Privacy.
The short version: we collect the minimum we need to send you the sounds you bought and reply when you write to us. We do not sell your data, ever, and you can ask us to delete it at any time.
Who we are
Marchstead is a sole proprietorship based in Lisbon, Portugal. Our registered address is Rua dos Remedios 41, 1100-447 Lisbon. For privacy questions, write to info@marchstead.com and one of us (Joana or Henrique) will reply within one working day.
For the purposes of EU GDPR, Marchstead is the data controller of the personal information described below.
What we collect, and why
Order data (email, payment, address)
When you buy a pack we collect your email address so we can send you the download links and the receipt. Payment is processed by Stripe; Stripe collects your card details directly and we never see or store them. Stripe may also collect your billing country and zip for fraud prevention. Legal basis: performance of a contract (you bought a thing, we send the thing).
Support emails
If you write to us, we keep the email thread so we can pick up the conversation if you write again. Legal basis: legitimate interest in supporting our customers.
Server logs
Our hosting provider keeps standard access logs (IP, timestamp, requested URL) for 30 days for security and abuse prevention. Legal basis: legitimate interest.
Cookies
We do not set tracking cookies. We do not use Google Analytics, Meta Pixel, or any advertising trackers. Stripe sets its own cookies during checkout for fraud prevention, which is essential to the transaction. That is the only third-party cookie on the site.
Who we share data with
- Stripe (payments): see stripe.com/privacy.
- Our email provider (Postmark, USA, SCC-protected): used to send you receipts and download links.
- Our hosting provider (Render, USA, SCC-protected): runs the site.
We do not share, sell, or rent your data to anyone for marketing. We do not run an affiliate or referral programme.
Your rights under GDPR
You can ask us at any time to:
- Tell you exactly what data we hold about you.
- Delete that data (we will delete everything except a minimum record of the sale, which we are legally required to keep for tax).
- Send you a portable copy of your data.
- Correct anything that is wrong.
Email info@marchstead.com with the request and we will action it within 30 days.
You also have the right to complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD) at cnpd.pt.
How long we keep things
Order records: 7 years (tax requirement). Support emails: 3 years. Server logs: 30 days.
Changes to this policy
If we change anything material we will update the date at the bottom of this page. If the change affects your existing data, we will email you first.
Last updated: 27 May 2026