Version 1.1 · Revised 13 October 2026

1. Who is responsible?

Pieter Klokkenburg, a sole trader in the Netherlands, operates AbleTouch and is the controller for his own customer administration, licence administration and correspondence.

• Address: Wipmolen 29, 3352 XL Papendrecht, Netherlands.
• Email: abletouch.support@gmail.com.
• Netherlands Chamber of Commerce (KvK): 87901757.

This notice covers our use of information about AbleTouch buyers, enquirers, organisational contact persons and designated licensed users, including customers from churches. It also applies when we consult records in a provider's dashboard without downloading them.

It also covers people who voluntarily join the AbleTouch launch list. Joining is separate from purchasing or accepting purchase terms.

Payhip's purchase contract identifies Payhip as the supplier of digital content. Payhip and Stripe have separate responsibilities and privacy notices for their own services. Those notices complement, rather than replace, this explanation of Pieter's processing.

2. What information do we use?

We use information relevant to the following activities:

• Orders and licence administration: purchase email, order/payment references, product, date, amount, currency, status and relevant tax/country information available through Payhip or Stripe. This may include the checkout answers recording acceptance of terms and consent to immediate digital delivery. Names are used where supplied, not collected as a mandatory additional AbleTouch checkout field.
• Correspondence: your email address, message, order details and attachments you choose to send, such as screenshots or logs. Please do not send passwords, full card details or unnecessary sensitive information.
• Organisational contacts and users: name, email, role, order reference and designation details where needed to communicate with a purchaser or administer the permitted single-user licence. We may receive these from the purchaser or directly from the person concerned. Collecting these details does not itself grant additional-user or user-transfer rights.
• Payments and disputes: relevant payment status, transaction references and evidence needed to address payment, refund or dispute issues. Payment services handle full payment credentials.
• Launch-list subscriptions: email address, optional name where supplied, subscription source and time, confirmation and consent records where available, group membership and unsubscribe status. We receive these directly through the MailerLite signup form or from the Payhip launch-list signup. Only people who requested the launch announcement are added to the launch group; an order email alone is not an invitation to marketing.
• Email delivery and engagement: delivery, bounce, unsubscribe and spam-report information. MailerLite records clicks through tracked links. Email-open tracking through an invisible image is disabled for our launch-list emails. We do not use these records for unrelated advertising profiles or share them for other providers' marketing.

Payhip and Stripe also process technical information, such as IP addresses, device/browser details, download activity and security signals, for their services. Their collection does not mean that every field is available to or used by Pieter. Their notices explain that processing.

The supplied AbleTouch Remote Script and TouchOSC layouts do not send usage data, your Ableton set or samples to us and do not perform an online licence check. We receive logs or screenshots only if you send them to us. This statement concerns AbleTouch's supplied files, not the separate practices of Ableton Live, TouchOSC or TouchOSC Bridge.

3. Purposes and legal bases

Purpose: Administer creator-granted licence rights and fulfil an undertaking directly agreed with you

GDPR basis: Performance of that agreement where you are a party and the information is necessary

Purpose: Assist with Payhip orders, delivery enquiries and necessary product communication

GDPR basis: Legitimate interests in administering product entitlements and helping purchasers obtain the purchased content; limited to relevant information and balanced against your rights

Purpose: Communicate with an organisation's representative or designated user about an order or permitted licence use

GDPR basis: Legitimate interests of Pieter and the purchaser in delivery, communication and licence administration, balanced against the individual's rights

Purpose: Send the requested launch-list welcome message and AbleTouch V1 launch announcement

GDPR basis: Consent through the voluntary launch-list signup; separate from purchase and immediate-delivery consent

Purpose: Record a voluntarily supplied preference for possible future AbleTouch newsletters and product news

GDPR basis: Consent for the stated preference; a general checkout preference does not authorise unrelated campaigns

Purpose: Maintain subscription and withdrawal evidence, delivery records and minimal suppression information

GDPR basis: Legitimate interests in demonstrating consent, keeping the requested mailing list accurate and respecting withdrawals; limited to relevant records and balanced against your rights

Purpose: Assess link use and delivery of the requested launch messages

GDPR basis: Legitimate interests in checking whether the requested messages and links are useful and functioning, limited to relevant launch-message records and balanced against your rights; you may object. Email-open tracking is disabled

Purpose: Answer enquiries and other correspondence

GDPR basis: Legitimate interest in responding to the request, limited to what is necessary; contractual basis where a specific necessary pre-contractual step is requested by the person concerned

Purpose: Maintain records required by tax/accounting law and fulfil applicable consumer or privacy obligations

GDPR basis: Legal obligation

Purpose: Verify entitlements and consent evidence, or establish, exercise or defend legal claims

GDPR basis: Legitimate interests in protecting lawful rights, limited to necessary evidence and balanced against your rights

Payhip's own basis for its purchase-contract processing is explained in its notice; we do not treat every buyer as automatically party to a purchase contract with Pieter. A designated user of an organisational buyer is also not automatically a contracting party.

