Privacy Policy
Last updated: June 2026
Who we are
Sound Dept Dallas (trading as "The Sound Dept.") is the data controller for the personal information you provide when using our website and services. Our registered address is in Dallas, Texas, USA.
What personal data we collect
- Account data: name, email address, and password (hashed) when you register.
- Profile data: display name, avatar, and membership tier.
- Usage data: studio bookings, session logs, and feature usage.
- Device / log data: IP address, browser type, and approximate location for security and analytics.
- Support data: messages and correspondence with our support team.
How we use your data
- To create and manage your member account.
- To process payments and manage your subscription.
- To provide studio booking and access services.
- To communicate about your account, bookings, and service updates.
- To improve our service and fix issues.
- To detect and prevent fraud, abuse, and security incidents.
Legal basis for processing
We process your data on the basis of: contract performance (providing the service you signed up for), legitimate interests (security, fraud prevention, service improvement), and consent (where required for specific uses such as marketing emails).
Data sharing
We share data only with trusted recipients necessary to operate our service:
- Stripe.com — our Merchant of Record for payment processing, subscription management, tax compliance, and invoicing. Stripe handles all payment data directly; we do not store full card numbers.
- Service providers — hosting, analytics, email delivery, and customer-support tooling under strict confidentiality agreements.
- Professional advisers — legal and accounting advisers when necessary.
- Authorities — when required by law or to protect our rights.
International transfers
Some of our service providers operate outside the United States. Where data is transferred internationally, we rely on standard contractual clauses and adequacy decisions to ensure your data remains protected to a standard equivalent to US law.
Data retention
We keep your personal data for as long as your account is active, and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it.
Your rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data (subject to legal retention requirements).
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent where processing is based on consent.
To exercise these rights, contact us at Team@stillspace.xyz. We respond within one month.
Security
We use industry-standard measures to protect your data, including encryption in transit (TLS), hashed passwords, access controls, and regular security reviews. No system is completely secure, and we cannot guarantee absolute security.
Cookies
We use essential cookies to operate the service (authentication, security) and analytics cookies to understand usage. You can manage cookie preferences through your browser settings.
Changes to this policy
We may update this privacy notice from time to time. We will post the updated version on this page with a revised date. Continued use of the service after changes constitutes acceptance.
Contact us
If you have questions about this privacy policy or how we handle your data, email us at Team@stillspace.xyz.