Version 1.0 · Effective 3 August 2026

This Privacy Policy explains how Bojana Music collects, uses, stores and shares personal information when you visit bojanamusic.com, place an order, download purchased files, receive a personalised music licence, or contact us.

Bojana Music is operated by Bojana Radovanovic as an individual business. We process personal information in accordance with the laws that apply to us, including the Law on Personal Data Protection of the Republic of North Macedonia.

1. Who we are

The controller responsible for your personal information is:

In this Policy, “Bojana Music”, “we”, “us” and “our” mean the controller above. “You” means a visitor, customer, licence holder, reviewer, or person who contacts us.

2. Geographic availability

We do not currently offer or accept orders from customers located in the European Union or European Economic Area (EU/EEA). The EEA consists of the EU Member States plus Iceland, Liechtenstein and Norway.

Our checkout is configured to prevent orders from EU/EEA locations. If an order is accepted because of a technical or payment-processing error, we may cancel the order, refund the payment and withhold digital delivery and licence activation.

The website may remain accessible from the EU/EEA. For visitors identified as located there, we do not use non-essential analytics or marketing cookies unless a visitor consents to them. Strictly necessary security and technical functions may still operate so the website can be displayed and protected.

3. Information we collect

Depending on how you use the website, we may collect the following categories of information:

• Identity and contact details: your full name, email address and, where required, postal or billing address.

• Business and licence details: business or professional name, licensed brand, licensed physical location and other information needed to issue a Commercial or Business licence.

• Order and transaction information: the product, track or collection purchased, licence type, price, currency, order number, order date, payment status and payment-provider transaction reference.

• Checkout and consent records: the versions of the Terms of Sale, Refund and Withdrawal Policy and applicable licence accepted at checkout; immediate-delivery acknowledgment; business-purchase confirmation; and date and time of acceptance.

• Personalised licence information: order and licence details used to create and retain your personalised licence PDF.

• Account and download information: account details where accounts are enabled, download availability, download attempts, access timestamps and related security records.

• Technical and usage information: IP address, approximate country, browser, device, operating system, referral source, session information and cookie choices.

• Communications: emails, support messages, refund requests, complaints and information you provide when contacting us.

• Reviews and public content: your display name, review text and other information you choose to submit for publication.

• Fraud and security information: information reasonably needed to identify suspicious payments, misuse, unauthorised access, chargebacks or breaches of our licences.

We do not receive or store your full payment-card number or PayPal password. Payment details are provided directly to PayPal or another payment provider shown at checkout.

4. How we obtain information

• Directly from you: when you place an order, create an account, accept checkout terms, submit a review or contact us.

• Automatically from your browser or device: through necessary cookies, server logs, security tools and, where permitted, analytics technologies.

• From service providers: for example, payment confirmation, transaction references, fraud-prevention signals or delivery status received from PayPal, hosting, email and file-delivery providers.

Some information is required to enter into or perform a contract with you. If you do not provide required identity, contact, billing, payment or licence information, we may be unable to accept the order, deliver the files, issue the licence or provide support. Analytics, reviews and any future marketing subscription are optional.

5. How we use your information and our legal bases

Where applicable law requires a legal basis, we rely on one or more of the following: performance of a contract, compliance with a legal obligation, our legitimate interests, or your consent.

• Order processing and digital delivery: to accept payment, confirm the order, deliver the files, generate the personalised licence and provide download access. Legal basis: contract.

• Customer support and remedies: to answer questions and handle delivery problems, defects, refunds, withdrawals, complaints and payment disputes. Legal basis: contract and our legitimate interest in supporting customers.

• Licence administration and enforcement: to retain proof of the licence granted, verify authorised use, investigate misuse and enforce our terms. Legal basis: contract and our legitimate interests in protecting our music and business.

• Accounting, tax and legal records: to maintain invoices, payment records and information required by law. Legal basis: legal obligation.

• Security and fraud prevention: to protect the website, download links, orders and customer accounts; identify suspicious activity; and prevent unauthorised payments or access. Legal basis: our legitimate interests and, where applicable, legal obligation.

• Analytics and website improvement: to understand general use of the website and improve its performance, only where the relevant cookies or technologies are permitted and consent has been given where required. Legal basis: consent.

• Reviews and public submissions: to review, publish and manage content you choose to submit. Legal basis: your request and our legitimate interest in presenting genuine customer feedback.

• Legal claims: to establish, exercise or defend legal rights and cooperate with courts or public authorities. Legal basis: legitimate interests and legal obligation.

When we rely on legitimate interests, we consider the nature of the information, the expected benefit, the effect on you and the safeguards available. We do not rely on legitimate interests where your rights and interests override ours.

