Privacy Policy

Last updated: 12 October 2026

Aesthetic Music Collective (“AMC”, “we”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what data may be processed when you visit our website and when you choose to contact us.

1. Who we are (Data Controller)

Data Controller: Aesthetic Music Collective (AMC) — independent professional (Portugal)
Business address: Villa Sousa, 1100-266 Lisboa
Email: privacy@aestheticmusic.co

2. What data we collect

A) Data you provide voluntarily

We do not provide a contact form and we do not create user accounts.

If you contact us directly (e.g., by email or via WhatsApp), we may process:

• your name (if provided)

• your email address or phone number

• the content of your message

• any information you choose to share

B) Technical data (server logs)

When you visit our website, our hosting provider (OVH) may automatically process limited technical data necessary to deliver and secure the site, such as:

• IP address

• browser/device type

• pages requested and timestamps

• error logs and security events

This information is used for security, performance, and troubleshooting.

3. Cookies and analytics

We use a limited number of cookies:

• Functional cookies (names starting with cmplz_): they only remember your cookie choices. They are necessary for the site and are kept for up to 365 days.
• Statistics cookies – Google Analytics 4, loaded through Google Tag Manager (_ga, _ga_*): they are set only if you accept statistics cookies in our cookie banner. They help us understand how the site is used (pages viewed, device type, approximate location). These cookies last up to 2 years; the analytics data is kept for the retention period set in our Google Analytics account (2 or 14 months).
• Marketing cookies – Spotify: set by Spotify only if you accept marketing cookies, when an embedded playlist player is loaded.

We do not use advertising or profiling cookies. Refusing statistics or marketing cookies has no effect on your use of the site. You can change or withdraw your consent at any time with the “Manage consent” button at the bottom of every page.

Embedded content – Spotify (marketing cookies): some pages include Spotify playlist players. They are only loaded if you accept marketing cookies (in the cookie banner or with the “Load Spotify” button shown in place of the player). Once loaded, Spotify may set its own cookies and process data under its own privacy policy.

Note: third-party services you may access from our site (e.g., WhatsApp, Google Calendar booking) apply their own technologies under their own policies.

4. WhatsApp

Our website may provide a WhatsApp contact link.

If you choose to contact us via WhatsApp, your message content and related metadata are processed by WhatsApp under its own privacy policy. This may involve processing outside the European Economic Area, depending on WhatsApp’s infrastructure and terms.

We only receive the information you send us in WhatsApp and use it solely to respond to your request.

5. Why we process data

We process personal data only when necessary, based on:

• Legitimate interests (GDPR Art. 6(1)(f)) to operate, secure, and maintain our website (server logs), and manage inbound communications.

• Steps prior to entering a contract (GDPR Art. 6(1)(b)) when you contact us about services.

• Consent (GDPR Art. 6(1)(a)) for statistics cookies (Google Analytics) and for embedded Spotify players (marketing cookies). You can withdraw it at any time.

6. How long we keep data

• Messages (email/WhatsApp): kept as long as needed to handle your request and for reasonable business follow-up, then deleted or archived securely.

• Server logs: kept for a limited time by OVH for security and technical purposes (retention depends on OVH configuration and legal/security needs).

• Analytics (only with your consent): cookies up to 2 years; data kept for the retention period set in Google Analytics (2 or 14 months).

7. Who we share data with

We do not sell your data.

We may share limited data only with:

• OVH (hosting/infrastructure)

• Service providers necessary to operate communications (e.g., email provider)

• WhatsApp (only if you choose to use it)

• Google (Google Analytics, Google Tag Manager), only if you accept statistics cookies

• Spotify (embedded playlist players), only if you accept marketing cookies

8. International transfers

Where third-party providers process data outside the EEA, appropriate safeguards may be used where required. Google may process analytics data in the United States; these transfers rely on the EU–U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. For details, refer to the relevant provider’s privacy policy.

9. Security

We apply reasonable technical and organizational measures to protect data (access controls, secure hosting, standard security practices). No system is perfectly secure, but we take protection seriously.

10. Your rights (GDPR)

If you are in the EU/EEA (including Portugal), you may have the right to:

• access your data

• rectify inaccurate data

• request deletion

• restrict processing

• object to processing

• data portability (where applicable)

• withdraw consent (where processing relies on consent)

To exercise your rights, contact: privacy@aestheticmusic.co

You also have the right to lodge a complaint with your local data protection authority (Portugal: CNPD).

11. External links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies before providing personal data.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date will reflect the latest version.