PRIVACY POLICY
Last updated: September 13, 2026.
Cap Cort is a music production house based in Medellín, Colombia (“Cap Cort”, “we”, “us”). This policy explains what personal information we collect when you visit capcort.com or buy from us, why we collect it, who processes it on our behalf, how long we keep it, and the rights you have over it. We wrote it to be read, not skimmed. If anything is unclear, write to legal@capcort.com.
1. What we collect
When you buy a license or a service. To issue your license agreement and deliver your files we ask for your first and last name (as on your ID: this is who the license is issued to), your email address, your billing address and your artist name. Optionally, the title of your song and a social link, so we can hear what you make. If your license covers additional artists, their names. If you order our mixing and mastering service, your brief and the audio files you send us.
When you pay. Payment is handled by PayPal in PayPal’s own window. We never see or store your card number or your PayPal password. From PayPal we receive the order and transaction identifiers, the name and email on the PayPal account, and the billing address PayPal confirms.
When you write to us. Your email address and whatever you tell us.
When you join our mailing list. Your email address, and your name if you give it.
Giving us the purchase details above is necessary to issue your license and deliver your files; without them we can’t complete an order. Everything marked optional is optional.
2. What we use it for
To issue your license agreement and your receipt, and to deliver your files by email. To carry out the service you ordered (mixing and mastering), including sending you the rounds and the final delivery. To answer your questions and give you support. To keep records of sales, as accounting and tax law require. To keep the store safe from fraud and abuse.
If you bought from us, to email you now and then about new music and offers. Every one of those emails has an unsubscribe link, and one click is enough. If you joined the mailing list, to send you what you signed up for.
Under the GDPR, our legal bases are the contract with you (license, service, delivery), our legal obligations (accounting), our legitimate interest in keeping the store safe, and your consent where we ask for it (mailing list, cookies).
We don’t make automated decisions about you and we don’t build profiles.
3. Who processes your data for us
We don’t sell your data and we don’t share it with anyone who isn’t helping us serve you. These are the companies that process it on our behalf, and what each one does:
PayPal processes your payment (paypal.com/legalhub/privacy-full).
Cloudflare hosts our checkout, our order records and the PDF of your license agreement, and provides Turnstile, the bot check on our payment form, which processes browser and device signals to tell people from bots, under Cloudflare’s Turnstile Privacy Addendum (cloudflare.com/turnstile-privacy-policy) and Cloudflare’s privacy policy (cloudflare.com/privacypolicy).
FormSpark receives the notification of each order and keeps a copy of it (formspark.io/legal/privacy-policy).
Google Workspace hosts our email; your files and your license agreement are delivered from there. Google Analytics measures visits to this site with cookies, in aggregate form; we don’t use it to identify you by name (policies.google.com/privacy, and how Google uses information from sites that use its services: policies.google.com/technologies/partner-sites). If you are in the European Union we only load it after you accept it in the cookie notice.
Mailchimp (Intuit) hosts our mailing list and sends our newsletters (intuit.com/privacy/statement).
Framer hosts this website (framer.com/legal/privacy-statement).
BeatStars provides the beat player embedded on our home page, which sets its own cookies (beatstars.com/privacy-policy).
Some of these companies are in the United States. Where required, transfers are covered by standard contractual clauses or equivalent safeguards offered by each provider.
4. How long we keep it
A paid order (the order, your details, the license issued, the PDF of your agreement): 2 years in our order records, which is what backing your license and our accounting requires; accounting records, as long as the law requires. A minimal record of each license (its ID, the beat, the license type, the dates and whether it is active; never your name or contact details) is kept for as long as the license is in force, so that its verification page keeps working. An order that was started but never paid: 2 days, then it is deleted automatically. Support emails: as long as we are in touch, and as long as your license is in force where the email is part of its record. Mailing list: until you unsubscribe.
5. Cookies and technical data
In your own browser we keep the cart, a promo code you applied, the checkout form you are filling in and your cookie choice, so nothing is lost if you refresh; they never leave your device until you pay, and they go away when you clear your browser. Google Analytics sets two cookies to measure visits, _ga and _ga_ZX95S95BG0 (they last up to 2 years); in the European Union, only after you accept them in the cookie notice, which you can reopen any time from “Cookie preferences” in the footer. PayPal and Turnstile set their own cookies while you pay. We don’t use advertising cookies today; if that changes, this policy and the cookie notice will say so first.
Like every website, ours keeps short technical logs (the address your connection uses, browser type, time of the request) to keep the site running and safe. They are kept for a few days and then deleted.
6. Your rights
Over the personal data we hold about you, you have the right to: know what we have and get a copy (access); update or correct it; delete it; restrict or object to how we use it, including for marketing; take it with you in a usable format (portability); withdraw a consent you gave us; and ask for proof of that consent.
To exercise any of these, write to legal@capcort.com with your name, the email you used with us and what you are asking for. Under Colombia’s Ley 1581 de 2012 we answer questions (consultas) within 10 business days and complaints (reclamos) within 15 business days, and we tell you first if we need the extension the law allows. If you are not satisfied, you can complain to the Superintendencia de Industria y Comercio (Colombia); if you are in the European Union, the GDPR gives you these same rights and the right to complain to your local data protection authority.
Deleting your data does not cancel a license already issued: we keep the minimum record needed to prove that license exists, for as long as it is in force.
7. Security
Payments never touch our servers. Our checkout is protected against bots and abuse, and the credentials it uses are stored encrypted and never published. Order records are stored with access limited to Cap Cort.
8. Children
This site and our services are not intended for children under 16, and we don’t knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.
9. Scope
This policy applies to capcort.com and to any page of ours that links to it. Sites we link to (PayPal, YouTube, Spotify, BeatStars and others) have their own policies, which apply when you are there.
10. Changes
If we change this policy in a way that matters, we will say so on this page and update the date at the top.
11. Contact
Cap Cort · Medellín, Colombia · legal@capcort.com · Postal address available on request for legal notices.