PRIVACY POLICY

Your privacy is important to us. This Privacy Policy explains how Pulsology collects, uses, stores, and protects the personal information you share with us when using our website and requesting our services.

PULSOLOGY LAB PRIVACY POLICY

Effective date: July 17, 2026
Last updated: July 17, 2026
Website: https://www.pulsologylab.com/

1. Introduction

This Privacy Policy explains how personal data and materials submitted in connection with the services offered under the trade name Pulsology Lab, hereinafter “Pulsology,” are collected, used, stored, shared, and protected.

Pulsology offers professional mixing, stereo mastering, stem mastering, vinyl premaster preparation, audio restoration and repair, and other audio services expressly included in a quotation.

Currently:

Services cannot be automatically purchased or contracted through the website.
Pulsology does not offer user accounts.
Pulsology does not sell courses.
Pulsology does not directly store credit or debit card information on the website.
Submitting a form does not guarantee the acceptance, availability, pricing, or scheduling of a project.

The usual process begins with a quotation request. Pulsology reviews the information, may request additional details, and, when the project is considered feasible, provides a customized quotation. A service is only considered contracted once the conditions established in the Terms and Conditions and the corresponding quotation have been fulfilled.

This Policy applies to the website, quotation request forms, project submission forms, email communications, and the processing of information related to Pulsology quotations and services.

2. Data Controller

he data controller responsible for the personal data collected through Pulsology’s website, forms, and communications is:

Trade name: Pulsology Lab

Country of establishment: Colombia

City of operation: Bogotá D.C., Colombia

Contact email: info@pulsologylab.com

Website: https://www.pulsologylab.com/

Pulsology Lab currently operates as a trade name for the provision of professional mixing, mastering, and audio services. Corporate legal information, including registered business name, tax identification number, full business address, and any other official identification details, will be updated in this Privacy Policy once the corresponding formalization process has been completed.

To exercise rights related to personal data, including access, updates, corrections, deletion requests, or withdrawal of consent, the data subject may contact Pulsology through the email address listed above.

3. Territorial and Legal Scope

Data processing is primarily carried out under Colombian personal data protection legislation, including Law 1581 of 2012 and its implementing regulations, to the extent that they apply.

Because Pulsology may receive requests from artists, producers, labels, or representatives located in other countries, other privacy laws may also apply depending on:

The location of the data subject.
The place of establishment of the controller.
The manner in which the services are offered.
The territorial scope of the relevant law.
The nature and scale of the processing.

Where applicable, Pulsology will comply with the obligations and rights established under the European Union General Data Protection Regulation, applicable United Kingdom privacy legislation, or California privacy law.

The inclusion of these provisions does not mean that all such laws apply to Pulsology in every case.

4. Information Pulsology May Collect

Depending on the form used, the status of the request, and the characteristics of the project, Pulsology may collect the following categories of information.

4.1. Identification and Contact Information

Name.
Email address.
Country.
Artist name.
Company, record label, collective, or project name, when provided.
The person’s relationship with the artist, label, or project.
Information included in messages or communications.

4.2. Project Information

Artist name.
Song, EP, album, or project title.
Requested service.
Number of songs.
Target dates or release dates.
Record label, distributor, or self-release method.
Release format.
Musical references.
Streaming links.
Technical or creative instructions.
BPM, key, sample rate, and other technical information.
Comments regarding arrangements, editing, tuning, effects, or sonic direction.
Requested deliverables.
Information required to prepare the quotation and determine the project’s feasibility.

4.3. Music Files and Materials

Pulsology may receive:

Audio files.
Premasters.
Reference mixes.
Stems.
Multitracks.
Alternative versions.
DAW sessions when previously agreed.
Production notes.
Lyrics, metadata, or credit information.
Artwork or other project-related materials, when necessary.
Download or file-transfer links.
Passwords required to access a specific delivery.

4.4. Contractual and Administrative Information

When a request becomes a project, Pulsology may process:

Quotations.
Acceptances and confirmations.
Contracted scope.
Communication history.
Approvals and revision requests.
Project status.
Deliverables.
Invoices, receipts, and administrative records.
Information required to identify or reconcile a payment.
Records related to cancellations, refunds, claims, or disputes.

