Privacy Policy

This policy explains what personal data SSOUNDS collects, why we collect it, who we share it with, and what rights you have. It covers this website and the services we provide through it.

Who we are

SSOUNDS is the trading name of three affiliated entities. The one responsible for your data (the “controller”) depends on which of them you deal with:

• S Sounds Pro Ltd, registered in England & Wales (Company No. 16739266), 82a James Carter Road, Mildenhall IP28 7DE, United Kingdom. Controller for customers in the UK, EEA and most international markets.
• S Sounds Production, a business name registered with the Corporate Affairs Commission in Nigeria (Reg. No. 2647884), Abuja, FCT. Controller for customers in Nigeria and West Africa.
• Top Gearz Services LLC, Wyoming, USA (Entity ID 2023-001249446). Controller for customers in the United States.

For any privacy question, or to exercise the rights below, email info@s-soundspro.com. If you are not sure which entity holds your data, write to us and we will tell you.

Which law applies

If you are in the United Kingdom or the EEA, we process your data under the UK GDPR and the Data Protection Act 2018 (or the EU GDPR where it applies to you). If you are in Nigeria, we process it under the Nigeria Data Protection Act (NDPA) 2023. Where more than one applies, we apply the standard that gives you the stronger protection.

Information we collect

• Contact and account data: name, email, phone number, delivery and billing address, account credentials, company name and role where you give them.
• Transaction data: orders, quotes, rentals, invoices, payment status. We do not see or store full card numbers; card details go directly to our payment providers.
• Support and enquiry data: messages you send us, including anything you type into the on-site assistant or send to our support team, and any files you attach.
• Partner data: for distributor, affiliate and staff applicants, the identity and verification documents you submit.
• Technical data: IP address, device and browser type, pages viewed, and similar usage data. Analytics beyond what is strictly necessary is set only if you consent.

How we use it, and our lawful basis

• To process and deliver orders, quotes, rentals, installations and support (performance of a contract).
• To operate accounts and the distributor and affiliate programmes (performance of a contract).
• To send transactional messages about your order, quote or support request (performance of a contract).
• To keep the site secure, prevent fraud and abuse, and improve our products and service (legitimate interests).
• To meet accounting, tax and other legal obligations (legal obligation).
• To send marketing, product news and our newsletter (consent, which you can withdraw at any time using the unsubscribe link or by emailing us).

The on-site assistant

Our site includes an AI assistant. When you use it, the content of your messages, any text extracted from files you attach, and the page you are viewing are sent to a third-party AI provider outside the UK, EEA and Nigeria in order to generate a reply. Depending on configuration this provider may be located in China, the United States or the European Union. Conversations may be retained so we can follow up on your enquiry and improve our service.

Please do not enter payment card details, passwords, identity document numbers or other sensitive personal information into the assistant. If you would rather not use it, every page offers email, phone and WhatsApp contact instead, and you can ask at any point to be handed to a human colleague.

Who we share it with

We share data only with service providers that help us run the business, under contracts that require them to protect it. We never sell your personal data. Our main providers are:

• Hosting and infrastructure: Vercel and Supabase (site hosting, database, authentication, file storage).
• Payments: Paystack (Nigeria) and Stripe (international). They act as controllers of the card data you give them directly.
• Email and SMS: Zoho Mail, Resend and Termii.
• AI assistant: the provider described above.
• Analytics: PostHog, and only if you accept non-essential cookies.

We may also disclose data where the law requires it, or to establish or defend legal claims.

International transfers

We operate across the United Kingdom, Nigeria and the United States, and some of our providers are based outside your country. That means your data may be transferred internationally, including to countries that do not have the same data protection laws as your own. Where we transfer personal data out of the UK or EEA, we rely on adequacy regulations where they exist, and otherwise on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or equivalent safeguards. You can ask us for details of the safeguards that apply to a specific transfer.

How long we keep it

We keep personal data only as long as we need it. In practice that means order and invoice records for as long as tax and company law require (currently at least six years in the UK), account data for as long as your account is open plus a short wind-down period, marketing data until you withdraw consent, and enquiry and assistant conversations for up to 24 months. When data is no longer needed we delete it or anonymise it.

Security

We protect data with access controls, role-based permissions, database row-level security, and encryption in transit. No system is perfectly secure, but we take these obligations seriously and will notify you and the relevant regulator of a personal data breach where the law requires it.

Your rights

Subject to the law that applies to you, you have the right to access your data, to have it corrected or deleted, to object to or restrict how we use it, to receive a copy in a portable format, and to withdraw consent at any time. You also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not make such decisions.

To exercise any of these, email info@s-soundspro.com. We will respond within one month, and will tell you if we need longer because the request is complex.

Complaints

If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to a regulator:

• United Kingdom: the Information Commissioner's Office (ICO), ico.org.uk.
• Nigeria: the Nigeria Data Protection Commission (NDPC), ndpc.gov.ng.
• EEA: your local supervisory authority.

Cookies

See our Cookie Policy for what we set and how to control it.

Changes

If we change this policy we will update the date at the top of this page, and tell you directly where the change is significant.