PRIVACY POLICY
Last updated: September 2026
This Privacy Policy explains how Cristóbal García Carrillo, trading as MBCSound, collects, uses, stores, and protects personal information when you visit or make a purchase through the MBCSound online store.
MBCSound is committed to protecting your privacy and processing your personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Spanish data protection legislation.
1. Data Controller
The data controller responsible for the processing of your personal data is:
Cristóbal García Carrillo
Trading name: MBCSound
NIF/DNI: 47604285N
Address: c/Major 6, 43763 La Nou de Gaià, Tarragona, Spain
Email: hello@mbcsound.com
2. Personal Data We Collect
Depending on how you interact with MBCSound, we may collect and process the following information:
- Name and surname
- Email address
- Billing and transaction information
- Country or other information required for tax and legal purposes
- Purchase history and details of products purchased
- Information you provide when contacting us
- Technical information necessary for the operation and security of the online store, such as IP address, browser and device information
MBCSound does not directly collect or store your complete payment card or PayPal account credentials. Payment transactions are processed through the payment services available through Payhip, including PayPal.
3. How We Collect Your Information
Your personal data may be collected when you:
- Visit or interact with the MBCSound store hosted on Payhip.
- Purchase a digital product.
- Contact MBCSound by email.
- Subscribe to the MBCSound newsletter.
- Otherwise voluntarily provide information to us.
Payhip may also collect technical and transactional information as part of providing its e-commerce and digital-delivery services. Payhip operates under its own privacy policy and may process certain information as an independent controller or service provider depending on the processing involved.
4. Purposes and Legal Bases for Processing
We process your personal data for the following purposes:
4.1 Processing and fulfilling purchases
We use your personal information to:
- Process and confirm your order.
- Provide access to purchased digital products.
- Deliver download links or other product access.
- Maintain records of transactions.
- Provide customer support.
- Handle refunds, complaints, or other matters relating to your purchase.
The legal basis for this processing is Article 6(1)(b) GDPR, as processing is necessary for the performance of the contract between you and MBCSound.
We may also process certain information where necessary to comply with legal obligations, including accounting, tax, and consumer-protection requirements, under Article 6(1)(c) GDPR.
4.2 Customer support
If you contact us by email, we may process the information you provide in order to respond to your enquiry, provide assistance, or resolve a problem.
The legal basis is Article 6(1)(b) GDPR where the enquiry relates to a purchase or contractual relationship, or Article 6(1)(f) GDPR where we have a legitimate interest in responding to general enquiries.
4.3 Newsletter and marketing communications
If you voluntarily subscribe to the MBCSound newsletter, we may use your email address to send you:
- News and updates from MBCSound.
- New sample pack announcements.
- Product releases and offers.
- Other marketing or promotional communications relating to MBCSound.
Newsletter subscriptions are managed through Kit, an email marketing platform.
We will only send marketing communications where we have an appropriate legal basis to do so, including your consent where required by applicable law.
The legal basis for processing your personal data for newsletter marketing is Article 6(1)(a) GDPR — your consent.
You may withdraw your consent at any time by using the unsubscribe link included in our marketing emails or by contacting us at hello@mbcsound.com.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Kit provides tools designed to support GDPR-compliant consent collection and provides an unsubscribe mechanism for subscribers.
5. Newsletter Provider — Kit
MBCSound uses Kit, Inc. ("Kit") to manage newsletter subscriptions and send email communications.
When you subscribe to our newsletter, your email address and relevant subscription information may be transferred to and stored by Kit on our behalf.
Kit processes subscriber personal data under its Data Processing Addendum and provides mechanisms for GDPR compliance, including contractual safeguards for international data transfers where applicable.
You can read Kit's privacy information here:
6. Online Store — Payhip
The MBCSound store is operated using Payhip.
Payhip provides the e-commerce infrastructure required to process orders, deliver digital products, and operate the online store.
When you use the store, Payhip may process information such as your name, email address, IP address, device and browser information, order information, and other information necessary to operate the service.
Payhip is responsible for certain processing activities carried out through its platform and maintains its own privacy and cookie policy.
You can read Payhip's privacy policy here:
Payhip Privacy & Cookies Policy
7. Payments — PayPal
Payments made through the MBCSound store may be processed using PayPal.
When you select PayPal as your payment method, PayPal may process personal and payment information necessary to authenticate and complete the transaction.
MBCSound does not receive or store your complete PayPal login credentials or payment card details.
PayPal processes personal data according to its own privacy documentation and applicable data protection obligations.
You can read PayPal's privacy information here:
8. Data Sharing and Third Parties
We do not sell or rent your personal data.
Your information may be shared with third-party service providers where this is necessary to operate the MBCSound business, including:
- Payhip — online store, order processing and digital product delivery.
- PayPal — payment processing.
- Kit — newsletter and email marketing.
- Other service providers where necessary to comply with legal obligations or provide essential business services.
These providers may process personal data according to their own privacy policies and contractual arrangements with MBCSound.
We may also disclose personal information where required by law, regulation, court order, tax authorities, or other competent public authorities.
9. International Data Transfers
Some of the service providers used by MBCSound may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, appropriate safeguards will be used where required by applicable data protection law, such as an adequacy decision, Standard Contractual Clauses, or another legally recognised transfer mechanism.
Kit states that it uses mechanisms including the EU-U.S. Data Privacy Framework and Standard Contractual Clauses for relevant international transfers.
10. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.
Purchase and transaction information may be retained for the periods required by applicable accounting, tax, consumer-protection, and other legal obligations.
Newsletter subscriber information will generally be retained until you unsubscribe or request its deletion, unless we have another lawful reason to retain it.
When personal data is no longer required, it will be deleted or anonymised where reasonably possible.
11. Your Data Protection Rights
Under applicable data protection law, you may have the right to:
- Access your personal data.
- Request correction of inaccurate or incomplete information.
- Request deletion of your personal data where legally applicable.
- Request restriction of processing.
- Object to certain processing activities.
- Request data portability where applicable.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact:
We may need to verify your identity before fulfilling certain requests.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) if you believe that your personal data has been processed unlawfully.
The AEPD provides information regarding data-subject rights and the information that organisations must provide when collecting personal data.
12. Cookies and Similar Technologies
The MBCSound store is operated through Payhip, which may use cookies and similar technologies necessary for the operation, security, functionality, and performance of its platform.
MBCSound does not currently use Google Analytics or Meta Pixel on the store.
If additional analytics, advertising, tracking, or similar technologies are introduced in the future, this Privacy Policy and the applicable Cookie Policy will be updated accordingly, and any consent required by applicable law will be obtained before such technologies are activated.
For more information, please see our Cookie Policy.
13. Data Security
MBCSound takes reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction.
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
14. Children's Privacy
The MBCSound store is not specifically directed at children.
We do not knowingly collect personal data from children in circumstances where such collection would be unlawful.
If you believe that a child has provided us with personal data unlawfully, please contact us at hello@mbcsound.com.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, the services we use, or applicable legal requirements.
The latest version will always be published on this page, together with the date of the latest update.
16. Contact
If you have any questions about this Privacy Policy or how your personal data is processed, please contact:
MBCSound
Cristóbal García Carrillo
c/Major 6
43763 La Nou de Gaià, Tarragona
Spain
Email: hello@mbcsound.com