Back to home

Legal

Privacy Policy

Last updated: 25 June 2026

Who we are

CELEST DSP designs and sells premium audio plugins through celestdsp.com. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices and rights you have. For the purposes of data protection law, the data controller is OPX LTD. (operating as CELEST DSP), established in Ontario, Canada. We handle personal data in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply to you, other data protection laws such as the EU and UK GDPR.

This policy applies to our website, our online storefront, and the services we provide when you browse, create an account, purchase a license, or contact us for support. If you have any questions about this policy or how we handle your data, please contact us at privacy@celestdsp.com.

Information we collect

We collect personal data in the following ways.

  • Account and purchase data you provide. When you create an account or buy a product, we collect details such as your name, email address, and the items you license. Billing and payment details (for example, your card information) are collected and processed directly by our payment provider, not stored by us.
  • Data collected automatically. When you use our website and storefront, we may collect technical information such as your IP address, device and browser type, operating system, referring pages, and usage analytics about how you interact with the site.
  • Marketing opt-in status. If you choose to receive product news and offers, we record your consent and your subscription preferences so we can honor your choices.
  • Support correspondence. When you contact us for help, we keep the messages you send and our replies, along with any information you choose to share, so we can resolve your request and improve our support.

How we use your information

We use the personal data described above to:

  • fulfil your orders and deliver the licenses and downloads you purchase;
  • operate your account and provide customer support;
  • send marketing communications, only where you have given consent, and let you withdraw that consent at any time;
  • understand how our products and website are used so we can improve them;
  • detect, prevent, and investigate fraud, abuse, and security issues;
  • meet our legal, tax, and regulatory obligations.

Legal bases for processing

Where data protection law such as the GDPR applies, we rely on the following legal bases:

  • Performance of a contract - to process your purchases, provide downloads and licenses, and deliver support you request.
  • Consent - to send marketing communications and, where required, to set non-essential cookies. You can withdraw consent at any time.
  • Legitimate interests - to secure our services, prevent fraud, and improve our products, balanced against your rights and freedoms.
  • Legal obligation - to comply with accounting, tax, and other legal requirements.

Sharing and service providers

We do not sell your personal data. We share it only with the service providers who help us run our business, and only as needed to provide our services to you.

  • Storefront and payments. Our online store, accounts, and checkout are operated by Moonbase.sh, and card payments are handled by a third-party payment processor. These providers process the data required to complete and manage your purchases.
  • Analytics. We may use an analytics provider to understand site usage. We use Cloudflare Web Analytics for privacy-friendly, aggregate usage measurement, and Google Analytics to understand site traffic in more detail.
  • Email and marketing. We may use an email service provider to send transactional and, with your consent, marketing messages. Transactional and marketing emails are sent through our storefront provider, Moonbase.
  • Hosting and infrastructure. Our website is served through our hosting and content delivery provider. Our website is hosted on Cloudflare Pages, which also provides content delivery and security.

We may also disclose personal data where required by law, to enforce our terms, or to protect the rights, safety, and property of CELEST DSP, our customers, or others.

International data transfers

Your personal data may be processed in countries outside the one in which you live, including by the service providers listed above. Where we transfer data internationally, we put appropriate safeguards in place to protect it. We rely on contractual safeguards with our service providers, including data processing agreements and, where required, recognized transfer mechanisms such as Standard Contractual Clauses.

Data retention

We keep personal data only for as long as we need it for the purposes described in this policy, after which we delete or anonymize it.

  • Account and license records: kept for the life of your account and for up to 24 months after it is closed
  • Order and billing records: retained for 6 years to meet Canadian tax and accounting requirements
  • Support correspondence: kept for up to 24 months after your request is resolved
  • Marketing data: kept until you unsubscribe or withdraw your consent

Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate or incomplete data;
  • request erasure of your data;
  • receive your data in a portable, machine-readable format;
  • object to or restrict certain processing;
  • withdraw consent at any time, without affecting processing carried out before withdrawal;
  • lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, email us at privacy@celestdsp.com. We will respond within the timeframe required by applicable law and may need to verify your identity before acting on your request.

Cookies and tracking

We use cookies and similar technologies to keep the site working, remember your preferences, and understand how the site is used. You can control non-essential cookies through your browser settings and, where available, through our on-site cookie controls. Where non-essential analytics cookies are used, we will ask for your consent or provide controls to manage them, in line with applicable law.

Children

Our website and products are not directed at children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. We encourage you to review this policy periodically.

Contact us

If you have questions, requests, or concerns about this policy or your personal data, please contact us at:

This document is a first draft provided for review. It should be reviewed and adapted by qualified legal counsel for the operating jurisdiction before it is published or relied upon.