To create your song, you tell us personal things: a name, a memory, sometimes something you have never said out loud. We think it is only right to explain to you exactly what happens to this information.

1. Data controller

CANZONE LLC
167 Madison Avenue, Suite 205
New York, NY 10016, United States
contact@canzone-unica.com

2. What data we collect

Data you provide to us

• your email address;
• the recipient's name and your relationship with them;
• the occasion, musical style and voice type you prefer;
• the content of the brief: the qualities of the person, shared memories, the message you want to convey;
• the billing details needed for the purchase.

Data collected automatically

• IP address, device and browser type, language;
• pages visited and interactions with the site;
• cookie identifiers, as described in the Cookie Policy.

Payment data: card details are processed directly by certified payment providers. They do not pass through our systems and we do not store them.

3. Why we process it and on what legal basis

4. The content of the brief

This point deserves particular clarity, because it is specific to our service.

To compose the song, the text and instructions drawn from your brief are passed on to the technical providers who handle musical composition and production. This is a technically essential step: without it, the song cannot exist.

For this reason we ask you not to include unnecessary sensitive data in the brief: health conditions, religious or political beliefs, sexual orientation, or data about minors beyond a simple name. Tell us the feeling, not the medical file.

5. Who we share the data with

We share data only with parties that allow us to deliver the service, each for the part they play:

• Shopify, the e-commerce platform that hosts the site and manages orders;
• payment providers, for collecting payments and any refunds;
• technical providers of musical composition and production, to create the song;
• hosting and technical infrastructure providers, to keep the services running;
• Meta Platforms, limited to marketing cookie data and only with your prior consent;
• advisers, authorities or other third parties, when required by law.

We do not sell your personal data and we do not pass it on to third parties for their own marketing purposes.

6. Transfers outside the European Union

CANZONE LLC is based in the United States, and some of the providers listed operate outside the European Economic Area. These transfers take place on the basis of the standard contractual clauses approved by the European Commission, or other safeguards adequate under Articles 44 et seq. of the GDPR.

7. How long we keep it

• Order and billing data: 10 years, for accounting and tax obligations.
• Brief content and the produced song: 24 months from delivery, so that we can resend you the file or handle revisions.
• Support correspondence: 3 years from the last contact.
• Cookie data: according to the durations set out in the Cookie Policy.

You can ask us to delete the brief and the audio file early at any time, subject to our accounting obligations.

8. Your rights

Under Articles 15 to 22 of the GDPR, you have the right to:

• access your data and obtain a copy of it;
• request rectification if it is inaccurate;
• request its deletion;
• request restriction of processing;
• object to processing based on legitimate interest;
• receive your data in a structured format and transfer it to another controller;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights, write to contact@canzone-unica.com. We reply within 30 days.

9. Complaints

If you believe that the processing of your data breaches the applicable rules, you can lodge a complaint with the supervisory authority of your country. In Italy this is the Garante per la protezione dei dati personali (Italian Data Protection Authority), garanteprivacy.it.

10. Security

We adopt appropriate technical and organisational measures to protect data: encrypted connections, access limited to necessary personnel, carefully selected providers. No system is invulnerable, but we treat this matter seriously.

11. Minors

The service is aimed at adults. We do not knowingly collect data from minors under 16 years of age. If we discover that we have done so, we delete it.

12. Changes

We may update this notice. The version in force is always the one published on this page, with the update date at the bottom.

Last updated: 7 September 2026