Information required by checkout is needed to process the purchase and provide access. Messages and attachments are optional, but we may need an order reference or other proportionate information to identify your request.

The AbleTouch launch list uses MailerLite to send a welcome message and the requested AbleTouch V1 launch announcement. The signup explains this purpose before you submit your email. Where the form requests email confirmation, the launch welcome is sent after confirmation. You can withdraw through the unsubscribe link in each mailing or by emailing abletouch.support@gmail.com. Joining the launch list is not required to purchase AbleTouch.

Launch-list consent is not treated as permission for an ongoing newsletter, unrelated offers or another provider's marketing. If an ongoing newsletter is introduced later, we first explain its scope and obtain any necessary separate consent. Payhip may also display an optional marketing-preference checkbox at checkout; declining it does not prevent a purchase. That preference is kept separately from the launch list and is not used as a substitute for the specific launch signup. Necessary order, delivery or legally required product messages are not advertising.

Where an organisation supplies your details, it is the source. We provide this notice within a reasonable period, no later than one month after receipt, or earlier at our first communication with you or first disclosure, as applicable, unless a lawful exception applies.

4. Recipients and services

The present store/payment/contact route uses:

• Payhip: store, checkout, order records, receipts and download delivery. Payhip Privacy \& Cookies Policy.
• Stripe: payments and associated security, fraud prevention and financial obligations. Stripe Privacy Policy.
• Google/Gmail: correspondence through abletouch.support@gmail.com. Google Privacy Policy.
• MailerLite: launch-list signup, subscription confirmation, the welcome and launch emails, subscriber preferences and delivery records. MailerLite acts as a processor for the subscriber data we provide under its Data Processing Addendum, and has its own responsibilities for account and service administration. MailerLite Privacy Policy and Data Processing Addendum.

Their roles depend on the activity; they are not all treated as processors acting exclusively on Pieter's instructions. They may process information as independent controllers for their own purposes.

These linked notices explain the providers' own processing, retention and privacy-contact routes. They complement this notice; Pieter remains responsible for his own use of customer information described here.

Relevant information may also be provided to tax authorities or professional accounting/legal advisers when required or necessary for a legal or administrative matter. Such disclosure is limited to the information needed for that purpose. This notice does not authorise sale of customer information or disclosure for someone else's marketing.

Launch-list details are kept in Payhip and MailerLite. If a Payhip follower export is needed to transfer the requested launch subscriptions to MailerLite, it is used only for that transfer and verification, and the temporary export is deleted within seven days after a successful import. We do not keep a separate long-term local mailing-list copy. Order and correspondence records remain in the services described above; provider-managed copies and retention are distinct from our records. We update this notice if an additional service is introduced for a new purpose.

5. International processing

Payhip, Stripe and Google operate internationally and may process information outside the European Economic Area, including in the United States. Their own processing is explained in the notices linked above. Additional transfer information is available in Stripe's Data Transfers Addendum and Google's transfer frameworks, which describe Data Privacy Framework and standard-contractual-clause arrangements for covered transfers.

The safeguard relevant to a transfer depends on its recipient, destination and applicable service arrangement; these references are not a claim that every transfer uses the same protection. For information about safeguards relevant to Pieter's processing and how to obtain a copy where available, contact abletouch.support@gmail.com. Requests about a provider's independent processing may also be addressed to that provider through its linked notice.

For customers in the European Economic Area, MailerLite identifies MailerLite Limited in Ireland as the service provider. Its Data Processing Addendum governs subscriber processing and describes its subprocessors and the standard contractual clauses applicable to covered international transfers. Its privacy and legal information also describes Data Privacy Framework arrangements for its US entity. The applicable protection depends on the recipient and transfer; copies and current details can be obtained through the linked MailerLite documents or requested from abletouch.support@gmail.com.

