Privacy policy.

1. Who I am

• Trade nameBellioss Beats — independent music producer and beatmaker in the European Union
• OwnerMichael Umo Bamishe
• AddressCalle Puerto de Maspalomas, 2, 28029 Madrid, Spain
• Privacy email[email protected]
• Websitebelliossbeats.com

Write to [email protected] to exercise your rights or ask anything about this policy.

2. What data I collect

Contact form on this site. If you write through the form, I process the data you enter: name, email, project type, approximate budget (optional) and message, plus a record that you accepted this policy. The service that delivers the message may log technical data (IP, date and time of submission).

Direct emails. If you write to [email protected], I process the data included in your email.

BeatStars purchases and licences. If you buy or licence a beat through the BeatStars player, BeatStars handles the payment and that purchase data under its own privacy policy. I receive from BeatStars what I need for the licence (for example which beat and which licence), not your card details.

Newsletter. This website has no newsletter. If I ever add one, I'll ask for separate consent and update this policy.

Browsing. This site uses no advertising or social media pixels and builds no profiles; analytics (Google Analytics 4) is only used if you accept it (see "Analytics"). The hosting server (Cloudflare, Inc. (Cloudflare Pages), USA) may keep technical security logs (IP, browser, page, date and time), like any website.

Please don't include sensitive data, or data about other people that isn't needed for your enquiry, in your message.

3. How I use the data

I use your data to:

• Reply to your enquiries and, if you ask, prepare a quote or manage a job.
• Support beat purchases/licences and service bookings through BeatStars (BeatStars processes the payment), or reply if you write via the form.

I don't sell or rent your data. I don't share it with anyone for marketing. I don't make automated decisions or build profiles with it.

4. Legal basis

• Consent (Art. 6(1)(a) GDPR / Spanish LOPDGDD): when you tick the form checkbox or email me. You can withdraw it at any time, without affecting earlier processing.
• Contract or pre-contractual steps (Art. 6(1)(b)): if your enquiry becomes a quote or a job, and for licences bought via BeatStars.
• Legitimate interest (Art. 6(1)(f)): replying to people who contact me, keeping the site secure (server logs) and improving the service in a non-intrusive way.

5. Third parties

I don't share your data unless legally required. These providers are involved so the site and purchases work:

• BeatStars (BeatStars Inc., USA) — catalogue, licences and service pages (visualizer, composition, custom beat, diagnosis, mastering, mixing). The player only loads if you press "Load beat catalogue"; before that there is no request to BeatStars. Once loaded it may use its own cookies and those of services it integrates (in a technical check of this site: Stripe, Google Fonts / Tag Manager and YouTube). Purchases and bookings on BeatStars follow BeatStars' terms. The "View on BeatStars" links in Services open those pages in a new tab. BeatStars privacy policy.
• Spotify (Spotify AB, Sweden) — album players in the discography. They only load if you press "Listen here". Spotify privacy policy.
• Web3Forms (Web3Creative, India) — receives the form data and emails it to me (AWS infrastructure; CleanTalk/Akismet anti-spam). Web3Forms privacy policy.
• Google (Gmail) — [email protected] is a Gmail account where I receive and store messages (via Web3Forms or mailto). Google privacy policy.
• Web hosting provider — Cloudflare, Inc. (Cloudflare Pages), USA.

There are also plain links to Instagram, Facebook, Threads, TikTok and YouTube: they send no data until you click. This site's fonts are self-hosted (my pages don't call Google Fonts; the BeatStars player may load its own).

Some providers process data outside the EEA (e.g. India or the USA) under Standard Contractual Clauses or other recognised safeguards.

6. Cookies and preferences

This website sets no tracking or advertising cookies of its own. On your first visit you'll see a notice with three equally visible buttons: Accept all, Reject and Settings. Nothing optional loads before you choose.

• Necessary (always on) — your choice is stored in localStorage under the key "bb-consent" (version, date and accepted categories; no personal data). You're asked again after 6 months or if the categories change. After you press "Load beat catalogue", a session flag in sessionStorage ("bb-beatstars") avoids asking again during that visit; it's deleted when you close the tab. If you send the form, another session flag ("bb-sent") limits submissions to slow down spam.
• Analytics (optional) — Google Analytics 4, only if you accept it. Details in the next section.
• Third-party content (optional) — if you accept it, the BeatStars catalogue (and services it integrates: Stripe, Google, YouTube) and the Spotify players load automatically. If not, they stay behind their button: pressing "Load beat catalogue" or "Listen here" counts as consent for that content only.

You can change or withdraw your consent at any time from "Cookie preferences" in the footer of every page. You can also block or delete cookies in your browser; the catalogue or players may stop working, but you can always open BeatStars or Spotify in another tab.

6a. Analytics (Google Analytics 4)

If enabled and you accept "Analytics", Google Analytics 4 (Google Ireland Ltd.) loads with Consent Mode v2 (everything denied by default), anonymised IP and no advertising signals. It tells me, in aggregate, which pages are visited and from what kind of device. Legal basis: your consent.

• Cookies: _ga (distinguishes visitors, up to 2 years) and _ga_<ID> (keeps session state, up to 2 years). Event data is kept in Google Analytics for 14 months.
• Transfers: Google may process data in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF) and also applies Standard Contractual Clauses. Google privacy policy.
• If you withdraw consent, the site stops measuring and deletes the _ga cookies for this domain.

7. Your rights (GDPR / LOPDGDD)

You can exercise at any time: access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent. Write to [email protected] with the subject "Data protection" and say which right you want to exercise. If needed, I may ask you to confirm your identity. I'll reply within one month at the latest.

You can also lodge a complaint with the Spanish Data Protection Agency (AEPD, aepd.es) or with the supervisory authority in your country.

8. Retention

Form and email messages are kept for as long as the conversation lasts and then for a maximum of 12 months after the last contact, so I can pick things up if you write back. If there is a job, I'll keep what the law requires (e.g. tax records).

Web3Forms may keep a copy of submissions under its own policy (up to three years). If you ask for erasure, I'll also request deletion of that copy.

9. Updates

If the way the site works changes (for example if I add a newsletter or another service), I'll update this policy. The current version is always the one on this page, with the last-updated date above.