Privacy Policy (GDPR)
Effective Date: January 1, 2026
This Privacy Policy explains how Abbara Sounds, Inc. (“Abbara,” “we,” “us,” or “our”) collects, uses, shares, and otherwise processes personal data when you visit or use https://abbarasounds.com and any subdomains of abbarasounds.com that are owned or controlled by Abbara (collectively, the “Site”), and related services provided through the Site (collectively, the “Services”).
This Privacy Policy is intended to satisfy requirements under the EU General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”) and, where applicable, the UK GDPR. For U.S. state privacy disclosures, you may publish a separate addendum or include state-specific sections.
1. Controller and Contact Details
Controller:
Yusuf Demir AkcayAbbara Sounds, Inc.2093 Philadelphia Pike #8865Claymond, DE 19703Email: notice@abbarasounds.com
2. Scope
This Privacy Policy applies to personal data we process when you:
visit or use the Site and Services;
create an account or make purchases;
communicate with us (e.g., support requests); or
otherwise interact with us in connection with the Services.
This Privacy Policy does not apply to third-party websites, services, or apps that may be linked from the Site.
3. Personal Data We Collect
We collect personal data from you, from your devices, and from third parties as described below.
3.1 Data You Provide
Account data: name, username, email address, password (stored in hashed form), and other account/profile information you choose to provide.
Transaction data: billing name, billing address, payment status, purchase history, license selections, invoices/receipts, refunds/chargeback information (if applicable).
Communications: messages you send to us (support tickets, emails, and other communications).
3.2 Data We Collect Automatically
Device and usage data: IP address, device identifiers, browser type, operating system, referring URLs, pages viewed, access times, and interactions with the Site.
Log and security data: server logs, diagnostic logs, and security events.
3.3 Data From Third Parties
Payment processors: confirmation of payment and limited payment-related details (we generally do not store full payment card numbers).
Analytics and fraud prevention providers: information used to measure site performance and help prevent abuse or fraud.
Marketing partners (if applicable): attribution data (e.g., whether a marketing campaign led to a signup).
4. Cookies and Similar Technologies
We use cookies and similar technologies as described in our Cookie Policy located at https://abbarasounds.com/pages/cookie-policy-eu. Where required by law, we obtain consent for non-essential cookies.
5. Purposes of Processing and Legal Bases (GDPR/UK GDPR)
We process personal data for the purposes below and rely on the following legal bases, as applicable:
5.1 Provide the Services and Perform a Contract
Purpose: Create and manage accounts, provide access to features, deliver digital products, administer licenses, process transactions, and provide customer support.Legal basis: Performance of a contract (Article 6(1)(b)); legitimate interests (Article 6(1)(f)) where appropriate.
5.2 Legitimate Interests
Purpose: Operate, maintain, and improve the Site; troubleshoot; prevent fraud and misuse; secure systems; enforce our Terms and licensing terms; conduct analytics to improve Services; maintain business records.Legal basis: Legitimate interests (Article 6(1)(f)). Our legitimate interests include protecting our business and users, improving Services, and maintaining security.
5.3 Consent (Where Required)
Purpose: Use of non-essential cookies/trackers (e.g., certain analytics or marketing cookies), and marketing communications where consent is required.Legal basis: Consent (Article 6(1)(a)). You may withdraw consent at any time (without affecting processing prior to withdrawal).
5.4 Legal Obligations
Purpose: Compliance with applicable laws and regulations (tax, accounting, responding to lawful requests, and legal claims).Legal basis: Legal obligation (Article 6(1)(c)).
5.5 Marketing (Direct Marketing Where Permitted)
Purpose: Send marketing communications and updates.Legal basis: Consent (Article 6(1)(a)) where required; otherwise legitimate interests (Article 6(1)(f)) where permitted by applicable law. You can opt out at any time.
6. How We Share Personal Data
We may share personal data with:
6.1 Service Providers (Processors). Vendors that help us provide and operate the Services (hosting, analytics, customer support tools, payment processing, fraud prevention, email delivery). These providers process personal data on our instructions and subject to contractual safeguards.
6.2 Affiliates. Our affiliates for internal business operations, to the extent permitted by law.
6.3 Legal and Safety. If required by law or if we believe disclosure is necessary to protect rights, safety, and security; investigate fraud; or enforce our agreements.
6.4 Business Transfers. In connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.
6.5 With Your Direction. When you request or direct us to share your personal data, including via integrations.
7. International Transfers
Your personal data may be processed in the United States and other countries where we or our service providers operate. If we transfer personal data from the EEA/UK to a country that does not provide an adequate level of protection, we will use appropriate safeguards such as:
the EU Standard Contractual Clauses (SCCs); and/or
the UK International Data Transfer Addendum,
and implement supplementary measures where required.
You may request more information about our transfer safeguards by contacting us using the details in Section 1.
8. Data Retention
We keep personal data only as long as necessary for the purposes described in this Privacy Policy, including to:
provide the Services and maintain your account;
administer and evidence licenses and transactions;
comply with legal obligations (e.g., tax and accounting);
resolve disputes and enforce agreements; and
maintain security and prevent fraud.
Retention periods vary depending on the data type and context. Where feasible, we will delete or anonymize personal data when it is no longer needed.
9. Security
We implement appropriate technical and organizational measures designed to protect personal data. However, no security measure is perfect, and we cannot guarantee absolute security.
10. Your GDPR/UK GDPR Rights
If GDPR/UK GDPR applies to you, you may have the following rights (subject to legal limitations):
Right of access (Article 15)
Right to rectification (Article 16)
Right to erasure (Article 17)
Right to restriction (Article 18)
Right to data portability (Article 20)
Right to object (Article 21), including objecting to direct marketing
Right not to be subject to certain automated decision-making (Article 22), where applicable
Right to withdraw consent at any time where we rely on consent
To exercise your rights, contact us using the information in Section 1. We may need to verify your identity before responding.
11. Complaints
You have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or where you believe an infringement occurred.
EEA: You may contact your local data protection authority.
UK: You may contact the Information Commissioner’s Office (ICO): https://ico.org.uk/
We encourage you to contact us first so we can try to resolve your concern.
12. Children
The Site and Services are not directed to children under 13, and we do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us so we can take appropriate steps.
13. Automated Decision-Making
We do not engage in automated decision-making that produces legal or similarly significant effects on you (as described in Article 22)ç
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The Effective Date above indicates when it was last updated. Changes are effective when posted on the Site.
15. Contact Us
If you have questions about this Privacy Policy or our privacy practices, contact:
Abbara Sounds, Inc.2093 Philadelphia Pike #8865Claymond, DE 19703Email: notice@abbarasounds.com