Privacy & Cookie Policy

Last updated 13 July 2026. This policy explains what Riverine Audio ("Riverine", "we", "us") collects when you use riverineaudio.com, why, who we share it with, and the rights you have over it — including under the EU/UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), Canada's PIPEDA and CASL, and comparable laws elsewhere. We're a small independent operation, not a law firm — if you need a legal opinion about your own situation, please consult a privacy attorney.

Who we are

Riverine Audio (ABN 32 868 177 549) is operated by Kieran ("Riverine"), an independent artist and producer. You can reach us at kieran@riverineaudio.com for anything in this policy, including privacy requests.

What we collect

We only collect what's needed to run the site and deliver what you've asked for:

• Email address — when you request a free WAV download, purchase a license or exclusive buyout, or submit an offer.
• Artist name, Spotify profile link, and release plans — only if you submit an offer for exclusive rights to a track.
• Purchase records — handled and stored by our payment processor, Stripe (see below); we keep a reference to completed purchases to deliver files and honour licenses.
• Free-download records — which track and when, tied to the email you provided, so we can resend links and send follow-up emails.
• Marketing consent — a free WAV download is offered in exchange for joining the mailing list, so opting in is required to receive it. We record that you consented and when, as proof of consent. You can unsubscribe at any time afterwards without affecting the download you already received.
• Aggregate play counts — anonymous per-track play totals; not linked to your email or any personal identifier.
• IP address — used transiently to rate-limit form submissions against spam/abuse. It's kept in a short rolling window and automatically dropped once inactive; we don't use it to build a profile of you.

Why we use it (legal basis)

• Contract — processing purchases, delivering files, and honouring license agreements.
• Consent — sending marketing follow-up emails, and loading marketing/analytics cookies or pixels (see Cookies below). You can withdraw consent at any time.
• Legitimate interest — securing the site against abuse (rate limiting), and keeping aggregate play statistics.
• Legal obligation — retaining transaction records as required for tax and accounting purposes.

Cookies & tracking

We use a consent banner to gate anything beyond what's strictly necessary. "Necessary" cookies/local storage (cart contents, checkout session, your cookie preference itself) are always on because the site can't function without them. "Analytics" and "Marketing" — including any advertising pixel such as Meta Pixel, if and when we enable one — only load after you explicitly opt in, and stop if you withdraw consent. You can change your choice at any time using the banner, or by clearing your browser's local storage for this site.

If a Meta Pixel is active, it may share limited data about your visit and on-site actions with Meta for ad measurement and targeting, governed by Meta's own privacy policy. It never loads for visitors who haven't opted in to marketing cookies.

Who we share it with

We use a small number of service providers (data processors) to run the site. Each only receives what it needs to do its job:

• Stripe — payment processing. Stripe receives your payment details directly; we never see or store your card number.
• Brevo — sends transactional emails (download links, receipts, license delivery) and, only if you opt in, marketing follow-up emails.
• Cloudflare (R2) — stores audio files, license PDFs, and the operational records described above.
• Netlify — hosts the site and its serverless functions.
• Meta — only if a Meta Pixel is active and you've opted in to marketing cookies.

We do not sell your personal information, and we don't share it with anyone for their own independent marketing purposes.

International transfers

Our service providers operate globally, so your data may be processed in countries outside your own, including the United States. Where required, we rely on those providers' standard contractual clauses or equivalent safeguards for cross-border transfers.

How long we keep it

Purchase and license records are kept as long as needed for accounting, tax, and legal purposes. Free-download and follow-up records are kept until you unsubscribe or request deletion, or until they're no longer needed for the purpose collected. Rate-limiting data (IP addresses) is dropped automatically within a short window.

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data ("right to erasure") — subject to records we're legally required to keep (e.g. completed transactions).
• Object to or restrict certain processing, and withdraw consent at any time.
• Receive a copy of your data in a portable format.
• Opt out of the sale or "sharing" of personal information (we don't sell data, so this is automatically satisfied) — California residents specifically have the right to opt out of targeted advertising, which the cookie banner controls.
• Lodge a complaint with your local data protection authority.

To exercise any of these, use the form below or email kieran@riverineaudio.com. We aim to respond within 30 days (or the shorter deadline required by your local law).

Children's privacy

This site is not directed at children, and we don't knowingly collect personal information from anyone under 16.

Security

We rely on reputable providers (Stripe, Cloudflare, Netlify, Brevo) with their own security safeguards, restrict admin access with authentication, and don't store payment card details ourselves.

Changes to this policy

We may update this policy as the site changes. The "last updated" date at the top reflects the latest revision.

Back to Riverine