal claim is pending or the law requires it.
| Data | Retention period | Reason |
|---|---|---|
| Contact / service-request messages that do not lead to an order | 24 months after our last exchange | So we can pick up the conversation if you come back to the project |
| Checkout requests that are not completed | 12 months after submission | Following up and resolving questions about abandoned orders |
| Order, license and invoice records | For as long as tax and accounting law requires (typically 6 to 10 years, depending on jurisdiction), and license records for the lifetime of the license | Legal obligation; proving license ownership and terms (e.g. stream caps on a lease) |
| Project files you send (vocals, stems, demos) | Up to 90 days after final delivery, unless you ask us to keep them longer | Handling revision requests |
| Newsletter subscription | Until you unsubscribe; unsubscribed addresses are kept on a suppression list | Consent; the suppression list ensures we never email you again |
| Server logs | Up to 30 days, longer only when needed to investigate a specific security incident | Security and troubleshooting |
| Anti-spam signals | Up to 30 days | Detecting repeated abuse |
localStorage items (tb_cart, tb_consent, tb_newsletter, tb_theme_seq) | Until you clear them or your browser storage; we refresh consent at least every 12 months | Stored on your device, under your control |
10. Security
We take technical and organisational measures appropriate to the risk, including:
- HTTPS (TLS) encryption for all pages and form submissions;
- self-hosted fonts and scripts, which reduce the number of third parties that can observe your visit and shrink the attack surface for injected code;
- access to inboxes, order records and storage restricted to TECHNOLOGY BEATS, protected by strong unique passwords and two-factor authentication where available;
- time-limited download links for delivered files;
- anti-spam controls on all forms and regular review of service providers.
No system is perfectly secure. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the competent supervisory authority within 72 hours where required and inform affected individuals without undue delay when the risk is high.
11. Your rights
EEA and UK (GDPR and UK GDPR)
Subject to conditions and exceptions set by law, you have the right to:
- Access – obtain confirmation that we process your data and a copy of it (art. 15);
- Rectification – correct inaccurate or incomplete data, such as the name on a license (art. 16);
- Erasure – ask us to delete your data where there is no longer a reason to keep it (art. 17);
- Restriction – ask us to limit processing while a dispute is resolved (art. 18);
- Data portability – receive data you gave us in a structured, machine-readable format (art. 20);
- Objection – object to processing based on legitimate interests, and object at any time to direct marketing (art. 21);
- Withdraw consent – for example, unsubscribe from the newsletter or change cookie choices, at any time (art. 7(3));
- Complain to a supervisory authority (see Complaints to a supervisory authority).
California (CCPA as amended by the CPRA)
If you are a California resident, you have the right to:
- Know the categories and specific pieces of personal information we collected, the sources, the purposes and the categories of recipients (our disclosures in this policy cover the preceding 12 months);
- Delete personal information we collected from you, subject to exceptions such as completing a transaction or legal compliance;
- Correct inaccurate personal information;
- Limit use of sensitive personal information – we do not collect sensitive personal information for purposes that would trigger this right;
- Opt out of sale or sharing of personal information;
- Non-discrimination – we will not deny you services, charge different prices or provide a different quality of service because you exercised your rights.
"Do Not Sell or Share My Personal Information." TECHNOLOGY BEATS does not sell personal information and does not share it for cross-context behavioural advertising, as those terms are defined in the CCPA/CPRA, and has not done so in the preceding 12 months. We have no actual knowledge of selling or sharing personal information of consumers under 16. Because we load no third-party advertising or analytics by default, there is nothing to opt out of today; if that ever changes, we will honour Global Privacy Control (GPC) browser signals as a valid opt-out and add an opt-out link to the footer before any such processing starts.
Categories of personal information collected under the CCPA: identifiers (name, email, IP address), commercial information (license and order records), internet or network activity (server logs), and audio or other sensory information only where you send us recordings for a service. We collect these from the sources and for the purposes listed in section 3.
How to exercise your rights
Submit a request through the contact form, choosing a privacy request as the topic where available, and tell us which right you want to exercise. We will respond within one month (GDPR / UK GDPR, extendable by two months for complex requests) or 45 days (CCPA, extendable once by 45 days), and tell you if an extension applies. To protect your data, we may ask you to confirm the request from the email address associated with your data. California residents may use an authorised agent, who must provide written proof of authorisation. Requests are free unless they are manifestly unfounded or excessive.
12. Children
The Site and our services are not directed at children under 16, and we do not knowingly collect personal data from anyone under 16. Buying a license is a contract, so if you are under the age of majority where you live, a parent or guardian must place the order and accept the license terms. If you believe a child under 16 has sent us personal data, tell us through the contact form and we will delete it promptly.
13. Third-party links and platforms
The Site links to external platforms that have their own privacy practices. We do not control them and are not responsible for their content or data handling. Please read their policies before using them.
- BeatStars. Beat license purchases may be completed on BeatStars. When you click through to BeatStars, it acts as an independent controller of your account, payment and order data and may use its own cookies and tracking. Our licensing guide explains the license terms themselves.
- YouTube. We publish type beats and tutorials on YouTube. Links take you to YouTube, which is operated by Google and governed by Google's privacy policy. If we embed a video on the Site, it will load only after you click it or accept the relevant category in the cookie banner, and we use privacy-enhanced embed mode where available. For Content ID questions about a leased beat, see YouTube Help.
- Social networks and streaming services. Links to Instagram, TikTok, SoundCloud, Spotify and similar services are plain links; no social plugin or tracking pixel loads on our pages. Once you follow a link, that platform's policy applies.
14. Automated decision-making and profiling
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR. Every quote, license decision, Exclusive Rights negotiation and refund request is reviewed by a person. Our anti-spam filter automatically rejects submissions that look like bots (for example, a filled honeypot field or a form submitted in under two seconds); if you believe a genuine message was blocked, try again or contact us another way through the form and we will review it manually.
15. Changes to this policy
We may update this policy when the Site, our services, our providers or the law change. The effective date at the top shows when it was last revised. If a change is material – for example, a new category of data, a new purpose or the introduction of analytics – we will highlight it on the Site and, where we have your email address and the change affects you, notify you before it takes effect. Where a change requires your consent, we will ask for it.
16. How to contact us
TECHNOLOGY BEATS handles all privacy questions and data requests through the contact form. We do not provide a separate email address, phone number or postal address for privacy matters; the form is monitored and privacy requests are prioritised. To help us respond quickly, please include:
- the right you want to exercise or the question you have;
- the email address you used with us (for the newsletter, a form or an order);
- any order reference or beat title that helps us locate your records.
17. Complaints to a supervisory authority
We would like the chance to resolve any concern first, so please contact us through the contact form. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU/EEA member state of your habitual residence, place of work or the place of the alleged infringement. In the United Kingdom, the competent authority is the Information Commissioner's Office (ICO). California residents may contact the California Privacy Protection Agency or the California Attorney General. General information about GDPR rights is available at gdpr.eu.