4.5. Information Provided by Third Parties

Pulsology may receive information from an authorized person acting on behalf of:

An artist.
A record label.
A company.
A manager.
A producer.
A collective.
Another rights holder or project participant.

Any person who provides another individual’s data represents that they have a valid legal basis or sufficient authorization to do so and that they can inform that individual about this processing when necessary.

5. How Information Is Collected

Pulsology may obtain information:

Directly from the data subject.
Through quotation request forms.
Through project submission forms.
By email.
Through the official communication channel agreed upon for the project.
Through Google Drive, Dropbox, WeTransfer, or another agreed transfer service.
Through quotations, receipts, communications, and contractual documents.
From a person authorized to represent the artist, label, company, or project.
From providers involved in processing or confirming an external payment.

Pulsology does not intentionally obtain personal data from sources unrelated to the evaluation, contracting, or provision of its services unless there is a legitimate and compatible reason to do so.

6. Purposes of Processing

Pulsology may process information for the following purposes.

6.1. Managing Requests and Preparing Quotations

Receiving and reviewing requests.
Identifying the applicant and the project.
Evaluating materials and requirements.
Determining technical, creative, and operational feasibility.
Requesting additional information or files.
Recommending an appropriate service or scope.
Preparing and sending a quotation.
Providing information about availability and estimated timelines.
Accepting or rejecting a request.

Submitting information for these purposes does not constitute automatic contracting.

6.2. Forming and Performing the Contractual Relationship

When the client accepts a quotation and the contracting requirements have been fulfilled, Pulsology may:

Confirm and schedule the project.
Provide the contracted services.
Process, edit, copy, and temporarily store files.
Manage revisions and approvals.
Prepare and deliver versions.
Coordinate dates, requirements, and communications.
Maintain records of instructions and decisions.
Correct verifiable technical errors.
Manage scope changes.
Handle cancellations, refunds, or claims.

6.3. Managing Payments and Administration

Communicating the available external payment methods.
Identifying and reconciling payments.
Issuing or retaining administrative and tax records.
Managing incomplete, failed, reversed, or disputed payments.
Maintaining billing and accounting records.
Preventing administrative errors or fraud.

Pulsology does not ask clients to enter their complete card information directly on the website. External payment providers, when used, process information in accordance with their own terms and policies.

6.4. Complying With Legal Obligations and Protecting Rights

Complying with legal, accounting, tax, or regulatory obligations.
Responding to valid requests from public authorities.
Retaining evidence of acceptance, authorization, service performance, and payment.
Investigating unauthorized use, fraud, or possible infringements.
Resolving disputes.
Establishing, exercising, or defending legal claims.
Protecting the rights of Pulsology, its clients, and third parties.

6.5. Maintaining Security and Operational Continuity

Protecting accounts, files, and communications.
Controlling access.
Creating temporary operational backups.
Preventing accidental loss, alteration, or unauthorized access.
Diagnosing technical failures.
Maintaining the reasonable availability of the tools used.

6.6. Optional Marketing Communications

Information received for a quotation or project will not automatically be used to send unrelated marketing communications.

Pulsology will only send newsletters, automated promotions, or recurring marketing communications when there is a valid legal basis, such as prior consent where required.

Recipients may request at any time to stop receiving marketing communications by using the unsubscribe mechanism included in the message or by writing to info@pulsologylab.com

Communications required to respond to a request, manage a quotation, or perform a project are not considered promotional communications.

7. Legal Bases for Processing

Where applicable law requires the identification of a legal basis, Pulsology may process data on one or more of the following grounds.

7.1. Pre-Contractual Measures

To review a request, evaluate a project, answer questions, and prepare a quotation requested by the data subject.

7.2. Performance of a Contract

To confirm, administer, and provide the contracted services, manage revisions, complete deliveries, and comply with obligations arising from the Order.

7.3. Compliance With Legal Obligations

To retain tax, accounting, or contractual information and respond to valid requests from public authorities.

7.4. Legitimate Interests

Where applicable, for purposes such as:

Maintaining reasonable business records.
Protecting the security of systems and files.
Preventing fraud.
Resolving disputes.
Defending legal rights.
Improving internal processes related to the service.
Maintaining professional communications with existing clients.

