Legal
Privacy policy.
Version 2026-10-14. This policy explains, in plain words, which personal data TwoDeux collects when you use your client account, why, who can see it, and what your rights are.
1. Who we are
The data controller is TwoDeux, Rue de la Création 2, 1000 Brussels, Belgium — hello@twodeux-studio.be. We process your data in accordance with the EU General Data Protection Regulation (GDPR) and Belgian data protection law.
2. What we collect
We only collect what we need to run your projects. When you create an account and use the client space, the following information is collected:
| Category | Data | Source |
|---|---|---|
| Identity | First name, last name, artist name | You, at sign-up |
| Contact | Email address (including the one used to create the account), phone number, preferred language | You, at sign-up |
| Account security | Your password, stored only as an irreversible hash — nobody, including us, can read it | You |
| Account recovery | The two security questions you picked and your answers — the answers are stored only as irreversible hashes, like your password | You |
| Consent | Date and version of the privacy policy you accepted | Automatic |
| Connection data | IP address, approximate location derived from it (city, country), operating system and browser, date and time of sign-up and of each sign-in | Automatic |
| Projects | Booking details (concept, references, locations, dates, budget), appointments, deposit status, messages, your choice of result | You and our team |
| Files | Audio files (e.g. .wav), documents and images you upload to a project | You |
| Loyalty | Loyalty points balance and history, discounts and rewards granted to you | Our team / automatic |
| Activity log | A record of important actions on your account (sign-ins, bookings, uploads, changes) for security purposes | Automatic |
We do not collect sensitive data (health, religion, political opinions…) and we never ask for your bank or card details through this platform.
3. Why we use it
- To manage your projects — booking, planning, filming, delivering your video and tracking its progress (performance of our contract with you).
- To contact you — by phone, email or in-app notification, exclusively about your account, your projects and your rewards.
- To protect your account and our platform — detecting suspicious sign-ins, blocking abuse, keeping an audit trail (our legitimate interest in security).
- To run the loyalty programme — crediting points for completed projects and granting rewards.
- To meet legal obligations — for example accounting and tax rules for paid projects.
We do not use your data for advertising, profiling or automated decision-making.
4. Who can see your data
Only TwoDeux administrators have access to your personal data, and they reserve the right to use it solely to contact you and to manage your projects. Other clients can never see your information or your files.
A small number of technical service providers act strictly on our instructions and cannot use your data for their own purposes:
- our web hosting provider, which stores the platform and its database;
- ipwho.is, which receives your IP address — and nothing else — to return an approximate city and country at sign-up and sign-in. Local network addresses are never sent.
We may disclose data only if a court or public authority legally requires it.
5. What we will never do
- Sell, rent or trade your personal data.
- Disclose your data or your files to third parties for marketing or any other purpose.
- Publish your unreleased music or footage without your explicit permission.
- Send you advertising from other companies.
6. How long we keep it
- Account data: as long as your account is active, then deleted 3 years after your last activity.
- Uploaded files: until your project is delivered, then up to 12 months so you can ask for them again.
- Connection data and activity logs: 12 months.
- Project and payment records: as long as required by Belgian accounting law (up to 7 years).
7. How we protect it
Passwords are hashed, uploaded files are stored outside the public website and are only downloadable by you and our administrators, forms are protected against forgery, repeated failed sign-ins are blocked, and every sensitive action is logged.
9. Your rights
You can at any time ask us to:
- access your data and receive a copy of it;
- correct inaccurate data — your profile details are managed by our team, just write to us;
- delete your account and data (unless we must keep some of it by law);
- restrict or object to certain processing;
- receive your data in a portable format.
Write to hello@twodeux-studio.be; we answer within one month. If you are not satisfied, you can lodge a complaint with the Belgian Data Protection Authority — Autorité de protection des données / Gegevensbeschermingsautoriteit, Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be.
10. Changes & contact
If this policy changes in a meaningful way, we will notify you in your client space before the change applies. Questions? Contact us at hello@twodeux-studio.be.