Privacy Policy

Last updated: 29 September 2026

This Privacy Policy explains how we collect, use, share and protect your personal information when you use our website, order our audio mastering service, buy or use our audio plugins, or otherwise deal with us.

1. Who we are

Belgrave Audio Mastering is a trading name of emixpro Limited, a company registered in England and Wales (company no. 08159940), registered office 71-75 Shelton Street, London, England, WC2H 9JQ (“we”, “us”, “our”).

We are the data controller for the personal information described in this policy. For plugin purchases, FastSpring and we are joint controllers, as explained in section 4.

Contact for privacy matters: [email protected]

2. What this policy covers

This policy applies to:

• our website (belgraveaudiomastering.com), including our contact forms and FAQ search;
• our audio mastering service and the online order and upload form;
• our audio plugin shop, including the plugin basket and FastSpring’s checkout shown in it, and the plugins themselves, including licence activation, free trials and update checks; and
• related features such as customer accounts, loyalty and referrals, and support.

3. The information we collect, why, and our legal basis

For everyone

Information	Why we use it	Legal basis (UK GDPR)
Account and identity: your name, email address, password (stored only in scrambled form), your country (worked out from your IP address at checkout), and any billing address or phone number PayPal passes to us if you pay with PayPal	Create and run your account; take and fulfil orders; communicate with you	Contract; legitimate interests (account security)
Security data: one-time codes emailed to you to sign in, or to confirm your email address and create your account, with a hashed form of the IP address the code was requested from; where we create your account when you confirm your email address with a code, a record that your account was created with an emailed code, and of the sign-in it started, which is removed when you sign out or when the sign-in ends; the date, approximate country and type of device or browser shown in sign-in emails; if you register an account yourself, a record that your email address is not yet confirmed and a hashed copy of the confirmation link with its expiry date; where we set up an account for you after a plugin purchase, a record of whether the set-password email is still to be sent, how many times we have tried to send it, and when the last link was made, and, if you had registered that address yourself without confirming it, the date of your plugin purchase, which is what keeps the account from being deleted as unconfirmed; a pending new email address and a hashed copy of its confirmation link while you confirm an email change; short-lived counters that limit repeated sign-in, code, email-change and form attempts, using a hashed form of your IP address; remembered-device tokens for our administrator accounts only; a short record of emails our support system rejects (the sender’s address and IP address); Cloudflare Turnstile, the automated check on our contact forms, which loads on every page because our contact form can be opened from any page: your browser loads the check from Cloudflare, and when you send a message we pass Cloudflare the check’s result and your IP address to confirm it; and Google reCAPTCHA signals when you request a free mastering sample or ask us to email you a one-time code	Protect accounts and forms from fraud and abuse; make sure an email address belongs to the person who adds it	Legitimate interests; legal obligation (security)
Messages you send us: the name, email address, subject and message you enter in our contact forms, which are emailed to us, and emails you send to our support address	Answer your message and provide support	Legitimate interests; contract where it concerns an order
Website use: the pages you visit and how you arrived at our site, collected through cookies and similar technologies (see section 8); and the words you type into our FAQ search, which we record without any detail of who typed them, to see which topics people look for	Run the site and keep it secure; understand how it is used; and, with your consent, analytics and marketing	Consent (marketing and tracking cookies); legitimate interests (everything else), including the basic visit information Google Analytics receives before you make a choice
Loyalty and referral data: your Studio Points balance and a dated record of each points movement, with the order it relates to where the movement comes from an order. Some movements relate to no order, such as the Welcome Points credited when an account is created, including an account we set up for you when you buy a plugin, and any adjustment we make by hand. We also hold your loyalty tier and lifetime spend, and your referral and loyalty codes. If you use a referral link, we hold the referral attached to your account (the referral code, who referred you, when it was attached and whether it has been used), a dated record that you have used a referral link, and the Referral Points applied to your order. If we reset whether you have used a referral link, we keep a record of the reset (its date and whether it applied to you alone or to everyone), held against your account and a scrambled form of your email addresses. If we remove a referral from your account, we keep a record of the removal.	Run the loyalty and referral programmes; detect and prevent fraud	Contract; legitimate interests (preventing fraud); consent (where you opt in)

