privacy policy

AMILO decides what personal data this site collects and why, and is therefore the data controller under the General Data Protection Regulation (GDPR).

Publisher

AMILO (Evan Ferry), sole trader registered in France

SIREN

100 161 389

SIRET

100 161 389 000 18

VAT

Not charged, Article 293 B of the French General Tax Code

Email

contact@amilomusic.com

Registered address

France, available on request by email

Director of publication

Evan Ferry

Hosting

Hostinger International Ltd, 61 Lordou Vironos Street, 6023 Larnaca, Cyprus

Nothing is collected that the site does not actually need.

• Order data. The email address, the products bought, the amount and the payment reference. Needed to deliver your download and to keep the accounting records the law requires. Legal basis: performance of the contract, then legal obligation.
• Account data. Email address, display name, and an authentication identifier, if you create an account. Lets you find your past orders and download them again. Legal basis: performance of the contract.
• Cart data. The products you added, stored so your selection survives a reload or a change of device when you are signed in. Legal basis: legitimate interest in a working store.
• Messages. Anything you write in the contact form, including your name and email. Legal basis: legitimate interest in answering you.
• Newsletter. Email address only, and only if you ask for it. Legal basis: consent, withdrawable at any time.
• Reviews. The name you choose to display and the text you write. Legal basis: consent.
• Audience measurement. Pages viewed and approximate origin, only if you accept analytics cookies. Legal basis: consent.

Card numbers are never collected. They go straight to Stripe and never touch our servers.

These providers act on our instructions. Each is bound by a data processing agreement.

• Stripe Payments Europe Ltd (Ireland). Payments and fraud prevention.
• Google Ireland Ltd, Firebase. Accounts, database, and hosted order records.
• Google Ireland Ltd, Analytics 4. Audience measurement, loaded only with consent.
• Resend Inc. (United States). Transactional and newsletter email, under Standard Contractual Clauses.
• Hostinger International Ltd (Cyprus / EU). Server hosting.

Your data is never sold, rented, or shared for anyone else's advertising.

• Invoices and order records: ten years, as required by French commercial law.
• Account data: until you delete your account, then removed within thirty days.
• Download links: a few days, then they expire and are purged.
• Contact messages: three years from the last exchange.
• Newsletter subscriptions: until you unsubscribe, plus a suppression record so we do not email you again by mistake.
• Analytics: fourteen months maximum.

Under the GDPR you may ask for access to your data, correction, deletion, restriction, portability, and you may object to processing based on legitimate interest. Where processing rests on consent, you can withdraw it at any time without affecting what happened before.

Write to contact@amilomusic.com. We answer within one month. If you are not satisfied, you may lodge a complaint with the CNIL, the French supervisory authority, at cnil.fr.

The site is served over HTTPS only. Passwords are handled by Firebase Authentication and are never visible to us. Order records are readable only by the site's own server: the database rules deny public read access outright. Downloads are protected by signed links with a short lifetime rather than by public file URLs.

Cookies and similar storage are described on their own page, including how to change what you accepted. See the Cookie Policy.

This store is not intended for children under sixteen. If you believe a child has given us personal data, write to us and it will be deleted.