6. Retention

We keep information only for as long as necessary for its purpose or a legal obligation:

• Tax/accounting records: normally seven years under Dutch administrative requirements, or another period where a specific rule applies. This period is for relevant required records, not every message or attachment.
• Entitlement records: a minimal record from purchase while download-access or licence verification remains necessary. Continuing need is reviewed at least annually. When that purpose ends, the record is deleted unless a specific legal obligation or unresolved claim requires retention. Superseded organisational contact details are removed from active use following a change of contact person or a lawfully permitted licence transfer, retaining only evidence still needed for an entitlement or legal matter. This retention rule does not itself authorise replacement of the licensed user.
• Correspondence: ordinary enquiries and their attachments are deleted within twelve months after the enquiry is closed. Closure is when the request has been answered or otherwise resolved and no follow-up remains outstanding. If part of a message is required as tax, entitlement or dispute evidence, only the relevant information is retained under that separate purpose; unrelated content is removed.
• Future newsletter preferences: an optional preference is removed from our active prospective newsletter records if you withdraw it or, if no newsletter has begun, no later than twelve months after it was recorded. This does not delete order/contact information needed for a separate lawful purpose. If a newsletter is introduced within that period, we first provide its specific retention and withdrawal information and obtain any necessary valid consent; no indefinite subscriber retention is promised. Payhip may independently retain an order record under its own arrangements.
• Launch list: active launch-only records are removed within three months after the AbleTouch V1 launch announcement, or within twelve months of signup if no launch announcement has been sent. If you unsubscribe earlier, marketing stops and you are removed from the active launch audience. Minimal email/withdrawal and consent evidence may be kept for up to three years after withdrawal or the last launch mailing to respect your choice and address consent-related questions; it is not used to send further marketing. An unresolved claim may justify retaining only relevant evidence for longer. A later, separately agreed newsletter has its own stated scope and retention.
• Disputes: relevant evidence while the dispute remains unresolved or a specific claim, applicable limitation period or preservation duty justifies retention. Need is reviewed at least annually and on resolution; the evidence is removed when no such purpose remains, unless another legal obligation applies.

These criteria apply to records under our control. The correspondence deletion policy includes removing messages and attachments from the Gmail mailbox and clearing relevant deleted items, subject to necessary evidence retention. Launch-list review includes Payhip follower records, MailerLite active groups and any temporary import export. Subscriber deletion and suppression are distinct: suppression information is used only to avoid sending to people who withdrew. Any additional local copies must follow the applicable retention criteria.

Retention is assessed for each purpose; it is not automatically indefinite because a licence can be used indefinitely. Deleting a mailbox item does not promise immediate erasure from provider-managed backups or legal records outside Pieter's control. Providers may retain records independently under their own arrangements. Payhip states that it retains certain digital-product transaction data for ten years for EU VAT purposes; that does not require us to retain all correspondence for ten years.

7. Cookies and analytics

The store and checkout providers use cookies or similar technical information for functions such as checkout, security and remembering choices. These are distinct from optional traffic analytics and marketing technologies.

The AbleTouch store is configured to disable Payhip's optional analytics tracking. This does not mean that the checkout is cookie-free or that every provider's security processing is disabled. For provider cookie information, consult Payhip's privacy/cookie notice and Stripe's privacy notice.

If additional optional tracking or embedded technologies requiring consent are introduced, appropriate choices and updated information must be provided before they are activated. Acceptance of purchase terms is not cookie consent.

8. Security

Multi-factor authentication is enabled on the Payhip, Stripe and Google accounts used for this customer-information route. Customer records are kept within those services rather than in separate exports or additional customer-data backups. Requests and attachments should contain only what is necessary. These measures do not guarantee absolute security. Please report suspected disclosure of order or correspondence information to abletouch.support@gmail.com; do not include passwords or complete payment credentials in the report.

MailerLite access is restricted to authorised account access, and temporary mailing-list exports are handled under the deletion policy above. We do not disclose passwords or publish subscriber lists.

9. Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction or portability of your information. You may object to processing based on legitimate interests and withdraw consent without affecting earlier lawful processing. Required tax records cannot simply be deleted on request.

Send requests to abletouch.support@gmail.com. We may ask for proportionate information to verify identity; please do not send an identity-document copy unless a justified request explains what is necessary. We respond without undue delay, normally within one month. Where a lawful extension is necessary, we explain it within the first month; the extension can be up to two further months.

10. Payment decisions and changes

Payment providers may use automated security or fraud checks under their own arrangements. Their notices explain those activities and relevant rights; this notice does not promise that no service uses automated processing. Contact us about an AbleTouch order that appears incorrectly blocked or recorded so that it can be investigated through the relevant service.

If our practices change, we update this notice and provide any additional information or consent required by law. An update is not blanket consent to new uses of information.