Privacy Policy

1. Controller

The controller is Sonic Soul Studio, Wärtsilänkatu 61, Järvenpää, Finland. For privacy questions, contact info@sonicsoulstudio.fi.

2. Data We Process

We process data needed to operate the website, client portal, and services.

• Contact details, such as name, company, email address, phone number, and message content.
• Order and project data, such as selected services, project materials, feedback, payment status, and delivery details.
• Sign-in data, such as account identifiers, authentication method, and session security information.
• If you sign in with Google, we may receive your name, email address, profile image, and Google account ID for authentication.
• Technical data, such as IP address, browser, device, logs, and necessary cookies or local storage identifiers.

3. How We Use Data

• To provide services, quotes, orders, deliveries, and customer communication.
• To operate client portal sign-in, access control, and security.
• To handle payments, accounting, invoicing, and legal obligations.
• To maintain the website, investigate errors, and prevent misuse.
• To improve services in a reasonable way.

4. Google Sign-In and Google Data

Data received from a Google account is used only to identify the user, create an account, secure the session, and manage client portal access. We do not sell personal data received from Google, and we do not use it for advertising.

We do not request access to Gmail, Drive, Calendar, or other Google content unless a specific feature clearly explains this and asks for separate consent. You can revoke Google sign-in access in your Google account settings.

5. Sharing and Service Providers

We may use trusted service providers for hosting, authentication, databases, email, analytics, payments, and technical operations. These providers process data only to provide their services. We may disclose data to authorities if required by law. Sonic Soul Studio does not sell personal data.

6. Retention

We keep personal data for as long as needed for the service, customer relationship, accounting, legal claims, or statutory obligations. Technical logs are usually kept for a shorter period unless needed for security, debugging, or misuse investigation.

7. Your Rights

You may have the right to access, correct, delete, restrict, object to, or transfer your personal data, and to withdraw consent where processing is based on consent. You can exercise these rights by contacting us by email.

If you believe your personal data is processed unlawfully, you may contact the Finnish Data Protection Ombudsman.

8. Changes

We may update this Privacy Policy when services, technical systems, or legal requirements change. The latest version is published on this page.