Pulsology will assess whether such interests are overridden by the rights and freedoms of the data subject.

7.5. Consent

Where required for an optional purpose, such as:

Sending certain marketing communications.
Publishing testimonials.
Using materials, artwork, or audio in a portfolio.
Carrying out a special creative use of artificial intelligence.
Processing information for a new purpose requiring authorization.

Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.

7.6. Establishment or Defense of Legal Claims

Where necessary to retain evidence, resolve disputes, or exercise and defend legal rights.

8. Information Pulsology Does Not Currently Collect Directly

Pulsology currently:

Does not allow users to create accounts.
Does not sell courses through the website.
Does not directly process card payments on the website.
Does not directly store complete credit or debit card numbers.
Does not request card security codes.
Does not offer automatic subscriptions.
Does not automatically complete a purchase or contract when a form is submitted.
Does not intentionally request sensitive data that is unnecessary for the project.

Clients must not submit identity documents, complete card details, medical information, general login credentials, or other sensitive data unless strictly necessary.

When an external provider, such as PayPal or a financial institution, is involved in a payment, that provider may collect information directly under its own terms and policies.

9. Music Files and Intellectual Property

Submitted files may contain compositions, recordings, performances, vocals, lyrics, arrangements, trademarks, and other intellectual property belonging to the client or authorized third parties.

Submitting these materials:

Does not transfer ownership to Pulsology.
Does not automatically transfer copyright or related rights.
Does not grant Pulsology general commercial exploitation rights.
Does not authorize publication, distribution, licensing, sale, or promotional use.
Does not permit the materials to be used for unrelated projects.

Pulsology will use the materials only to the extent necessary to:

Evaluate the request.
Prepare a quotation.
Verify technical feasibility.
Provide the contracted services.
Produce and deliver the agreed versions.
Maintain reasonable temporary backups.
Manage revisions, claims, or disputes.
Comply with legal obligations.

Pulsology does not claim ownership of the submitted works or recordings.

Specific rights and licenses related to the final result, review versions, and Pulsology’s pre-existing materials are governed by the Terms and Conditions and the corresponding quotation.

10. Confidentiality

Pulsology will treat the following as confidential, among other information:

Unreleased audio.
Stems and multitracks.
Source sessions.
Premasters and mixes.
Technical and creative notes.
Unannounced release dates.
Non-public business information.
Passwords for specific delivery links.
Private project instructions and communications.

Access will be reasonably restricted to the individuals, contractors, and providers who need it to:

Evaluate or provide the service.
Administer operations.
Maintain technical tools.
Comply with legal obligations.
Protect legitimate rights.

Pulsology will not publish or use unreleased audio for promotional purposes without authorization.

After public release, Pulsology may factually mention its professional involvement where permitted under the Terms and Conditions. The use of audio, artwork, logos, photographs, or testimonials in advertising or a portfolio will require the relevant authorization.

11. Artificial Intelligence and Automated Tools

Pulsology may use professional tools that incorporate automated functions necessary for the service, such as:

Restoration.
Noise reduction.
Technical detection or analysis.
Audio processing.
File transfer.
Protection or security.

Pulsology will not use private client materials to:

Train general-purpose artificial intelligence models.
Clone voices without authorization.
Generate unrelated content.
Publish or commercialize materials through artificial intelligence services.

Any special creative use beyond ordinary technical processing must be disclosed and approved in writing.

Before using external tools that upload or process audio in the cloud, Pulsology will reasonably review their terms, privacy settings, and necessity.

12. Service Providers and Third Parties

Pulsology may use external providers for necessary functions, including:

Website hosting and operation.
Forms.
Email.
File storage and transfer.
Client communications.
Security and backups.
Accounting and administration.
External payment processing.

Current operational documents mention or use tools such as:

Wix, for the website.
Google Forms, for forms.
Google Drive, Dropbox, or WeTransfer, as possible delivery methods.
PayPal and banking institutions, as possible external payment methods.

The inclusion of these names does not mean that every tool is involved in every project.

Before publishing this Policy, Pulsology must verify:

Which providers are active.
Which categories of information they receive.
The countries in which they process or store data.
Their applicable retention periods.
Which cookies or technologies they install.
Which privacy settings are enabled.
Which accounts and individuals have access.

