Last updated: 11 November 2026
This policy explains what personal data I collect through markmatemusic.com, why I collect it, who I share it with, and what rights you have. I’ve tried to keep it in plain language.
Who I am
This website is run by Marks Matisons, a music producer based in Latvia working under the name MarkMate. I am the data controller for the personal data described here.
Contact for anything privacy-related: info@markmatemusic.com
What I collect and why
When you fill in the “Work with me” form
Your name, email, Instagram or other social handle, what you need help with, your budget range, a link to your demo, and anything else you choose to write. I use this to review your project, reply to you and, if it’s a fit, set up a discovery call.
Legal basis: taking steps at your request before entering into a contract (GDPR Art. 6(1)(b)).
When you book a discovery call
Your name, email and the time you choose. Calls take place over Google Meet.
Legal basis: steps before a contract (Art. 6(1)(b)).
If we work together
Contact details, contract details, the music files and information you send me, and payment and invoicing details. Payments are handled by the payment provider you choose (for example Stripe, PayPal or bank transfer); I never see or store your full card details.
Legal basis: performing our contract (Art. 6(1)(b)) and meeting accounting and tax obligations (Art. 6(1)(c)).
When you join my mailing list
Your email address. I use it to send you occasional production tips and updates about my music. Every email has an unsubscribe link.
Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.
When you browse the site
If you accept analytics and/or marketing cookies, I collect information about how you use the site: pages viewed, buttons clicked, audio played, form views and submissions, your approximate location, device and browser, and where you came from (such as an ad or a social media post). I use this to understand what works on the site and to measure and improve my ads.
Legal basis: your consent (Art. 6(1)(a)). Nothing in this category is collected unless you accept it.
Basic technical data
My hosting provider automatically processes your IP address and basic request data to deliver the site and protect it from abuse.
Legal basis: my legitimate interest in running a secure website (Art. 6(1)(f)).
I don’t sell your personal data, and I don’t use it for automated decision-making.
Cookies and similar technologies
When you first visit, a banner asks what you allow. You can change your choice any time with the Cookie settings link at the bottom of every page.
| Category | Tool | Purpose | Typical duration | Needs consent? |
|---|---|---|---|---|
| Necessary | Consent cookie | Remembers your cookie choice | 6 months | No |
| Necessary | Cloudflare | Security and site delivery | Session to 1 year | No |
| Analytics | Google Analytics 4 (_ga, _ga_*) | Measures site usage | Up to 2 years | Yes |
| Marketing | Meta Pixel (_fbp, _fbc) | Measures and improves Meta ads, builds ad audiences | Up to 90 days | Yes |
| Embedded content | Spotify player | Plays my playlist | Set by Spotify | Loads only when you click “Load the playlist” |
| Embedded content | Tally form | Displays the forms | Set by Tally | Part of using the form |
Google Analytics runs in Google Consent Mode: if you decline analytics, no analytics cookies are set.
Cloudflare Web Analytics counts visits without cookies or any identifier tied to you, so it runs for every visitor without asking.
Who I share data with
I use the following service providers to run the site and my business. They process data on my behalf or under their own terms where noted.
- Tally (Belgium, EU): forms, including the “Work with me” form and the email signup form
- Kit (ConvertKit) (USA): email list and newsletters
- Slack (USA): internal notifications when a form is submitted
- Google (USA/EU): Gmail and Google Docs for handling inquiries, Google Meet for calls, Google Analytics for site analytics
- Zcal (USA): call booking
- Meta Platforms (Ireland/USA): Meta Pixel for ad measurement. Meta acts as a joint controller for the data collected through the Pixel; see Meta’s own privacy policy for how it handles that data.
- Cloudflare (USA): website hosting, security and cookieless visit statistics
- Spotify (Sweden): embedded playlist, only if you choose to load it
- Payment providers (Stripe, PayPal or your bank): only if we work together and you pay that way
I may also disclose data if required by law.
International transfers
Some of these providers are based in, or store data in, the United States. Where that happens, the transfer is covered by the EU-US Data Privacy Framework (for certified companies) or by the European Commission’s Standard Contractual Clauses.
How long I keep it
- Inquiries that don’t turn into a project: up to 2 years after our last contact, then deleted
- Client and contract records, invoices: as long as Latvian accounting and tax law requires
- Email list: until you unsubscribe
- Analytics data: up to 14 months
- Cookies: as listed in the table above
Your rights
Under the GDPR you can ask me to:
- give you a copy of your personal data
- correct it if it’s wrong
- delete it
- restrict or object to how I use it
- send it to you or another provider in a portable format
- withdraw your consent at any time (this doesn’t affect anything done before you withdrew it)
Email info@markmatemusic.com and I’ll reply within one month. You can also complain to the Latvian data protection authority, the Data State Inspectorate (Datu valsts inspekcija), at dvi.gov.lv, or to the authority in your own country.
Children
This site isn’t aimed at children. If you’re under 16, please don’t submit forms or sign up without a parent’s or guardian’s permission.
Changes
If I change this policy, I’ll update the date at the top. Significant changes will be highlighted on the site.