Privacy Policy

SONORATIVA (“we”, “us”, or “our”) is a professional audio engineering service. This Privacy Policy explains what personal data we collect when you use our website at sonorativa.com(“Site”), why we collect it, and how we protect it.

By using the Site you agree to the collection and use of information in accordance with this policy.

2.1 Information You Provide

• Contact / order form: name, e-mail address, selected service, genre, and any additional notes you submit when requesting a quote.

2.2 Automatically Collected Data

• Essential cookies: a single first-party cookie that stores your cookie-consent preference. No third-party tracking cookies are set.
• Server logs: standard web-server logs (IP address, browser user-agent, requested URL, timestamp) for security and operational monitoring. Logs are retained for 30 days.

2.3 Audio Samples

Demo audio files played through the on-site player are streamed from our storage provider (Cloudflare R2). No audio data is recorded from your microphone.

• To respond to your service enquiry and deliver the requested services.
• To communicate about your order status.
• To improve the Site's performance and security.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

If you are located in the European Economic Area (EEA), we process your data on the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR) — processing necessary to deliver the audio engineering service you requested.
• Legitimate interests (Art. 6(1)(f) GDPR) — server logs used for security and fraud prevention.
• Consent (Art. 6(1)(a) GDPR) — for consent-gated, cookieless analytics (Vercel Analytics / Speed Insights) and any non-essential cookies (currently no non-essential cookies are used).

Order and contact data is retained for the duration of the service relationship and for up to 6 years thereafter for accounting and legal compliance purposes. You may request deletion at any time (see Section 7).

We use the following sub-processors to operate the Site:

• Supabase — database and authentication (EU region).
• Cloudflare R2 — storage of images and audio files served on the Site.
• Vercel — website hosting and consent-gated, cookieless analytics (Vercel Analytics and Speed Insights).
• Resend — delivery of transactional emails (contact replies, review invites).
• Fonts — all typefaces (Inter, Space Grotesk, JetBrains Mono) are downloaded at build time and self-hosted on our own servers via next/font. No requests are made to Google Fonts or any external font CDN at runtime.

Under applicable data protection law (including GDPR) you have the right to:

• Access a copy of your personal data.
• Correct inaccurate or incomplete data.
• Request deletion of your data (“right to be forgotten”).
• Object to or restrict processing.
• Data portability (receive your data in a machine-readable format).
• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at privacy@sonorativa.com. We will respond within 30 days.

We use only essential, first-party cookies:

No analytics, advertising, or third-party tracking cookies are used.

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. All data in transit is encrypted using TLS 1.2 or higher.

The Site is not directed at children under 13 years of age. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. The “Last updated” date at the top will reflect any changes. Continued use of the Site after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your rights, please contact: