Last updated: December 2025

1. Data Controller

2. Websites Covered

This Privacy Policy applies to the following websites:

• Main website: https://midifiles.com
• Alternative domains: tplm.com, tplm.net, midi-music.com, midi-musique.com

3. Data We Collect

3.1 Account & Purchase Data

• Email address: Required to access your account, receive order confirmations, download links, and support responses
• Billing address: Optional, used for invoicing purposes
• Payment information: Processed securely by Stripe and PayPal (we do not store your card details)
• Order history: Products purchased, dates, and download records

3.2 Automatically Collected Data

• IP address: For security, fraud prevention, and analytics
• Browser and device information: For website optimization
• Pages visited: Via Google Analytics (anonymized)
• Cookies: Essential for cart functionality and user session

4. Purposes & Legal Basis

Purpose	Legal Basis (GDPR)
Process orders and deliver digital files	Contract execution (Art. 6.1.b)
Send order confirmations and invoices	Contract execution (Art. 6.1.b)
Respond to customer support inquiries	Legitimate interest (Art. 6.1.f)
Comply with legal obligations (accounting)	Legal obligation (Art. 6.1.c)
Website analytics and improvement	Legitimate interest (Art. 6.1.f)
Fraud prevention and security	Legitimate interest (Art. 6.1.f)

5. Hosting & Service Providers

We use the following third-party service providers to operate our business:

Provider	Purpose	Location
Ecwid (Lightspeed)	E-commerce platform, orders, customer accounts	USA / EU
Stripe	Secure payment processing	USA / EU
PayPal	Secure payment processing	USA / EU
Google Analytics (GA4)	Website traffic analytics	USA
Cloudflare	DNS, CDN, security	Global
YouTube	Video hosting	USA
O2switch	Audio demo file hosting (MP3)	France

6. Cookies & Tracking

6.1 Essential Cookies

These cookies are necessary for the website to function properly:

• Ecwid session cookies: Shopping cart, user login, checkout process
• Cloudflare cookies: Security and performance optimization

6.2 Analytics Cookies

We use Google Analytics 4 (GA4) to understand how visitors interact with our website. GA4 collects:

• Pages visited and time spent
• Traffic sources (how you found us)
• Device and browser information
• Approximate geographic location (country/city level)

IP addresses are anonymized. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

6.3 Payment Cookies

Stripe and PayPal may set cookies during the checkout process for fraud prevention and secure transaction processing.

7. Data Retention

Data Type	Retention Period	Reason
Order records and invoices	10 years	French accounting law requirement
Customer account data	Until deletion request or 3 years of inactivity	Service provision
Support correspondence	3 years after last contact	Customer service quality
Analytics data	14 months	Google Analytics default

8. International Transfers

Some of our service providers are located outside the European Economic Area (EEA), primarily in the United States. When your data is transferred outside the EEA, it is protected by:

• EU-US Data Privacy Framework: For certified US companies (Google, Stripe, PayPal)
• Standard Contractual Clauses (SCCs): EU-approved data protection agreements
• Adequacy decisions: Where applicable

9. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): Request deletion of your data (subject to legal retention requirements)
• Right to restriction: Limit how we process your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interest
• Right to withdraw consent: Where processing is based on consent

10. Security

We implement appropriate technical and organizational measures to protect your personal data:

• HTTPS encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL
• Password protection: Passwords are hashed and never stored in plain text
• Secure payments: Payment processing is handled by PCI-DSS compliant providers (Stripe, PayPal)
• Access control: Limited access to personal data on a need-to-know basis
• Regular updates: Security patches and software updates are applied regularly

11. Contact Us

---

© 2026 MIDIFILES.com — All rights reserved
This Privacy Policy is compliant with GDPR (EU) 2016/679