Privacy Policy

Stanford Music's Privacy Policy explains how we collect, use and protect your personal data when you shop atstanfordmusic.com, shop in stores and interact with us.

The controller of personal data is Stanford Music OÜ,registry code 10988892.If you have any data protection questions or wish to exercise your rights, please write to epood@stanfordmusic.com.

What data do we use and what for?

We process personal data to the extent necessary for the following purposes.

  • Order fulfillment and customer service: name, email address, telephone number, delivery and billing address if applicable, and order, payment and customer communication data. The basis for processing is the conclusion and performance of a contract.

  • User account management: data provided when creating an account and purchase history related to the account. The basis for processing is the performance of the user account service agreement.

  • Accounting: data contained in invoices, payments and other transaction documents. The basis for processing is a legal obligation.

  • E-shop security and rights protection: if necessary, IP address, technical logs and transaction and contact data. The basis for processing is our legitimate interest in preventing misuse, ensuring the functioning of the website and protecting our rights.

We ask for the data necessary to fulfill the order when completing the purchase. If you do not provide it, we may not be able to fulfill the order. We only ask for your personal identification number if it is necessary for a specific service and there is a legal basis for doing so.

Who do we share data with?

We transfer necessary data to service providers who help us fulfill orders and keep the online store running, such as transportation, payment, IT and accounting service providers.

We only provide partners with the data they need to perform their tasks. Service providers who process data on our behalf must comply with confidentiality and data protection requirements. Payment and installment service providers may also process data as independent controllers under their own privacy policies.

We disclose data to authorities if required by law.

We and our service providers process your personal data within the European Economic Area. Personal data will not be transferred outside the European Economic Area.

How long do we retain data?

We retain personal data for as long as necessary to fulfill the purpose for which it was collected or to comply with legal obligations.

  • We retain user account data for the duration of the user account service. To delete an account, please write to epood@stanfordmusic.com. If the accountdata is no longer needed to provide the service and there is no other legal basis for retaining it, we will delete it.

  • We retain original accounting documents for seven years from the end of the financial year in which the transaction was recorded in the accounts.

  • We retain order and customer communication data for the time necessary to fulfill the contract, resolve claims, and file or defend potential claims, taking into account applicable statutes of limitations.

  • We use data for consent-based marketing until consent is withdrawn or the marketing purpose ceases.

Deleting your account does not mean deleting the data that we are required to retain by law or to protect legal claims. When the basis for retention ends, we will delete the data or irreversibly anonymize it.

Cookies

We use cookies to operate the online store, for example to maintain the shopping cart and user session. Cookies that are essential for the website to function do not require consent.

We use analytics and advertising cookies only with your prior consent. You can refuse them and change your choice later or withdraw your consent. Refusal does not prevent you from using the basic functions of the online store.

More detailed information about cookies, their purposes, service providers and retention periods, as well as options for managing consent, is provided on our separate cookie consent page.

How do we protect data?

We implement appropriate technical and organizational security measures to protect personal data from unauthorized access, modification, disclosure and loss. Only those individuals who need to have access to the data to perform their job duties can access the data.

If you suspect misuse of your account or personal information, please write to epood@stanfordmusic.com as soon as possible.

Your rights

You have the right to access your personal data and, under the conditions provided for by law:

  • request correction, deletion or restriction of processing of data;

  • receive the data you have provided in a structured and machine-readable format and request its transmission to another service provider;

  • object to processing based on legitimate interest;

  • prohibit the use of your data for direct marketing;

  • withdraw consent given for data processing.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. The right to erasure does not extend to data that we are required to retain by law or to defend legal claims.

You can change your account details in the"My Account" section. To delete your account or exercise other rights, please write to epood@stanfordmusic.com.If necessary, we will ask for additional information to verify your identity. We will respond without undue delay, usually within one business day.

If you believe that your data protection rights have been violated, please contact us first. You have the right to file a complaint with the Data Protection Inspectorate or to go to court.

Privacy Policy Update

We will update this Privacy Policy as necessary. The current version is published on this page. We will notify you of any significant changes in an appropriate manner.