Paxor

Privacy Policy

Last updated: 10 October 2026

This Privacy Policy explains which personal data we process when you visit buymybeatshere.com, buy from us or contact us, why we do so, and what rights you have.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is Ilya Ivakh, trading as "Paxor", Kujawska 63/2, 05-270 Marki, Poland. E-mail: support@buymybeatshere.com. For any question about your data, write to that address.

2. Overview

  • Visiting the website: our hosting provider processes technical connection data such as your IP address.
  • Buying: we process your e-mail address, your name and your order. Payment is handled by Stripe.
  • Your device: your cart and the list of your previous orders are stored in your browser, not on our servers.
  • We do not use advertising or tracking cookies, we do not sell personal data and we do not build profiles.

3. Hosting and delivery (Cloudflare)

Our website, our database and the files you download are hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, which acts as our processor. When you open the website or download a file, Cloudflare processes your IP address, the time of the request, the page or file requested, and your browser and device type. This is technically necessary to deliver the website and to protect it against attacks. To stop automated abuse of our forms, we also count attempts per IP address (login, checkout, offers, free downloads, withdrawal form) and, for free downloads, per e-mail address. Each counter is deleted once its time window of at most one hour has passed.

Some links to our website carry a source label, for example a link under a video ("?ref=..."). If you arrive through such a link, we count per label and day how many visits, plays, carts and checkouts came through it. These are totals only: they contain no IP address and nothing that identifies you, and nothing is stored on your device for it. If you then place an order, the label is saved with that order, so that we know which source led to a sale.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure and reliable website. Cloudflare is certified under the EU-U.S. Data Privacy Framework, and its data processing agreement includes the EU Standard Contractual Clauses.

4. Storage on your device

We do not set cookies for visitors. We store three things in your browser's local storage, needed for functions of the website:

  • "bmbh-cart": the contents of your shopping cart, until you complete the order or empty the cart.
  • "bmbh-newsletter": a note that the newsletter invitation has been shown or that you signed up on this device, so that it does not open again on every visit.
  • "bmbh-orders": the list "Previous orders" with order number, date, total and the link to each order page, so that you can find your downloads again without an account. At most 20 orders, until you clear your browser's site data.

This information stays in your browser. Anyone who uses the same browser profile can see it, so clear it on shared devices.

5. Orders

When you order, we process your e-mail address, your full legal name, your artist name if you give one, the products and licenses ordered, the prices, the order number and time, the payment status and the country of your billing address. We also record the time at which you accepted the Terms of Service and gave the declaration about immediate delivery, together with the version of the text, so that we can prove it.

We use this data to conclude and perform the contract, to create your license agreement, which contains your name, and to deliver your files. Legal basis: Art. 6(1)(b) GDPR. We also keep order data to meet tax and accounting obligations. Legal basis: Art. 6(1)(c) GDPR.

6. Payment (Stripe)

Payments are processed by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin 2, Ireland. At checkout you are taken to Stripe's payment page, where you enter your payment details and billing address. We pass your e-mail address, the order amount and an order reference to Stripe. We never see or store your card details. Stripe processes payment data as an independent controller, including for fraud prevention, under its own privacy policy at stripe.com/privacy.

Legal basis: Art. 6(1)(b) GDPR.

7. E-mail

Order confirmations and all other e-mails from the shop are sent through Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA), which acts as our processor. Resend receives your e-mail address and the content of the message, including the attached license agreement. If you receive our news, Resend also keeps your e-mail address on our mailing list, because the newsletters are sent from there. Transfers to the USA are based on the EU Standard Contractual Clauses.

E-mails sent to our support and business addresses are forwarded by Cloudflare (Cloudflare Email Routing) to a mailbox at Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), where we read and answer them. Google stores this correspondence for us. Where data reaches Google LLC in the USA, the transfer is based on the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses.

If you write to us, we process your e-mail address, your name and your message in order to answer you. Legal basis: Art. 6(1)(b) GDPR for questions about an order or a license, otherwise Art. 6(1)(f) GDPR.

8. Notifications to us (Telegram)

When an order is paid, an offer for exclusive rights is made or a withdrawal statement arrives, we receive an internal notification through a Telegram bot (Telegram Messenger Inc.). It contains the number of the order, offer or statement and, depending on the case, the amount, the country or the title of the beat. It contains no name and no e-mail address. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in being informed promptly.

9. Free downloads, offers and news

If you ask for a free download, we process your e-mail address to send you the download link. Legal basis: Art. 6(1)(b) GDPR. We send you news about new beats only if you asked for it: by signing up for the newsletter, or by ticking the box when asking for a free download or at checkout. If you sign up for the newsletter, we process your e-mail address. If you ticked the box when asking for a free download, we also send you one e-mail about licensing the beat you downloaded. If you ticked the box at checkout and then left the order unpaid, we also send you one reminder about that order. Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw that consent at any time through the unsubscribe link in each of these e-mails or by writing to support@buymybeatshere.com. Withdrawing it does not affect e-mails about orders you place.

If you make an offer for the exclusive rights to a beat, we process your e-mail address, your legal name, your artist name if given, the amount and your message, in order to answer the offer and, if it is accepted, to conclude the contract. Legal basis: Art. 6(1)(b) GDPR.

10. Withdrawal form

If you use the form "Withdraw from contract", we process your name, the e-mail address you give, your order number and the time we received your statement. We use this to handle the withdrawal and any refund, to send you the confirmation of receipt that the law requires, and to be able to prove the withdrawal. Legal basis: Art. 6(1)(c) and (b) GDPR.

11. How long we keep data

  • Orders, license agreements and invoices: for the period required by tax and accounting law, which is five years from the end of the calendar year in which the tax was due.
  • Orders that were started but never paid: 30 days, then they are deleted.
  • E-mail addresses for news: until you unsubscribe.
  • E-mail addresses given for a free download without asking for news, and addresses that have unsubscribed: 30 days, then they are deleted.
  • Offers for exclusive rights that were declined, left unanswered or not paid: 90 days after our answer, or after the offer if there was no answer, then they are deleted. An offer that led to a purchase is kept with the order.
  • Counts for links with a source label: until we delete the link they belong to.
  • Withdrawal statements: three years from the end of the year in which we received them.
  • Correspondence: until your request has been dealt with, unless a longer statutory period applies.
  • Technical connection data at Cloudflare: for a short period, as set by Cloudflare.

12. Who receives your data

Only the service providers named in this policy, and public authorities where the law obliges us, for example tax authorities. Some providers are based in the USA or can access data from there. In those cases the transfer is based on an adequacy decision of the European Commission (EU-U.S. Data Privacy Framework) or on the EU Standard Contractual Clauses.

13. Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict its processing, to receive it in a portable format, and to object to processing that is based on our legitimate interests. To use any of these rights, write to support@buymybeatshere.com. Data we are legally required to keep, such as accounting records, cannot be erased before the statutory period ends.

You also have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl. You can also contact the authority of the country where you live.

14. Required data and automated decisions

You can browse the website without giving us any personal data. To order, you must provide your e-mail address and legal name, because we need them to conclude the contract and to issue your license. We do not make automated decisions with legal effect about you. Stripe may run automated checks to prevent fraud, under its own responsibility.

15. Children

Our shop is not directed at children under 16, and we do not knowingly collect their personal data.

16. Changes

We update this policy when our services or the law change. The current version is always on this page.