Privacy Policy
Last Updated: April 3, 2025
At Alain Goldstein ("we," "our," or "us"), we are committed to safeguarding your personal data and respecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and protect information you provide when interacting with our website and services. It also explains your rights in relation to your personal data under various privacy laws (GDPR, CCPA, Canadian law, etc.).
1. Who This Policy Applies To
This Privacy Policy applies to all visitors of our website located at Alain-Goldstein.com and to individuals who communicate with us regarding our recording studio rentals and audio production services. By using our site or services, or by contacting us through our online form or other means, you agree to the terms of this Privacy Policy.
2. Data We Collect
We value your privacy and limit the personal information we collect to only what is necessary to serve you effectively. We do not collect personal information automatically (we do not require user accounts or login systems on our site). The only personal data we collect is what you choose to submit to us. This may include:
Contact Information: When you fill out our contact or inquiry form (or reach out via email/phone), we may ask for your full name, email address, and phone number so that we can respond to you.
Message Content: Any information you provide in the message or inquiry field of our contact form (such as details about the services you're interested in, your project requirements, or any questions you have). This may incidentally include other personal data if you choose to share it (for example, your company name or scheduling availability).
No Payment Details Online: We do not collect payment information through our website. There are no online bookings or purchases, so you will never be asked to enter credit card numbers, bank details, or other financial information on our site. Payment for services is handled offline or via direct arrangements once we have discussed and agreed on a service package (see Terms & Conditions for more on how we conduct transactions).
Automatic Data (Cookies): Aside from personal information, our site uses cookies and similar technologies to collect certain technical data automatically when you visit (such as IP address, browser type, and browsing behavior on our site). This is primarily through third-party tools like Microsoft Advertising UET for analytics/advertising purposes. However, this data is typically pseudonymous and is tied to cookie identifiers rather than your name or contact info. Please refer to our Cookie Policy for detailed information on what data is collected via cookies and how to control it.
We do not knowingly collect any sensitive personal information (such as racial or ethnic origin, political opinions, religious beliefs, health information, etc.) through our site. We ask that you not include such information in any messages you send us.
3. Purpose of Collection
We collect and use your information strictly for legitimate business purposes and only as necessary to provide our services to you. Specifically, we use the information you provide in order to:
Respond to Inquiries: Your name and contact details allow us to reply to your questions or requests submitted through our contact form or email. For example, if you ask about studio availability or service pricing, we will use your info to communicate with you and answer.
Provide and Discuss Services: We use the information about your needs (from the message content or subsequent communications) to discuss our audio production services or studio rental options with you. This may include preparing a proposal or a service agreement tailored to your requirements.
Service Agreements & Preparation: If you decide to engage our services, the information you've provided helps us prepare the necessary arrangements – for instance, scheduling studio time, planning the production work, or drafting any needed contractual agreement.
Internal Administration: We may use your information for our own records and administration, such as keeping track of client communications, scheduling, or accounting (e.g., noting that we spoke to you and what was discussed, for future reference when providing the service).
Legal Compliance: In certain cases, we may need to use or retain information to comply with legal obligations (for example, maintaining transaction records for tax purposes once a service is rendered, or using your email to send you any notices required by law).
We do not use the information you provide for any unsolicited marketing. You will not be subscribed to a newsletter or marketing email list by simply contacting us. We may, however, send service-related announcements or follow-ups (for example, if we update our policies or if we have information specifically relevant to a discussion we had with you). We will not send broad marketing communications unless you explicitly request or consent to receive them.
4. Legal Bases for Processing (Why Our Use is Lawful)
We process personal data under the following legal grounds, as applicable under data protection laws like the GDPR:
Consent: In situations where you have explicitly given us permission to use your data, consent is our legal basis. For example, when you fill out the contact form, you are consenting to our use of that data to respond. If we ever wanted to use your data for a new purpose (like sending optional marketing), we would ask for your consent.
Pre-Contractual Steps / Contractual Necessity: When you contact us to inquire about services, this can be seen as you asking us to take steps before entering into a contract. If we then agree on a service, using your data to provide that service (communicating, scheduling, etc.) is necessary for the performance of the contract with you.
