Legal
Privacy Policy
Who we are
CELEST DSP designs and sells premium audio plugins through celestdsp.com. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices and rights you have. For the purposes of data protection law, the data controller is CELEST DSP, a registered business name of OPX LTD., established in Ontario, Canada. We handle personal data in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply to you, other data protection laws such as the EU and UK GDPR.
This policy applies to our website, our online storefront, and the services we provide when you browse, create an account, purchase a license, contact us for support, or send a support, sales, partnership, or education enquiry. If you have any questions about this policy or how we handle your data, please contact us at privacy@celestdsp.com.
Information we collect
We collect personal data in the following ways.
- Account and purchase data you provide. When you create an account or buy a product, we collect details such as your name, email address, and the items you license. Billing and payment details (for example, your card information) are collected and processed directly by our payment provider, not stored by us.
- Data collected automatically. When you use our website and storefront, we may collect technical information such as your IP address, device and browser type, operating system, referring pages, and usage analytics about how you interact with the site.
- Marketing opt-in status. If you choose to receive product news and offers, we record your consent and your subscription preferences so we can honor your choices.
- Correspondence. When you contact us for support or send a sales, partnership, or education enquiry, we keep the messages you send and our replies, along with any information you choose to share, so we can respond to your request and improve our service.
How we use your information
We use the personal data described above to:
- fulfil your orders and deliver the licenses and downloads you purchase;
- operate your account, provide customer support, and respond to sales, partnership, and education enquiries;
- send marketing communications, only where you have given consent, and let you withdraw that consent at any time;
- understand how our products and website are used so we can improve them;
- detect, prevent, and investigate fraud, abuse, and security issues;
- meet our legal, tax, and regulatory obligations.
Legal bases for processing
Where data protection law such as the GDPR applies, we rely on the following legal bases:
- Performance of a contract - to process your purchases, provide downloads and licenses, and deliver support you request.
- Consent - to send marketing communications and, where required, to set non-essential cookies. You can withdraw consent at any time.
- Legitimate interests - to secure our services, prevent fraud, and improve our products, balanced against your rights and freedoms.
- Legal obligation - to comply with accounting, tax, and other legal requirements.
Sharing and service providers
We do not sell your personal data. We share it only with the service providers who help us run our business, and only as needed to provide our services to you.
- Storefront and payments. Our online store, accounts, and checkout are operated by Moonbase.sh, and card payments are handled by a third-party payment processor. These providers process the data required to complete and manage your purchases.
- Support, live chat, and enquiry delivery. We use Brevo to provide in-page support and to send transactional email notifications for education and sales enquiries. When you are signed in, start a chat, or submit an enquiry form, the details needed to identify you and respond to your request may be processed by Brevo.
- Analytics. We use Cloudflare Web Analytics, a privacy-friendly and cookieless tool, for aggregate traffic measurement; because it sets no cookies, it does not require consent. With your consent, we also use Google Analytics (provided by Google) for more detailed insight into how our site is used.
- Advertising. With your consent, we use the TikTok Pixel (provided by TikTok / ByteDance) and the Meta Pixel (provided by Meta Platforms) to measure the effectiveness of our advertising and to improve and target our campaigns, including matching activity to our product catalogue.
- Email and marketing. Transactional and, with your consent, marketing emails are sent through our storefront provider, Moonbase.
- Hosting and infrastructure. Our website is hosted on Cloudflare Pages, which also provides content delivery and security.
The providers above are those we work with at the time of writing; this list may not be exhaustive and may change over time. We may also disclose personal data where required by law, to enforce our terms, or to protect the rights, safety, and property of CELEST DSP, our customers, or others.
International data transfers
Your personal data may be processed in countries outside the one in which you live, including in the United States and, in the case of TikTok and Meta, by entities affiliated with their parent companies. Where we transfer data internationally, we rely on appropriate safeguards, which may include the EU-US Data Privacy Framework (for example, Google), Standard Contractual Clauses, and data processing agreements with our providers.
Data retention
We keep personal data only for as long as we need it for the purposes described in this policy, after which we delete or anonymize it.
- Account and license records: kept for the life of your account and for up to 24 months after it is closed
- Order and billing records: retained for 6 years to meet Canadian tax and accounting requirements
- Support, sales, partnership, and education correspondence: kept for up to 24 months after your request is resolved
- Marketing data: kept until you unsubscribe or withdraw your consent
Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request erasure of your data;
- receive your data in a portable, machine-readable format;
- object to or restrict certain processing;
- withdraw consent at any time, without affecting processing carried out before withdrawal;
- lodge a complaint with your local data protection supervisory authority.
To exercise any of these rights, email us at privacy@celestdsp.com. We will respond within the timeframe required by applicable law and may need to verify your identity before acting on your request.
Cookies and tracking
We use cookies and similar technologies to run the store, remember your preferences and consent choices, provide support, understand how the site is used, and, with your consent, measure and improve our advertising.
Analytics and marketing cookies are set only after you consent through our on-site cookie banner. You can change or withdraw your choices at any time using the "Cookie Preferences" link in the footer. Your choice is stored on your device and we will ask you again periodically (about every 12 months). You can also control cookies through your browser settings.
The categories and providers below reflect our use at the time of writing. This list may not be exhaustive, and our providers may add, remove, rename, or change their cookies over time; for the definitive, current details please refer to each provider's own cookie and privacy documentation.
| Category | Provider(s) | Purpose | Typical duration | Consent |
|---|---|---|---|---|
| Strictly necessary | Moonbase.sh; CELEST DSP | Run the store, cart, checkout and account; remember your cookie choices | Session to 12 months | Not required |
| Functional | Brevo | Provide in-page live chat and remember your conversation | Session to 12 months | Loaded to provide support |
| Analytics | Google Analytics | Measure site usage and traffic | Up to 24 months | Required (Analytics) |
| Marketing | TikTok Pixel | Measure, improve and target advertising, including retargeting | Up to 13 months | Required (Marketing) |
| Marketing | Meta Pixel | Measure, improve and target advertising, including retargeting | Up to 13 months | Required (Marketing) |
Children
Our website and products are not directed at children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. We encourage you to review this policy periodically.
Contact us
If you have questions, requests, or concerns about this policy or your personal data, please contact us at:
- Email: privacy@celestdsp.com
- Support: support@celestdsp.com
- Postal address: 3219 Yonge St, Suite #354, Toronto, Ontario M4N 2L3, Canada
This document is a first draft provided for review. It should be reviewed and adapted by qualified legal counsel for the operating jurisdiction before it is published or relied upon.