Providers should only receive the information reasonably necessary to perform their function.

13. When Information May Be Shared

Pulsology may share information:

With providers necessary to operate the website, forms, email, or storage.
With authorized engineers or contractors involved in the project.
With payment providers, banks, or accounting professionals.
With professional advisers subject to confidentiality obligations.
When requested or authorized by the client.
To comply with a legal obligation or valid request.
To investigate fraud, infringements, or security risks.
To establish, exercise, or defend legal claims.
In connection with a legitimate business reorganization or transfer, subject to reasonable safeguards.

Pulsology does not sell personal data or use it for third-party behavioral advertising under its currently documented operations.

If this practice changes, this Policy must be updated and the required notices and opt-out mechanisms must be implemented.

14. Contractors and External Engineers

The Terms and Conditions allow Pulsology to use qualified engineers, contractors, and service providers.

When they participate in a project, their access must:

Be limited to the information necessary.
Serve a purpose related to the service.
Be subject to appropriate confidentiality and security obligations.
End when it is no longer necessary.

Pulsology will remain responsible to the client for providing the contracted service in accordance with the agreed terms, without prejudice to any separate liability that may apply to each third party.

15. International Transfers

Some technology providers may store or process information outside Colombia or the data subject’s country of residence.

Therefore, the use of the website, forms, email services, storage, file-transfer, or payment services may involve international transfers or transmissions.

Where required by applicable law, Pulsology will seek to adopt reasonable mechanisms to protect the information, which may include:

Careful provider selection.
Reviewing their policies and security measures.
Data processing agreements.
Appropriate contractual clauses.
Verification of applicable exceptions or legal bases.
Limiting the information transferred.

This Policy does not state that an adequacy decision, certification, or specific contractual clause is currently in place for each provider. This must be verified against the actual settings and contractual documentation.

16. Retention and Deletion

Pulsology will retain information for as long as reasonably necessary to fulfill the purposes described and applicable obligations.

The relevant criteria include:

The status of the request.
Whether a contractual relationship was formed.
The duration of the project.
The revision window.
The need to retain evidence.
Accounting, tax, or legal obligations.
Limitation periods for claims.
The risk of disputes.
Security and operational continuity.

16.1. Requests That Do Not Become Projects

Information associated with quotation requests that do not become contracted projects will be retained for a maximum period of six (6) months, counted from the date of the last communication related to the request. Once this period has expired, the information will be securely deleted or anonymized, unless:

The data subject requests its earlier deletion and the request is legally valid.
A legal or contractual obligation requires the information to be retained for a longer period.
The information is necessary to address a claim, dispute, or request from a competent authority.
The data subject has expressly authorized its use for an additional purpose, such as receiving marketing communications.

16.2. Accepted and Completed Projects

Contractual, administrative, financial, tax-related, and communications data associated with accepted and completed projects will be retained for the duration of the service and, afterward, for a maximum period of ten (10) years, counted from the date of the most recent document, receipt, payment, or relevant communication associated with the project.

This retention period is intended to allow Pulsology to comply with legal, accounting, tax, and contractual obligations, as well as to address claims, disputes, requests from competent authorities, and the exercise or defense of legal rights.

Audio files and other technical materials submitted by the client will be retained only for the storage period established in the Terms and Conditions, unless a legal obligation, pending claim, or written agreement justifies retaining them for a longer period.

Once the applicable retention periods have expired, the information will be securely deleted, anonymized, or archived, as appropriate.

16.3. Working Music Files and Deliverables

In accordance with the Terms and Conditions, Pulsology will seek to keep the final deliverables and most recent operational files available for a maximum of 90 calendar days after final delivery.

This period:

Is an operational convenience.
Does not constitute a permanent archival service.
Does not guarantee the retention of every version or temporary file.
Does not replace the client’s own backups.

After this period, Pulsology may delete the files without individual notice, subject to legal obligations or a reasonable need to retain evidence relating to a dispute.

16.4. Backups

Information deleted from active systems may remain temporarily in technical backups until they are rotated or overwritten, provided that it is not used for new purposes.

