RIFFSOURCE · Privacy Policy
Privacy Policy
RIFFSOURCE is committed to privacy, transparency and responsible data handling. This Privacy Policy explains how personal data may be processed in connection with riffsource.com, communication with the studio and related services.
Scope
This Privacy Policy applies to the following:
- The website available at riffsource.com
- Communication with RIFFSOURCE, including contact and support requests
- Future online services operated by RIFFSOURCE that reference this policy
Controller
The controller responsible for processing under this Privacy Policy is the entity identified below.
- Legal entity
- [Legal entity name — to be completed before publication]
- Address
- [Postal address — to be completed before publication]
- privacy@riffsource.com
- General contact
- contact@riffsource.com
Information we may collect
The categories of information processed depend on how you interact with RIFFSOURCE. The table below summarises typical categories, examples and purposes.
| Category | Examples | Purpose |
|---|---|---|
| Website access | Technical log information, requested pages, referrer data, browser and device information, IP address where technically required | Operation, delivery and security of the website |
| Contact | Name, email address, message contents and other information you choose to provide | Responding to enquiries and managing necessary follow-up communication |
| Support | Contact details and information you voluntarily provide to describe an issue or request assistance | Providing support and resolving reported problems |
Why information is processed
Personal data is processed for the following purposes, as applicable:
- Website operationTo deliver, maintain and secure riffsource.com and related technical infrastructure.
- CommunicationTo receive, review and respond to messages sent to RIFFSOURCE.
- SupportTo handle support requests and provide requested assistance.
- SecurityTo protect systems, detect misuse and maintain service integrity.
- Legal complianceTo meet applicable legal, regulatory and accounting obligations.
- Fraud preventionTo identify, prevent and address unlawful or abusive activity where necessary.
Legal basis
Where the General Data Protection Regulation (GDPR) applies, processing may rely on one or more of the following legal bases:
- ConsentWhere you have given clear consent for a specific processing activity.
- ContractWhere processing is necessary to perform a contract or take steps at your request before entering into a contract.
- Legal obligationWhere processing is necessary to comply with applicable law.
- Legitimate interestWhere processing is necessary for legitimate interests pursued by RIFFSOURCE, provided your interests and fundamental rights do not override those interests.
Retention
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected.
Retention periods may vary depending on the type of data, the nature of the interaction and applicable legal requirements.
Where legal retention obligations apply, data may be stored for the required statutory period.
When data is no longer required, it is deleted or anonymised in accordance with applicable law and internal procedures.
Security
RIFFSOURCE implements appropriate technical and organisational measures, including:
- Encryption or comparable protection where appropriate for the context
- Access controls limiting data access to authorised persons
- Use of secure infrastructure for website hosting and related operations
- Technical safeguards designed to protect against unauthorised access, loss or alteration
Cookies
This website is not intended to use advertising cookies or unnecessary tracking technologies. RIFFSOURCE does not currently operate analytics or advertising platforms on riffsource.com. Only technically necessary mechanisms required to deliver or secure the website may apply, depending on the hosting environment.
Third-party services
The public website relies on a hosting provider to deliver and secure riffsource.com. That provider may process technical access data required for hosting operations. RIFFSOURCE does not currently integrate additional third-party analytics, advertising or social media services on this website. If this changes, this Privacy Policy will be updated.
International transfers
If personal data is transferred to countries outside the European Economic Area, such transfers occur only where permitted by applicable law and, where required, subject to appropriate safeguards such as standard contractual clauses or an adequacy decision.
Your rights
Depending on applicable law, you may have the following rights in relation to your personal data:
| Right | Description |
|---|---|
| Access | Obtain confirmation of whether personal data is processed and receive information about that processing. |
| Correction | Request correction of inaccurate personal data. |
| Deletion | Request deletion of personal data where no legal basis for continued processing applies. |
| Restriction | Request restriction of processing in certain circumstances. |
| Portability | Receive personal data you provided in a structured, commonly used and machine-readable format where applicable. |
| Objection | Object to processing based on legitimate interests where the legal requirements are met. |
| Complaint | Lodge a complaint with a competent data protection supervisory authority. |
Children's privacy
RIFFSOURCE services are not directed at children under the age of 16. RIFFSOURCE does not knowingly collect personal data from children. If you believe a child has provided personal data to RIFFSOURCE, please contact the address below.
Changes to this Privacy Policy
RIFFSOURCE may update this Privacy Policy when services, legal requirements or processing practices change. The current version will be published on this page with an updated date.
Privacy contact
For questions about this Privacy Policy or to exercise data protection rights, contact RIFFSOURCE using the details above or the button below.
Last updated: 3 August 2026