Legitimate Interests: We may process your data as needed for our legitimate business interests, provided this isn't overridden by your rights. For instance, keeping records of communications is in our interest to efficiently manage our services and improve them, and this use is not intrusive to you. If we use Microsoft Advertising cookies to understand how users find our site, that's a legitimate interest in improving our outreach, done in a privacy-conscious way (and consented via cookie banner where required).
Legal Obligation: If we are required by law to retain or disclose certain information, we will do so. For example, Canadian law might require keeping records of business transactions for a period of time, or responding to lawful requests by authorities. In such cases, the legal obligation is our basis for processing.
5. Your Rights Under Privacy Laws
We respect your rights to control your personal information. Depending on your location and the laws that apply (including the EU's GDPR, California's CCPA/CPRA, and Canada's privacy laws), you may have some or all of the following rights regarding your personal data:
Right to Access: You can request a copy of the personal information we hold about you, and information about how we use it. This is sometimes called a Subject Access Request. We will provide you with the data in a transparent manner, usually within a reasonable timeframe.
Right to Rectification: If you believe any personal information we have about you is incorrect or incomplete (for example, a typo in your name or an outdated email), you have the right to ask us to correct it. We will promptly update our records upon verification.
Right to Erasure: You can request that we delete your personal data. For instance, if you no longer want us to have your contact details on file, you can ask us to remove them. We will honor this request provided we do not have a compelling legal reason to retain the data (note: if you have engaged our services, certain transaction information might need to be kept for legal/accounting reasons for a period, but we will explain this if relevant). This is often called the "Right to be Forgotten."
Right to Withdraw Consent: If our processing is based on your consent, you have the right to withdraw that consent at any time. For example, if you consented to cookies or to receive a certain type of communication, you can change your mind later. Withdrawing consent will not affect the lawfulness of any processing we did before your withdrawal.
Right to Object to Processing: If we are processing your data based on legitimate interests, you have the right to object to that processing if you feel it impacts your rights. For example, you can object to any use of your data for direct marketing (though we currently do not do this). If you object, we will consider whether our interests in using the data are overridden by your privacy rights, and if so, we will cease the processing in question.
Right to Restrict Processing: You can ask us to limit how we use your data in certain circumstances. For instance, if you contest the accuracy of your data, you can request we restrict processing it (other than storing it) until we verify and update it.
Data Portability: For data you provided to us and that we process by automated means based on consent or contract, you have the right to request that we provide it to you (or to another service provider) in a commonly used, machine-readable format. This is more applicable if we had user accounts or a lot of data; in our case, it would most likely apply to any contact info you gave us if you needed it.
Right to Non-Discrimination (CCPA): If you are a California resident exercising your privacy rights, the CCPA gives you the right not to receive discriminatory treatment from us for exercising those rights. We honor this – we treat all users equally, whether or not they exercise their data rights.
Right to Opt Out of Sale/Sharing (CCPA/CPRA): As a California resident, you have the right to direct us not to sell your personal information or share it for targeted advertising purposes. Note: We do not sell personal information for monetary consideration. The only "sharing" that might occur is through advertising cookies as discussed, which you can opt out of by rejecting marketing cookies (see our Cookie Policy). We also display a "Do Not Sell or Share My Personal Information" link if required, to facilitate CCPA opt-out requests for advertising-related sharing.
To exercise any of your rights, please contact us at admin@alain-goldstein.com. We may need to verify your identity before fulfilling certain requests (to ensure we don't release or delete the wrong person's data). If you are an authorized agent making a request on behalf of someone (under CCPA, for instance), please provide proof of authorization. We will respond to your request as soon as possible, and no later than any timeframe required by law. There is no charge for making a privacy rights request, though if a request is excessive or repetitive, the law may allow us to charge a reasonable fee or refuse, but we will explain if that situation ever arises.