Audio mastering

Information	Why we use it	Legal basis
Mastering order data: track titles, release title and artist, service type, add-ons, vinyl and DDP options, ISRC codes, notes, the audio files you upload and technical details of them (such as length, format and loudness), preview copies we make of your audio, revision requests, and order forms you save to finish later. When you place an order, our shop system also records your IP address and browser details, and how you arrived at our site (for example the website or campaign that referred you, the first page you saw and how many pages you viewed)	Provide the mastering service you ordered; keep a record of the order and help prevent fraud; understand how customers find us	Contract; legitimate interests (fraud prevention and understanding how customers find us)
Payment data (mastering), handled by our payment providers, Stripe and PayPal, depending on the method you choose at checkout. If you choose Amazon Pay, Klarna or Revolut Pay (offered through Stripe), that provider also receives your payment details and handles them under its own privacy notice. We receive confirmation of payment and limited details (for example card type and last 4 digits), not your full card number	Take payment; fraud prevention; accounting	Contract; legal obligation; legitimate interests
Support tickets: your messages to us about an order and our replies, including replies you send by email (received through Brevo). If an email reply carries attachments, the attachments are not accepted, stored or opened: we add a note to your message in the ticket listing each file’s name and type, and keep an internal note of whether we sent you an automatic reply.	Provide customer support	Contract; legitimate interests

Audio plugins

Information	Why we use it	Legal basis
Plugin purchase data: FastSpring, our reseller and merchant of record, collects your email address, name, country, payment details and, if you enter one, your VAT ID in its checkout, which is shown inside our basket page. Your payment details go only to FastSpring and never reach us. From the order details FastSpring sends us, we keep your name, email address and country, the plugins and quantities you bought, the order reference, the amount and currency paid, and any refund	Sell and license the plugins; email your licence key, or, if you already hold a licence for that plugin under the same email address, add the extra computers to it; set up a free website account for you with that email address, unless it already has an account, and email you a link to set its password; keep our sales records	Contract; legal obligation (keeping sales records)
Licence and activation data: your licence details (product, licence key, type, number of computers, start and end dates, how it was issued, the reseller if you bought through one, the name and email address it was issued to, and the order reference), including any licence given free with a mastering order. For each computer you activate a licence or start a free trial on: a hashed (non-reversible) identifier for the computer, your operating system and its version, processor type, the plugin, its version and its format, the music software the plugin runs in, your country, when the computer was first activated, when it last checked in, and whether it is still active. We also keep a record of which computers have had a free trial of each plugin. If you activate a key bought from a reseller that was not issued to an email address, we record the email address you activated it with. We do not store your raw computer identifier. Your IP address is seen briefly by our servers, for example to prevent abuse, but is not kept in raw form. When you press Check for updates, the plugin sends only which plugin it is and whether you use a Mac or Windows	Issue, activate and check licences and free trials; confirm at least once every twelve months that a licence is still valid; allow each computer one free trial of each plugin; show you your licences, computers and downloads in your account; provide support; prevent piracy and abuse	Contract; legitimate interests (protecting our software and running free trials fairly)
Licence history: a dated record of each change we or our systems make to your licence (for example when it is issued, emailed, edited, moved to another person, revoked with the reason, reinstated, when a computer is released or seats are added by a purchase, or when a plugin purchase sets up a website account for you and we send you the link to set its password, including where that email failed or was not repeated), with what changed and who made the change. Where a licence is moved between people, the record keeps the earlier holder’s details	Keep an accurate record of what each customer is licensed for; resolve support questions and disputes; detect and investigate misuse	Legitimate interests (running and protecting our licensing system); contract
Trial download records: which plugin and platform you downloaded, your country, the page that linked to the download, the date, and whether you were signed in (not who you are). A scrambled form of your IP address is held for 24 hours so that a repeat download is not counted twice	Measure interest in our free trials and where visitors find them	Legitimate interests

If you hold a plugin licence or free trial with us, including plugins given free with a mastering order, our staff can see the information about it in one customer record under your email address. The record shows:

• your licences and the computers they are activated on;
• your plugin purchases and refunds, and the history of changes to your licences;
• whether you have an account on our website, your mastering loyalty tier, any plugin loyalty discount you qualify for, and how many orders you have placed on our website.

It does not include your audio, your Studio Points or the contents of your mastering orders. It highlights licences that may need our attention, for example where a licence has been revoked or has expired, all its computers are in use, or a trial is ending. It also lets us see licences with no activity in the last 90 days. If you use more than one email address with us, we may link them so that your records are shown together. This does not change your licences, your orders or the addresses they are held under. We do this under our legitimate interests in providing support and administering licences.

We only ask for what we need. You don’t have to give us everything, but some information is necessary to take an order or provide the service.

