Privacy Policy

Last updated: September 2026. This policy explains what personal data this site collects, why, how long it is kept, and how you can control it.

Who is responsible for your data

Maxime Verdoni (Bordeaux, France) is the data controller for this website. For any question about this policy or your personal data, contact contact@maximeverdoni.com.

What we collect

Contact form: name, email address and message content, used only to respond to your enquiry.
Newsletter: first name, last name and email address, used to send updates about releases, concerts and news. Sign-up requires double opt-in confirmation by email, and you can unsubscribe at any time.
Orders and accounts: billing details, order history and downloaded files, processed to fulfil your purchase, give you access to your account and downloads, and comply with accounting obligations.
Payments: card and payment details are collected and processed directly by our payment provider, Stripe — we never see or store your full card number.
Subscriptions and donations: if you subscribe to a recurring plan or make a donation, the same billing and payment data above is used to manage renewals and receipts.
Browsing data: pages visited, approximate location (country/region) and device/browser type, collected in an anonymised, privacy-friendly way (see "Analytics" below).
Security data: to protect the site and its users from fraud and attacks, our security software may process your IP address and browsing behaviour.

Why we process it (legal basis)

Contract performance: processing your order, payment, subscription or account. Consent: newsletter sign-up, non-essential cookies. Legal obligation: keeping accounting and invoicing records. Legitimate interest: keeping the site secure, understanding how it is used so we can improve it, and responding to enquiries.

Who we share it with

We do not sell your personal data to anyone. To operate the site, a small number of specialised providers process data on our behalf, each only for the purpose described:
• Stripe — payment processing for orders, subscriptions and donations.
• Brevo — sends transactional emails (order confirmations, download links, password resets).
• MailPoet — sends the newsletter to subscribers who opted in.
• Matomo — website analytics, self-hosted on our own server: your browsing data is never sent to a third-party analytics company.
• Wordfence — security monitoring and protection against malicious traffic.
• IONOS — hosts the server this site runs on (Germany).
• UpdraftPlus — automated backups of the site, stored securely, used only to restore the site in case of an incident.
Some of these providers are located outside the European Economic Area (notably Stripe and MailPoet, both US-based); where that is the case, they provide appropriate safeguards such as the EU-US Data Privacy Framework or Standard Contractual Clauses.

Cookies

This site uses essential cookies (required for the shopping cart, checkout, login and language preference to work) and, only with your consent, analytics cookies. A cookie banner lets you accept or refuse non-essential cookies and change your choice at any time from the "Cookie settings" link in the footer.

How long we keep it

Order and invoicing data is kept as long as required by French accounting law (currently 10 years). Newsletter data is kept until you unsubscribe. Contact form messages are kept only as long as needed to handle your request. Security logs are kept for a limited period to investigate incidents, then deleted.

Data security

The site is served exclusively over HTTPS, protected by a web application firewall, and administrator accounts are secured with two-factor authentication and passkeys. We keep the site and its software up to date to address security issues promptly.

Your rights

Under GDPR, you have the right to access, correct, delete or export your personal data, to restrict or object to its processing, and to withdraw consent at any time (including unsubscribing from the newsletter via the link in any email). To exercise these rights, contact contact@maximeverdoni.com. If you are not satisfied with our response, you may lodge a complaint with your local data protection authority (in France, the CNIL — www.cnil.fr).

Children's privacy

This site is not directed at children, and we do not knowingly collect personal data from children under 16.

Changes to this policy

We may update this policy from time to time, for example when a new feature or service provider changes how we process data. The "Last updated" date at the top of this page reflects the most recent revision.