Privacy Policy

Privacy Policy

This privacy policy informs you about how Shambalia uses and protects the personal data you provide when you use the shambalia.com website.
We are committed to protecting your privacy and processing your data in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and French Law No. 78-17 of 6 January 1978, as amended.

1. Data Controller
The data controller of your personal data is:
Shambalia
SASU with a capital of €200.00
Registered office: 25 rue de Ponthieu, 75008 Paris
SIRET: 981 664 071 00017
Represented by its President, Mr. Adam MUR
Email: contact@shambalia.com
2. Data Collected
We collect the following data:
Identity: surname, first name, stage name
Contact details: email address, telephone number
Data related to musical projects: musical style, technical requirements (when you fill out a form or book a session)
Billing data (when you purchase a service or a beat)
Browsing data: IP address, pages visited, cookies (see cookies section below)
3. Purposes of Processing
Your data is used solely to:
Respond to your requests (contact, quotes, studio bookings)
Perform contracts Services (recording, mixing, mastering, editing)
Managing invoicing and accounting
Sending you our newsletter or promotional offers (only if you have consented)
Improving the website's functionality and security
Compiling anonymous website traffic statistics
4. Legal basis
Performance of the contract or pre-contractual measures (quote, booking, service)
Your consent (newsletter, non-essential cookies)
Legitimate interest (website security, improving our services)
Legal obligation (invoicing, accounting)
5. Data recipients
Only the following have access to your data:
Authorized company personnel
Our technical subcontractors (hosting provider, booking tool, accountant, Stripe payment platform or other)
The competent authorities in the event of a legal request
6. Data retention period
Prospects: 3 years from the last contact
Clients: duration of the contractual relationship + 10 years (accounting and tax obligations)
Newsletter: Until you unsubscribe
Cookies: maximum 13 months

7. Your Rights
In accordance with regulations, you have the following rights:
Right to access, rectify, and delete your data
Right to restrict processing
Right to object
Right to data portability
Right to withdraw your consent at any time
Right to define instructions regarding the fate of your data after your death
To exercise these rights, contact us at [your email address] or by mail at our registered office address.
We will respond within one month.
You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

8. Security
We implement all appropriate technical and organizational measures (encryption, restricted access, backups) to protect your data against loss, misuse, or unauthorized access. 9. Transfers outside the European Union
Some data may be transferred to countries outside the EU (e.g., the United States) via our subcontractors (Google Analytics, Mailchimp, Stripe, etc.). These transfers are governed by standard contractual clauses or the Privacy Shield framework where applicable.

10. Cookies
For more details on the cookies we use, their purpose, and how to refuse them, please see our "Cookies" page.

Last updated: December 2, 2025