4. Who we share it with

We use trusted third parties (“processors”) to run our service. We share only what’s needed, and they are bound to protect your data:

• Stripe and PayPal, payment processing for mastering orders. If you choose Amazon Pay, Klarna or Revolut Pay at checkout (offered through Stripe), that provider also receives your payment details and handles them under its own privacy notice.
• Hetzner (Germany, in the EU), secure storage of your uploaded audio, masters and related files.
• Hetzner Online GmbH (Germany), which hosts the server that prepares your uploaded audio for mastering.
• Our mastering engineers, who receive your audio, your name (or your email address if no name was given), and the track, release and note details you give with your order, so they can master it.
• Brevo, sending our emails and receiving your email replies to support tickets.
• Google Workspace, our business email, including emails you send to our support address.
• Google Analytics, measuring how our website is used (see section 8).
• Google Fonts, which supplies the typefaces our pages use. Your browser requests them from Google, which sees your IP address.
• Google reCAPTCHA, bot and abuse prevention when you request a free mastering sample or ask us to email you a one-time code.
• Cloudflare, content delivery, performance and security, including Cloudflare Turnstile, the automated check that protects our contact forms from abuse (see section 3).
• Our hosting provider (SiteGround), website and database hosting.

FastSpring. FastSpring sells our plugins as reseller and merchant of record. When you buy a plugin, FastSpring collects your details in its checkout, which is shown inside our basket page, and uses them under its own Privacy Statement for payment, tax and fraud checks. For the sale, FastSpring and we are joint controllers of that information: FastSpring is responsible for the checkout, payment, tax and fraud checks, and we are responsible for the licence we issue from it. You can contact either of us. FastSpring shares your name, email address, country and purchase details with us so we can issue your licence.

When you visit our Plugins page or basket page, your browser loads FastSpring’s basket software and checkout directly from FastSpring (onfastspring.com), and product pictures from the image service FastSpring uses (cloudfront.net). As with any web request, this gives those services your IP address and basic browser details. FastSpring’s software is not loaded on any other page of our site.

We may also share information where we’re required to by law, to establish or defend legal claims, or as part of a sale or reorganisation of our business. We do not sell your personal information.

5. International transfers

Some of our processors are based outside the UK (for example FastSpring, Google and Cloudflare in the United States). Where personal information is transferred outside the UK, we rely on appropriate safeguards, such as UK adequacy regulations or the International Data Transfer Agreement / Standard Contractual Clauses, so that your data stays protected to UK standards.

6. How long we keep it

We keep personal information only as long as we need it:

For everyone

Data	Retention
Financial and transaction records (mastering orders, plugin sales and refunds)	At least 6 years, as HMRC requires. We currently keep them with no set end date.
Customer account and profile data	While your account is active. If you ask us to close your account, we delete or anonymise it within one month of your request, except the financial records above, and except that if a paid mastering project of yours has not yet been delivered, we first finish it, or cancel it if you ask us to under our cancellation terms (see section 7). Accounts whose email address is never confirmed, and which have no paid orders, are deleted about 14 days after sign-up. A plugin purchase counts as a paid order for this, so an account linked to one is kept.
Security records	Sign-in codes: deleted within two days after they expire. Counters that limit repeated sign-in and form attempts, other than on our contact forms: expire within an hour. The counter that limits repeated messages from our contact forms (5 attempts from the same IP address within 10 minutes): expires 10 minutes after the last attempt it counted. The hashed copy of an email confirmation link: kept until your information is erased. Our record of rejected emails sent to our support system (sender address and IP address): entries are removed once they are 10 days old, the next time the record is updated. Records kept by our hosting and security providers (SiteGround and Cloudflare): kept for the periods those providers set.
Messages sent through our contact forms or to our support email address	Kept in our email mailbox. You can ask us to delete them at any time.
Your cookie choice	Stored in your own browser for 182 days, after which the banner asks again. We keep no copy.
FAQ search words	Kept until we clear the report. They are not linked to anyone.
Studio Points history	While your account is active, then deleted with your account data when your account is closed.
Referral records on your account (the referral attached to your account, the record that you have used a referral link, any reset of it, and any removal of a referral)	The attached referral: until it is used or ends. The other records: while your account is active, then deleted with your account data. All of them are deleted if you ask us to erase your information, apart from the notes described in section 7.
Notes kept after an erasure so an offer cannot be claimed twice, and so two people cannot refer each other (scrambled forms of email addresses, or of your computer’s identifier, with the plugin, for plugin trials, and nothing else apart from the date on a note of a used referral)	Kept for as long as the offer they protect is available, then deleted.

