Privacy policy.

Last updated: 5 December 2025

This website is operated by Chiaran Verheyden, a freelance producer, mixer and mastering engineer based in Belgium. I respect your privacy and only collect the personal data I need to respond to enquiries and run my business.

If you have any questions about this policy, you can contact me at:
Email: chiaran.verheyden@gmail.com
Website: https://chiaranverheyden.com

For the purposes of the EU General Data Protection Regulation (GDPR), the data controller is:

Name: Chiaran Verheyden
Location: Belgium
Email: chiaran.verheyden@gmail.com

I only collect personal data that you provide directly, or that is collected automatically when you use this site. When you contact me via the form or by email, I may collect:

  • Name

  • Email address

  • Project details, links to your music, and any other information you choose to share

This data is used so I can reply to your message and discuss your project.

The contact form is provided by Squarespace, which processes form submissions and may store data on its own servers as part of providing its service. When you visit this website, Squarespace and my hosting provider may automatically collect some technical information, such as: IP address, browser type and version, device type, pages visited and time spent on the site. This information is used in an aggregated way to keep the website secure and to understand basic traffic (for example, how many people visit which pages).

I do not use this data to personally identify you.

I process your personal data for the following purposes:

  1. To respond to your enquiries and discuss projects

    • Legal basis: performance of a contract / pre-contractual steps (Art. 6(1)(b) GDPR) – you contact me because you want information or a quote, and I need your details to reply.

  2. To manage my business administration and accounting
    (e.g. quotes, agreements, invoices, project records)

    • Legal basis: legal obligation (Art. 6(1)(c) GDPR) and/or legitimate interest (Art. 6(1)(f) GDPR).

  3. To maintain and protect the website
    (e.g. security logs, preventing abuse, basic analytics)

    • Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

I do not use data from the contact form to automatically sign you up for newsletters or unrelated marketing.

I keep your personal data only as long as necessary for the purposes above:

  • General enquiries / quotes: usually up to 12–24 months after our last contact, unless a longer retention period is needed (for example if the project is still active).

  • Client projects and invoices: kept for the period required by Belgian accounting and tax law (typically up to 7–10 years).

After this period, data is deleted or anonymised where reasonably possible.

I do not sell or trade your personal data. Your data may be processed by trusted third parties who help me run this website and my business, for example: Squarespace (website and form hosting), Email provider (for emails and form notifications), Cloud storage / backup services (for project files and email, where applicable). These providers act as data processors and only process your data on my instructions, under appropriate data protection terms.

Your data may be stored or processed within the EU/EEA, or in other countries that provide an adequate level of protection, or under appropriate safeguards such as Standard Contractual Clauses.

This website is built on Squarespace, which may use cookies and similar technologies that are necessary for the site to function (for example, to provide security and basic performance).

If I add additional tools that use non-essential cookies (for example, extra analytics or embedded services), I will update this policy and, where required, ask for your consent. You can usually manage cookies through your browser settings.

Under GDPR, you have the following rights in relation to your personal data:

  • Right of access – to know what data I hold about you.

  • Right to rectification – to correct inaccurate or incomplete data.

  • Right to erasure – to request deletion of your data, where legally possible.

  • Right to restriction of processing – to limit how your data is used in certain cases.

  • Right to object – to object to processing based on legitimate interests.

  • Right to data portability – to receive your data in a structured, commonly used format, where applicable.

To exercise any of these rights, please contact me at chiaran.verheyden@gmail.com.

You also have the right to lodge a complaint with your local data protection authority. In Belgium, this is the Gegevensbeschermingsautoriteit / Autorité de protection des données.

I may update this Privacy & Data Policy from time to time. Updated versions will be posted on this page with a new “Last updated” date. I recommend checking back occasionally if you want to stay informed.