Effective Date: October 03, 2026
This Privacy Policy (“Policy”) describes how drumandbytes.com (“we,” “us,” or “our”) collects, uses, discloses, and protects your data when you visit https://drumandbytes.com (“Website”).
1. Scope and Applicability
This Policy applies to all personal data processed via the Website. It does not apply to any third-party websites or services that may be linked through the Website.
2. Data Controller
Drumandbytes OÜ (registry code 17599202), Uus-Sadama tn 21-207, 10120 Tallinn, Estonia
Email: privacy@drumandbytes.com
3. Personal Data Collected
We collect the following categories of personal data:
a. Automatically Collected Data
Collected automatically when you visit:
- IP address
- Browser and device information
- Referrer URL
- Pages visited and interactions
- Timestamp of access
b. User-Provided Data
Collected when you interact with the Website:
- Name (if provided)
- Email address
- Message content or inquiry
- Subscription preferences
4. Purpose and Legal Basis for Processing
We process your data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Analytics and performance | Legitimate interests |
| Personalized advertising | Consent |
| Communication and support | Consent / Performance of contract |
| Security and fraud prevention | Legitimate interests / Legal obligation |
5. Use of Cookies
Essential cookies are always set. Analytics (Google Analytics) and advertising (Google AdSense) cookies are only set after you accept them in the cookie prompt, and you can change your choice at any time. You can also block or delete cookies in your browser settings. Cloudflare's visitor statistics described in section 6 use no cookies.
6. Third-Party Services and Tools
We utilise the following third-party services:
1. Cloudflare
- Purpose: Website delivery and security (DDoS protection, HTTPS), plus aggregate, cookieless visitor statistics: page views (Cloudflare Web Analytics) and which sites or links send visitors here (referring site or a short tag on our own links, and the page path without the query string).
- Data Collected: IP address, headers, user agent, processed transiently to serve the request. The visitor statistics store no cookies, IP addresses or identifiers; referral counts are kept for three months.
- Privacy Policy: https://www.cloudflare.com/privacypolicy/
2. Google Analytics
- Purpose: Analysing user behaviour and traffic metrics
- Data Collected: IP address, user interactions, session data
- Privacy Policy: https://policies.google.com/privacy
- Opt-out: https://tools.google.com/dlpage/gaoptout
Google Signals
We have enabled Google Signals in Google Analytics. This allows Google Analytics to collect additional data about users who are signed in to their Google accounts and have enabled ad personalisation. This may include:
- Cross-device user behaviour
- Demographics and interests
- Ad engagement metrics
All data is aggregated and anonymised. No personally identifiable information is provided to us through this feature.
You can opt out of Google Signals data collection via your Google Ad Settings:
👉 https://adssettings.google.com
Or install the Google Analytics Opt-out Add-on.
3. Google Ads (AdSense)
- Purpose: Delivering and measuring personalised ads
- Data Collected: Device identifiers, ad interaction data, demographic information
- Privacy Policy: https://policies.google.com/technologies/ads
- Ad Settings: https://adssettings.google.com/
4. Mailgun
- Purpose: Transactional and newsletter email delivery
- Data Collected: Email addresses, IP address, metadata (e.g., open and click tracking)
- Privacy Policy: https://www.mailgun.com/legal/privacy-policy/
These services may process your data outside your country of residence. When required, we rely on mechanisms such as Standard Contractual Clauses (SCCs) to ensure adequate protection.
7. Data Retention
We retain your data only as long as necessary for the purposes set out in this Policy or as required by law.
8. Your Rights
Depending on your location, you may have the following rights:
- Right to access your data
- Right to rectification
- Right to erasure (right to be forgotten)
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent
- Right to complain with a supervisory authority
To exercise any of these rights, email us at privacy@drumandbytes.com.
9. Data Security
We implement appropriate technical and organisational security measures to safeguard your data. However, no method of transmission over the Internet is entirely secure.
10. International Data Transfers
Your data may be transferred to and stored in countries outside your jurisdiction. In such cases, we ensure compliance with applicable data protection regulations.
11. Changes to this Policy
We may revise this Policy at our discretion. Any material changes will be posted with an updated effective date.
12. Contact
Drumandbytes OÜ (registry code 17599202), Uus-Sadama tn 21-207, 10120 Tallinn, Estonia
Email: privacy@drumandbytes.com
Website: https://drumandbytes.com