Audio mastering

Data	Retention
Uploaded source audio (premasters) and working copies made from it	We can’t guarantee to keep them for any particular period, so please keep your own copies.
Delivered masters	Available to download from your account; we can’t guarantee to keep them indefinitely, so please keep your own copy.
Support tickets	Kept with no set end date, as part of the record of your order, and deleted if you ask us to erase your information.

Audio plugins

Data	Retention
Licence and activation data, free-trial records and licence history	We keep these records with no set end date, including after a licence or free trial has ended, because we use them to confirm what you are licensed for, answer support questions and make sure each computer has only one free trial of each plugin. Records linked to your email address are deleted if you ask us to erase your information (see section 7). Free trials started from within a plugin are not linked to a name or email address. If you ask us to erase your information, trial records on a computer where you also activated a licence are reduced to the hashed computer identifier and the plugin, so that computer still cannot start a second free trial of that plugin. They hold only the hashed computer identifier and the technical details listed in section 3. Computer identifiers are stored only as non-reversible hashes.
Trial download records	24 months, then deleted. The scrambled form of your IP address used to avoid counting a repeat download: 24 hours.
Plugin basket in your browser	Until your order is completed, the basket expires, or you clear your browser’s data (see section 8).

7. Your rights

Under UK data protection law you have the right to:

• access the personal information we hold about you;
• ask us to correct inaccurate information;
• ask us to erase your information (see below);
• restrict or object to how we use it;
• portability, receive certain data in a usable format; and
• withdraw consent at any time where we rely on it.

We use built-in tools to export and erase the information held in our website systems. Each request is handled by email address. If you ask from the email address currently on your website account, we also include the earlier email addresses we have recorded for that account. Please still tell us every email address you have used with us.

An export includes:

• your account and sign-in records, including sign-in codes we have sent you (without the codes themselves), and, where we set up your account after a plugin purchase, our record of the set-password email we sent you and of the purchase that lets us keep the account;
• your mastering orders (service, tracks, project and release names, file names, your order notes, our notes on your orders, and any discounts, coupons or points used);
• your saved order forms (name, service, number of tracks and the tracks entered), your upload records, including uploads made without signing in, your revision requests, and your support tickets and messages, including any automatic system notes on them;
• your Studio Points balance and every points movement, your loyalty tier and qualifying spend, and any coupons we issued to you;
• your referral details, including the referral attached to your account (without the identity of the person who referred you) and any reset of whether you have used a referral link, with its date and whether it applied to you alone or to everyone;
• your plugin licences, the computers they are activated on and the history of changes to them, including the record of any website account a plugin purchase set up for you and of the set-password emails we sent;
• your plugin purchase records (product, order reference, amount and currency, any refund, email address, country and date).

Where a licence was previously held by someone else, their details are left out. Your audio files and masters are not part of the export.

If we erase your information:

• your Studio Points balance and history, loyalty tier and qualifying spend, your referral codes and the referral records on your account are deleted (apart from the notes described below), so any unused points and loyalty benefits are lost;
• your saved order forms, upload records, sign-in codes, our record of any set-password email we sent you after a plugin purchase, and other account security records are deleted, and any coupons we issued only to you are deleted, or have your details removed if you have used them;
• your mastering orders are kept as financial records only: your name, email address, postal address, phone number and IP address are removed, together with file names, track names, song titles, ISRCs, release details, project names, notes, referral details and every other project detail, and the payment method is kept only as its type, for example PayPal or card. Our accounting records keep your name against each payment, and nothing else about you;
• your uploaded audio, your masters and every file made from them are deleted from our storage, including files from orders deleted earlier;
• your plugin licences held under that email address, including any given free with a mastering order, are deleted together with the records of the computers they were activated on and their history, and any link we made between your email addresses is removed. The licences can no longer be activated, and a computer already using one stops working when it next needs its yearly online confirmation, no later than twelve months after its last successful check. Free trial records on a computer where you also activated one of those licences are reduced to the hashed computer identifier and the plugin;
• your support tickets and messages and your revision requests are deleted;
• your website account is emptied and locked: your name, email address, username and password are replaced, and nothing else about you is kept on it, apart from the date it was created;
• records of payments and refunds, including the payment provider’s reference for each payment, are kept for at least 6 years, as the law requires, with only the details needed for our accounts; plugin sales records are kept without your email address or country;
• we keep a note that your email address has already used a referral link, a free mastering sample or the Welcome Points, or has had a paid mastering order, where that applies. It is stored in a scrambled form that cannot be turned back into the address, holds nothing else (the note of a used referral also holds the date of the erasure), and is used only so those offers cannot be claimed twice;
• if you referred someone, or someone referred you, we keep a note linking scrambled forms of both people’s email addresses, and nothing else, so that the two of you cannot refer each other in future;
• if someone referred you and the Studio Points they are due for your order are still waiting, we give them the points at that point, provided your order has been paid for and the referral still stands. Your order keeps the record of that reward, so that a later refund can still be applied, and a note saying whether a reward was paid, which names nobody; and
• we keep a record of your request (your email address and when it was carried out) so we can show that we completed it, and a note containing no personal information in our licence records.

