← Back

Privacy Policy

Last updated: June 3, 2026

Martinsound, Inc. ("Martinsound," "we," "us," or "our") operates the Martinsound Film Spaces booking platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Service. It applies to users worldwide, including those in the United States, the United Kingdom, the European Union / European Economic Area, Canada, and Australia.

1. Information We Collect

Information you provide directly: When you submit a booking request, we collect your name, company name, email address, phone number, production details, and any other information you voluntarily provide through our booking forms.

Payment information: Payment card and bank account data is collected and tokenized directly by our payment processor (Stripe, Inc.) using browser-side encryption. Martinsound never stores raw card numbers, CVVs, bank account numbers, or full payment data on our servers. We receive only a non-reversible token and, upon successful charge, a masked card brand and last four digits (or last four digits of a bank account for ACH payments) for receipt purposes.

Documents: We collect insurance certificates, location agreements, and other production documents you upload through the Service.

Usage data: We may collect standard web server logs including IP addresses, browser type, pages visited, and timestamps for security and diagnostic purposes.

2. How We Use Your Information

We use the information we collect to: (a) process and manage your booking requests; (b) communicate with you regarding your bookings, including confirmations, reminders, and updates; (c) process payments and issue invoices; (d) maintain our business records and comply with legal obligations; (e) improve the Service; and (f) send administrative communications.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Lawful basis (UK & EU/EEA users): We process personal data under the following bases: Contract performance (Art. 6(1)(b) UK/EU GDPR), to process your booking; Legal obligation (Art. 6(1)(c)), to comply with tax and record-keeping laws; Legitimate interests (Art. 6(1)(f)), for security logging and service improvement, balanced against your privacy rights.

3. Information Sharing

We may share your information with: (a) Service providers who assist us in operating the Service, including cloud hosting, email delivery (Martinsound mail server), payment processing (Stripe, Inc.), and calendar services (Google LLC), each bound by confidentiality obligations; (b) our staff who need access to process your booking; and (c) law enforcement or regulators when required by applicable law or to protect our legal rights.

We do not transfer personal data to countries outside of the United States except where required by our sub-processors (Google Calendar API, Stripe, Inc.) operating under their own published international data transfer mechanisms.

4. Payment Processing

Online payments are processed by Stripe, Inc. We accept credit and debit cards and ACH bank transfers (eCheck). Card and bank account details are tokenized in your browser before reaching our servers, so we only receive a non-reversible token. Stripe is certified as a PCI DSS Level 1 service provider, the highest level of payment security certification. Cash, check, and Zelle payments, where accepted, are recorded manually by our staff and are not processed through Stripe. Please review Stripe's Privacy Policy for details on how they handle your payment information.

5. Data Retention

We retain booking records, communications, and associated documents for a minimum of seven (7) years to comply with US tax and business record-keeping requirements. Payment tokens and transaction records are retained as required by our payment processor and applicable law. You may request earlier deletion subject to our legal retention obligations (see Your Rights, below).

6. Security

We implement commercially reasonable technical and organizational measures to protect your information against unauthorized access, loss, or alteration. OAuth tokens and API credentials stored by the Service are encrypted at rest using industry-standard symmetric encryption. All data in transit is protected by TLS. However, no internet transmission or storage system is 100% secure, and we cannot guarantee absolute security.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant supervisory authorities as required by applicable law (including the UK ICO, EU supervisory authorities, and the Australian OAIC under the Notifiable Data Breaches scheme).

7. Your Rights: California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act and California Privacy Rights Act, California residents may: request disclosure of personal information we have collected about you; request deletion of your personal information (subject to certain exceptions); correct inaccurate personal information; and opt out of the sale or sharing of personal information (we do not sell or share personal information). To exercise these rights, contact us at booking@martinsound.com. We will not discriminate against you for exercising your privacy rights.

8. Your Rights: UK Residents (UK GDPR)

If you are located in the United Kingdom, you have the following rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018:

  • Right of access: obtain a copy of the personal data we hold about you.
  • Right to rectification: request correction of inaccurate or incomplete personal data.
  • Right to erasure ("right to be forgotten"): request deletion of your personal data, subject to our legal retention obligations.
  • Right to restriction: request that we limit processing of your personal data in certain circumstances.
  • Right to data portability: receive your personal data in a structured, commonly used, machine-readable format.
  • Right to object: object to processing based on legitimate interests.

To exercise any of these rights, contact us at booking@martinsound.com. We will respond within one calendar month. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, tel: 0303 123 1113.

9. Your Rights: EU / EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you have the same rights as listed under Section 8 above, under Regulation (EU) 2016/679 (GDPR). You may lodge a complaint with the supervisory authority in your EU member state.

10. Your Rights: Australian Residents (Privacy Act 1988)

If you are located in Australia, your personal information is handled in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You have the right to:

  • Access: request access to the personal information we hold about you (APP 12).
  • Correction: request correction of inaccurate, out-of-date, incomplete, irrelevant, or misleading personal information (APP 13).
  • Anonymity: deal with us anonymously or by pseudonym where practicable, except where we are required by law or it is impracticable to do so (APP 2).

We collect personal information only by lawful and fair means and only as necessary for our functions (APP 3). We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorized access, modification, or disclosure (APP 11).

To exercise your rights or make a privacy complaint, contact us at booking@martinsound.com. If your complaint is not resolved to your satisfaction, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or call 1300 363 992.

11. Your Rights: Canadian Residents (PIPEDA / Quebec Law 25)

Canadian residents have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec residents, Law 25 (Act respecting the protection of personal information in the private sector), including the right to access personal information we hold about you and the right to challenge the accuracy of that information. Quebec residents also have the right to data portability and to withdraw consent (where consent is the lawful basis). Contact us at booking@martinsound.com to exercise these rights.

12. Cookies & Tracking

The Service uses session cookies necessary for authentication and form security (CSRF protection). We do not use advertising or cross-site tracking cookies. No third-party analytics or advertising trackers are present on this platform. See our Cookie Policy for full details.

13. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately.

14. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date. Continued use of the Service after such changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact:

Martinsound, Inc.
1151 W. Valley Blvd
Alhambra, CA 91803, USA
booking@martinsound.com
(626) 773-8378