6. Cookies and Tracking Technologies
As mentioned, we use cookies and similar tracking technologies on our site for functionality, analytics, and advertising. Some of these cookies are placed by third parties. In particular, we use Microsoft Advertising's Universal Event Tracking (UET) tag, which sets a cookie to help us track conversions (like if you contact us after clicking one of our ads) and to assist with our marketing efforts. Here's what you should know:
Consent: Non-essential cookies (like the UET advertising cookie) are only activated if you give consent via our cookie banner. You have full control to opt in or out. If you opt out, Microsoft's tag will not collect analytics or advertising data from your visit.
Data Collected via Cookies: The data collected through cookies can include your IP address, browser type, operating system, the pages on our site that you viewed, the time spent on those pages, and the page you came from before visiting our site (referrer). However, these cookies do not capture personal details like your name or email. The information is typically tied to a unique identifier (a random string of numbers or letters) assigned to your browser.
Uses of Cookie Data: We use analytics information from cookies to understand how effective our advertising is (for example, to see if people who click an ad end up contacting us). This helps us improve our ad targeting and budget. If you allow marketing cookies, the data may also be used by Microsoft to show you more tailored ads for our services when you use their search or partner sites (this is known as remarketing).
Your Choices: You can manage your preferences at any time via our Cookie Policy page. Additionally, if you want to opt out of Microsoft Advertising tracking across all websites, Microsoft offers an opt-out choice via their web settings or you can use industry opt-out tools like the Digital Advertising Alliance's WebChoices tool to opt out of interest-based advertising from participating companies (including Microsoft). We honor "Do Not Track" signals or equivalent consent preferences where applicable, meaning if your browser is set to Do Not Track and it's recognized, we will treat it as an opt-out of marketing cookies.
For a full breakdown of the cookies we use and how long they last, please review our Cookie Policy. That policy also provides instructions for controlling cookies through your browser settings.
7. Data Sharing and Disclosure
Your privacy is important to us, and we do not sell or rent your personal information to third parties. We also do not disclose or share the personal data you provide us with others, except in the limited circumstances described below:
Service Provision and Partners: We generally handle your inquiries and projects in-house. In some cases, we might work with trusted partners or subcontractors for certain projects (for example, if a specific audio engineer or producer is brought on to assist with your project). If so, and if they need any of your information to fulfill the service (e.g., to schedule a session with you), we will obtain your consent and ensure that they are bound by confidentiality and privacy obligations.
Third-Party Tracking (Microsoft Advertising): As described, when you browse our site, third-party tracking technology from Microsoft may collect data about your visit through cookies. This means Microsoft might process information such as that a user (identified by a cookie ID) visited our site. Microsoft acts as an independent data controller for that data, using it to provide us analytics and to improve their advertising services. We do not directly hand over your personal contact information to Microsoft; the only data exchange happens automatically via the cookie. Microsoft's use of the data is governed by their own privacy policy. We include this here as a form of data "sharing," although it's limited to online identifiers and usage data, not the personal details you send us via forms.
Legal Requirements: We may disclose personal information if required to do so by law or in response to valid requests by public authorities (e.g., a court order, subpoena, or government demand under lawful process). We will only share what is necessary and will, if lawful to do so, inform you of such disclosure.
Business Transfers: In the unlikely event that our business is involved in a merger, acquisition, or sale of assets, user information (which in our case would be mostly client contact info and project records) might be transferred to the new owner/partner as part of that transaction. If this happens, we will ensure that the new owner is held to the same standards of privacy or will notify you and obtain any necessary consents.
With Your Consent: In any situation not covered above where a third party request comes in for your information, we would only share it if you explicitly tell us we can. For example, if you ask us to coordinate with a third-party service (maybe you want us to work with another studio or vendor and share details), we would do so only with your approval.
Importantly, we do not use any third-party plugins or social media widgets on our site that would send your data to outside parties without your involvement. Our site is relatively simple (informational pages and a contact form). If in the future we add features that involve data sharing with others (like an embedded map from Google or a Facebook "Like" button), we will update this policy and clearly inform you.
