General Data Protection Regulation (GDPR) Compliance

Effective Date: May 26, 2025

At Broken Duck Media Co., Ltd. (“we,” “our,” or “us”), protecting your privacy and personal data is a top priority. This page outlines how we comply with the European Union’s General Data Protection Regulation (GDPR) when you use Tchaikovsky, our AI music composition platform.

1. Data We Collect

We collect personal data necessary to provide and improve our services, including but not limited to:

• Identification information (e.g., name, email address)
• Account and billing information
• Usage data, including interactions with our platform
• Technical data such as IP address and browser details

2. Your GDPR Rights

As a resident of the European Union, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: Also known as the “right to be forgotten,” you can ask us to delete your personal data under certain conditions.
• Right to Restrict Processing: You may request us to limit how we use your data.
• Right to Data Portability: You can request your personal data in a portable format.
• Right to Object: You may object to the processing of your personal data for marketing or other purposes.
• Right to Withdraw Consent: If processing is based on your consent, you can withdraw it at any time.

3. How to Exercise Your Rights

To exercise your rights, please contact us at the email or postal address provided below. We may require verification of your identity to protect your data privacy.

4. Data Protection Measures

We employ robust technical and organizational measures to safeguard your personal data, including encryption, access controls, and regular security assessments.

5. Data Transfers Outside the EU

Some of your personal data may be processed or stored outside the European Economic Area (EEA), including in Thailand and the United States. We ensure appropriate safeguards are in place to protect your data in accordance with GDPR.

6. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in our Privacy Policy or as required by law.

7. Changes to This GDPR Policy

We may update this page to reflect changes in regulations or our practices. We encourage you to review it periodically.

8. Contact Information

For any questions or requests related to GDPR, please contact:

Email: privacy@brokenduckmedia.com

Postal Address: Broken Duck Media Co., Ltd., Chiang Mai, Thailand