16.5. Deletion Requests

A deletion request does not require Pulsology to erase information that must be retained to:

Comply with a legal obligation.
Perform or prove a contract.
Exercise or defend legal claims.
Investigate fraud or security incidents.
Protect its own rights or the rights of third parties.
Comply with another exception recognized by law.

17. Security

Pulsology will implement reasonable technical, human, and administrative measures proportionate to the type of information processed.

These measures may include:

Access restrictions.
Password use and available authentication methods.
Permission management.
Updating devices and applications.
Reasonable backups.
Transfers through recognized services.
Reviewing links and permissions.
Data minimization.
Periodic deletion of files.
Confidentiality instructions for collaborators.
Incident response measures.

No digital storage or transmission system can guarantee absolute security. Pulsology does not promise that unauthorized access, loss, alteration, or another incident is impossible.

The client must:

Retain their own copies.
Use links with appropriate permissions.
Avoid sharing unnecessary information.
Immediately report links sent by mistake, unauthorized access, or security compromises.

18. Cookies and Similar Technologies

The website may use cookies or technologies necessary to:

Load and display its pages.
Maintain security.
Remember essential settings.
Enable forms or components to function.
Prevent technical abuse.

The presence of additional cookies will depend on the actual Wix configuration and active integrations.

Before publishing this Policy, Pulsology must conduct a technical review to determine:

Which cookies are installed.
Who installs them.
Their purpose.
Their duration.
Whether they are strictly necessary, functional, analytical, or advertising cookies.
Whether a consent banner or mechanism is required.
Whether they are loaded before the required authorization is obtained.
How users can modify their preferences.

Pulsology does not currently state that it uses advertising pixels, behavioral advertising, or advanced analytics.

If such tools are added, this section and the consent mechanism must be updated before they are activated.

Users may also manage cookies through their browser settings. Blocking certain cookies may affect the website’s operation.

19. Third-Party Links and Services

The website or communications may contain links to third-party services, such as streaming, storage, file-transfer, or payment platforms.

These third parties may process information under their own policies. Pulsology does not fully control their practices, availability, or security measures.

Before using an external service, users should review its terms and settings, especially when sharing confidential files.

20. General Data Subject Rights

Depending on applicable law, a data subject may have the right to:

Know whether Pulsology processes their data.
Request access.
Request a copy.
Update information.
Correct inaccurate data.
Complete incomplete information.
Request deletion where applicable.
Withdraw authorization where processing depends on it.
Object to certain processing.
Request restriction of processing.
Request portability where applicable.
Know how their data has been used.
File a complaint with the competent authority.
Not be discriminated against for exercising rights recognized by law.

These rights are not absolute. Pulsology may reject or limit a request where there is a legal exception, a retention obligation, third-party rights, or a need to defend legal claims.

21. Rights Under Colombian Law

Where Law 1581 of 2012 applies, the data subject may:

Know, update, and correct their personal data.
Request proof of authorization, except where legal exceptions apply.
Be informed about how their data has been used.
Submit inquiries and complaints.
Request the withdrawal of authorization or deletion where applicable.
Access their data free of charge under the terms established by law.
File complaints with the Superintendence of Industry and Commerce after completing the applicable inquiry or complaint procedure, where this requirement applies.

Withdrawal or deletion will not apply where there is a legal or contractual duty to retain the information.

22. Rights in the EEA and United Kingdom

Where the GDPR or equivalent United Kingdom legislation applies, the data subject may have the right to:

Access their data.
Correct inaccurate data.
Request deletion.
Request restriction of processing.
Object to processing based on legitimate interests.
Withdraw consent.
Request portability of certain data.
File a complaint with a competent data protection authority.
Receive information about international transfers.
Not be subject to certain decisions based solely on automated processing that produce legal or similarly significant effects.

Pulsology does not currently make solely automated decisions that determine whether a project is contractually accepted or produce significant legal effects for the applicant.

23. Rights of California Residents

If Pulsology becomes subject to the CCPA/CPRA in relation to a consumer, that consumer may have the right to:

Know the categories and specific pieces of information collected.
Know the sources, purposes, and categories of third-party recipients.
Request deletion, subject to exceptions.
Request correction.
Receive information in a reasonably usable format.
Opt out of the sale or sharing of personal information, where such practices exist.
Limit certain uses of sensitive personal information, where applicable.
Not receive discriminatory treatment for exercising their rights.
Act through an authorized agent, subject to verification.