8. Data Retention and Security
We take appropriate measures to secure your personal data and to retain it only for as long as necessary:
Data Security: We have implemented reasonable technical and organizational measures to protect the information we collect from loss, misuse, unauthorized access, alteration, or destruction. This includes using secure technologies for our website (our site is served over HTTPS, which encrypts data in transit), keeping our systems updated with security patches, and restricting access to personal data internally on a need-to-know basis. Our contact form submissions are delivered to us securely, and any digital records are stored in protected environments. We also ensure that any devices or physical files that hold personal data are secured (e.g., using password protection, encryption, and secure backups).
Retention Period: We retain personal information only as long as needed for the purposes outlined in this policy. If you contact us but do not end up becoming a client, we may keep your inquiry information for a certain period in case you reach out again or to follow up, but we will not keep it indefinitely. If you become a client, we will retain your information for the duration of our professional relationship and thereafter for as long as necessary to fulfill legal or administrative requirements. For example, we might keep basic contact details and invoices for our financial records as required by Canadian law (which could be several years). When personal data is no longer necessary, we will securely erase or anonymize it.
Third-Party Security: Any third parties that process data (like Microsoft in relation to cookies) are also expected to maintain robust security. We choose reputable providers and tools. However, do note that no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the unlikely event of a data breach that affects your personal data, we will notify you and the appropriate authorities as required by law.
9. Children's Privacy
Our services and website are intended for adults. We do not offer services to anyone under the age of 18, and we do not knowingly collect personal information from individuals under 18 years old. If you are under 18, please do not use our website or send us any personal information. If we become aware that we have received information from a child under 18, we will take steps to delete that information. Parents or guardians who believe their child may have provided us with personal data can contact us, and we will promptly remove the data.
10. International Users and Data Transfers
We operate from Quebec, Canada. If you are accessing our site or contacting us from outside of Canada, please be aware that any information you provide will be transferred to and processed in Canada (or in some cases, in the United States, if our email or service providers store data on US servers).
Adequacy and Safeguards: Canada is considered to have strong privacy protections. In fact, Canada's private-sector privacy law (PIPEDA) has been deemed "adequate" by the European Commission, which means it provides a level of data protection comparable to EU standards. This adequacy decision generally allows personal data from the EU to be transferred to us in Canada without additional safeguards.
EEA/UK Users: If you are in the European Economic Area or the UK, know that we will treat your data with the same care as described in this policy and in line with GDPR principles. If for any reason personal data is transferred out of Canada to another country that does not have an adequacy finding (for example, if we use an email service or cloud provider in the US), we will ensure appropriate safeguards such as standard contractual clauses or similar measures are in place to protect your information.
Other Regions: Regardless of where you are located, we will handle your personal information in accordance with this policy. By using our site or engaging our services, you consent to the transfer of your information to Canada and potentially to other jurisdictions as explained (such as where our third-party service providers operate). We will take all necessary measures to ensure your data is protected in line with the standards of your home jurisdiction and ours.
If you have questions about international data transfers or require more specific information on how we handle cross-border data, please contact us.
11. Updates to This Privacy Policy
We may update or modify this Privacy Policy from time to time. Reasons for updates might include changes in our services, changes in law, or improvements in our privacy practices. When we update the policy, we will change the "Last Updated" date at the top. For substantial changes, we may provide additional notice (such as a statement on our website homepage or sending an email notification if we have your email on file for this purpose). We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting the personal information we collect. Your continued use of our website or services after any modifications to the Privacy Policy will signify your acceptance of the changes, to the extent permitted by law.
12. Contact Information
Your privacy matters to us. If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us:
Company: Alain Goldstein
Address: 3300 Boulevard Côte-Vertu Ouest, Saint-Laurent, QC H4R 2B7, Canada
Email: admin@alain-goldstein.com
Phone: +1 (514) 548-8123
You also have the right to lodge a complaint with a supervisory authority if you believe we have infringed your privacy rights. For example, in Canada you can contact the Office of the Privacy Commissioner of Canada; in the EU, you can reach out to your local Data Protection Authority; in the UK, the Information Commissioner's Office (ICO); and in California, the Attorney General's office. However, we kindly ask that you please contact us first so we can address your concerns directly and promptly. We are committed to resolving any issues and ensuring that your privacy is protected.