If a mastering project of yours has been paid for but not yet delivered when you ask, we finish it, or cancel it if you ask us to under our cancellation terms, and then carry out your request.

FastSpring, as merchant of record for plugin sales, keeps its own records of your plugin purchases under its own privacy policy.

To exercise any of these rights, email [email protected]. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, though we’d appreciate the chance to help first.

8. Cookies and browser storage

We use cookies and similar technologies, such as your browser’s local storage. When you first visit, our cookie banner lets you accept or reject optional cookies. There are two categories.

• Essential (always on): needed for the site, your account, sign-in, the order form, the plugin basket and checkout, and security. These include:
  • our website’s cookies for sign-in and orders;
  • a cookie that lasts for your visit and remembers a referral link you followed during your visit. When you confirm your email address or add the referral to your account, it is also held on your account (see section 3). Signing out clears it from your visit;
  • the cookie that stores your cookie choice (for 182 days);
  • security cookies that Cloudflare may set to protect the site from automated abuse.
• Marketing and tracking (only with your consent):
  • Google Analytics cookies, which help us understand how the site is used.

When you accept, we also allow Google to use this information for advertising measurement and personalisation.

Google Analytics is loaded on every page. Until you accept marketing and tracking cookies it sets no cookies, but it still sends Google basic information about your visit, such as the page viewed; as with any web request, Google sees your IP address.

Our shop system also records how you arrived at our site (for example the website or campaign that referred you, the first page you saw and how many pages you viewed), using short-lived cookies, and saves this with any mastering order you place. These are set whatever you choose in the banner.

Plugin basket. When you add a plugin to your basket, three small entries are saved in your browser’s local storage so your basket is kept as you move around the site and between visits:

• two are saved by FastSpring’s basket software: a basket session identifier with its expiry time, and a record of the latest session;
• one is saved by our site: the number of items in your basket, so the basket icon can show it on every page.

They contain no name, email or payment details. FastSpring’s two entries are removed when your order is completed, and the basket session also expires after a period set by FastSpring. The item count stays in your browser until you clear your browser’s site data, which you can do at any time. We treat these as essential, because they are needed to provide the basket you asked for. FastSpring’s checkout, which is shown inside our basket page, may use its own cookies or storage on FastSpring’s website; these are covered by FastSpring’s Cookie Policy.

Mastering order form. While you fill in the mastering order form, your browser’s local storage keeps a copy of what you have entered, and the running order total shown in the menu, so nothing is lost if the page is reloaded. The copy covers:

• the service;
• file names, track titles and ISRC codes;
• release title and artist, and notes;
• any points applied.

The copy stays in your browser and reaches us only when you place your order or choose Save. It is offered back to you for 24 hours. It is removed when your order is completed, when you choose not to restore it, or, once it is more than 24 hours old, the next time you open the form.

Payment providers. Our payment providers’ checkout components may set their own cookies on our checkout page to prevent fraud.

When you download a free plugin trial, we also note whether you were signed in at the time (not who you are), using the sign-in cookie already set by your account.

To change your choice, clear this site’s cookies in your browser; the banner will then appear again on your next visit.

9. Security

We protect your information with measures including:

• encryption in transit;
• encrypted storage of the access keys our systems use to reach our storage, email and security services;
• private storage for your uploaded audio and masters, which can be reached only through short-lived secure links;
• computer identifiers for plugin licences, stored only as non-reversible hashes;
• access controls;
• a one-time code emailed to you each time you sign in to the website, used on its own or together with your password.

No system is perfectly secure, but we take reasonable steps to keep your data safe and to tell you and the regulator about a breach where the law requires.

10. Children

Our service is intended for adults and is not directed at children under 16. We don’t knowingly collect data from children; if you believe a child has provided us information, please contact us and we’ll remove it.

11. Changes to this policy

We may update this policy from time to time, for example to reflect new features or legal requirements. We’ll post the current version here with an updated date, and highlight significant changes.

12. Contact

Questions about this policy or your data? Email [email protected].