Last updated: July 24, 2026
This policy explains what information Finite Mastering may collect, why it is collected, how it is protected, and what privacy and UK GDPR rights visitors and clients may have in relation to that information.
Who we are (controller)
Finite Mastering is the data controller for the personal data collected through this website and our services. For any data protection questions, please contact us through the Contact page on this website.
What is collected
Finite Mastering collects only the information needed to run the service, process orders, handle payments, deliver files, provide support, improve the website, prevent fraud, and comply with legal duties.
This may include your name, email address, order details, payment confirmation, uploaded audio, project notes, technical logs, and support messages.
How information is used
Information may be used to respond to inquiries, manage bookings, process and deliver work, support your order, maintain website security, improve performance, and meet accounting or legal obligations.
Lawful basis for processing
- Contract performance — to process orders, deliver mastered audio, handle revisions, and manage your account.
- Legitimate interests — to maintain website security, prevent fraud and abuse, improve service quality, maintain the platform, and resolve disputes.
- Legal obligation — to comply with tax, accounting, and regulatory requirements.
- Consent — where you choose to accept optional analytics cookies or marketing communications.
Retention
Personal information is retained only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and maintain appropriate business records.
Accounting, tax, and related financial records may be retained for up to six years where required under applicable UK law. Uploaded and delivered project files may also be retained for a limited service window as described in the Upload & File Handling Policy, after which they may be securely deleted.
Security
We use industry-standard encryption, secure authentication, access controls, and reputable cloud providers to help protect client files and personal information.
Your UK GDPR rights
- Access your personal data.
- Request correction of inaccurate or incomplete information.
- Request deletion of your data where applicable.
- Request restriction of processing.
- Receive your data in a structured, machine-readable format.
- Object to processing carried out under legitimate interests.
To exercise any of these rights, contact us through the Contact page. We aim to respond within one calendar month.
These rights are provided in line with the UK General Data Protection Regulation (UK GDPR) and related UK data protection law.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your personal data has been handled unlawfully.
Processors and sub-processors
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Authentication, database, and profile storage | Various regions (including the United States where applicable) |
| Cloudflare | CDN, security, and DDoS protection | Global |
| Cloudflare R2 | Secure file storage | Regional (depends on configuration) |
| Dropbox | Secure file storage and backup | Various regions (including the United States where applicable) |
| Resend | Transactional email delivery | United States |
Where personal data is transferred outside the UK, appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent legal mechanisms are used.