Under its currently documented operations, Pulsology does not sell or share personal data for cross-context behavioral advertising.

If this practice changes, Pulsology must first implement the required notices, links, and opt-out mechanisms.

24. How to Exercise Your Rights

Requests may be submitted to:

Email: info@pulsologylab.com
Recommended subject line: “Data Protection Request”

The request should include:

The data subject’s name.
The email address used for the request or project.
The right they wish to exercise.
A clear description of the information or processing involved.
Information that allows Pulsology to locate the relevant record.
The preferred method for receiving the response.
Additional documents where reasonably necessary.

Complete identity documents should not be submitted unless Pulsology requests them for a justified reason and through a secure method.

25. Identity Verification

Before responding, Pulsology may take reasonable measures to verify:

The identity of the applicant.
Their relationship with the email account or project.
The authenticity of a representative’s authority.
That disclosure will not affect third-party rights.

Verification will be proportionate to the sensitivity of the information and the risk associated with its disclosure.

Pulsology may request additional information where it cannot reasonably verify identity. It may also reject requests that are manifestly unfounded, excessive, fraudulent, or legally invalid, explaining the reason where appropriate.

26. Inquiries and Complaints in Colombia

26.1. Inquiries

The data subject or an authorized person may request access to personal information held in Pulsology’s systems.

Pulsology will respond within the period established by applicable Colombian law. Where it is not possible to respond within the initial period, Pulsology will explain the reason and provide a new response date within the applicable legal limits.

26.2. Complaints

Where a data subject believes that information should be corrected, updated, or deleted, or identifies a possible violation, they may submit a complaint including:

Identification of the data subject.
A description of the relevant facts.
Contact information.
Available supporting documents.
The specific request.

If the complaint is incomplete, Pulsology may request that it be corrected or completed in accordance with applicable law. While it is being processed, a “complaint pending” notation may be added where appropriate.

27. Project Communications

Pulsology may send necessary communications related to:

Requests.
Missing information.
Quotations.
Payments.
Scheduling.
File preparation.
Revisions.
Approvals.
Deliveries.
Claims.
Security.

These communications form part of the requested or contracted process and may continue for as long as necessary, even where the client has opted out of promotional communications.

28. Minors

The services are primarily intended for individuals with legal capacity to enter into contracts and authorized representatives of professional projects.

Pulsology does not intentionally seek to collect information from minors without the necessary involvement or authorization of their parents, legal guardians, or authorized representatives.

When a project involves a minor, the person submitting the request must:

Disclose this circumstance.
Reasonably demonstrate their authority to represent the minor.
Obtain the necessary authorizations regarding the minor’s data, voice, image, performance, and materials.

If Pulsology identifies information from a minor that was collected without a valid legal basis, it may delete the information or suspend the project.

29. Third-Party Data Included in Music Files

Files may include voices, performances, names, lyrics, or other information related to third parties.

The client is responsible for obtaining the rights and authorizations required to submit those materials and permit their processing for the project.

Pulsology will not use that information to contact, profile, or market directly to those individuals unless there is a separate legitimate purpose.

30. Security Incidents

If Pulsology identifies an incident affecting personal data or confidential materials, it will seek to:

Contain and assess the incident.
Limit its effects.
Recover or protect the information.
Document the actions taken.
Notify affected individuals or authorities where required by applicable law.
Review its measures to reduce similar risks.

Any communication will depend on the nature, severity, and likelihood of harm.

31. Changes to This Policy

Pulsology may update this Policy when:

Its services change.
New tools are introduced.
Its forms are modified.
Online payment processing is introduced.
Analytics, advertising, or automated marketing is activated.
Accounts, courses, or subscriptions are introduced.
The legal data controller changes.
Applicable laws change.

The updated version will be published on the website with its new effective date.

Where a change materially affects processing that was previously authorized, Pulsology will take the additional measures required, including obtaining new authorization where necessary.

32. Contact

For inquiries about this Policy or the processing of personal data:

Pulsology Lab / Pulsology Mix & Master

Privacy and administration email: info@pulsologylab.com
General email: contact@pulsologylab.com
Website: https://www.pulsologylab.com/