6. Cookies and analytics

We use cookies and similar technologies for the following purposes:

• Strictly necessary technologies: required for the shopping cart, checkout, security, fraud prevention, account sessions, download access and cookie-preference storage. These technologies cannot be switched off through the consent tool where they are essential to the service you request.

• Analytics technologies: we use Google Analytics, measurement ID G-GZSBBLTZHJ, to obtain aggregated information about website use and performance. Analytics is activated only where permitted and after consent where required.

• Order-attribution information: our store software may record how an order reached the website. Where this function is not strictly necessary, it is treated as analytics and is subject to the applicable consent choice.

We use non-essential analytics and marketing cookies only where you have accepted them, and we do not use them for visitors in the EU/EEA who have not given consent. Blocking or declining non-essential cookies will not prevent you from viewing the website, although EU/EEA visitors cannot complete checkout.

You can accept, reject or change non-essential cookie choices through the cookie banner or the Cookie Settings control available on the website. Withdrawing consent does not affect processing that occurred before the withdrawal.

7. Payments

Payments are processed by PayPal or another payment provider displayed at checkout. You provide payment-account or card details directly to the payment provider through its secure systems. We receive information such as payment status, payer details needed for the order, transaction reference, currency and fraud or dispute information.

PayPal acts under its own privacy terms for activities it determines independently, including payment processing, regulatory compliance and fraud prevention. We encourage you to review the payment provider’s privacy information before paying.

8. Who we share information with

We do not sell or rent your personal information. We share it only where reasonably necessary with:

• Payment providers, including PayPal, to process payments, refunds, disputes and fraud checks.

• Website hosting, security and file-delivery providers, including the infrastructure used to host bojanamusic.com and Cloudflare services, including Cloudflare R2, to store and securely deliver purchased files.

• Website and store software providers, including the WordPress and WooCommerce ecosystem, where their services process information needed to operate or secure the store.

• Email and communications providers used to send order confirmations, download information, personalised licences and support replies.

• Analytics providers, including Google, only for analytics that are lawfully enabled under your cookie choice and geographic settings.

• Professional advisers, such as accountants, lawyers or technical consultants, where reasonably necessary and subject to confidentiality obligations.

• Courts, regulators, tax authorities, law-enforcement bodies or other public authorities where disclosure is legally required or reasonably necessary to establish or defend legal claims.

Some recipients process information only on our instructions, while others, such as PayPal for certain payment activities, act as independent controllers under their own legal obligations and privacy terms.

9. International processing and transfers

Bojana Music is established in the Republic of North Macedonia. If you are located in another country, your information will be processed in North Macedonia because that is where we operate the business and administer orders and licences.

Some service providers may also process or store information in other countries, including the United States or locations in which they or their subcontractors operate. Privacy and data-protection laws may differ between countries.

Where applicable law requires safeguards for an international transfer, we use the contractual, organisational or other lawful safeguards made available by the relevant provider and required for the transfer. You may contact us for more information about the safeguards relevant to your information, subject to confidentiality and security restrictions.

10. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including the following criteria:

• Order, invoice, payment and tax records: for the period required by applicable accounting, tax and legal obligations.

• Licence and checkout-consent records: for as long as the licence may be relied upon and for the period in which related legal claims may be established, exercised or defended. Records relating to a perpetual licence may therefore be retained for a long period.

• Business licence records: throughout the licence term and afterwards for evidence of the rights granted, prior authorised uses, payment and potential legal claims.

• Download, security and fraud records: only for as long as reasonably needed to provide access, investigate incidents, prevent misuse and protect legal rights.

• Support correspondence and complaints: until the matter is resolved and for a reasonable period afterwards, or longer where the communication relates to an active licence, dispute or legal obligation.

• Analytics information: according to the retention setting configured in the analytics service, after which it is deleted or aggregated where the service supports this.

• Reviews and public content: while the review remains published or until it is no longer reasonably needed, subject to legal record-keeping requirements.

• Consent withdrawal or unsubscribe records: as long as reasonably necessary to honour the choice and demonstrate compliance.

When information is no longer needed, we delete it, anonymise it, or securely restrict it where deletion is not immediately possible because of backups or legal requirements.

11. How we protect information

We use reasonable technical and organisational safeguards appropriate to the nature of the information and the size of the business. These measures include:

• HTTPS encryption for the website, checkout and account areas.

• Secure, non-public and time-limited download links rather than permanent public file URLs.

• Restricted administrative access to order, customer, licence and download information.

• Use of reputable payment, hosting, security, email and file-delivery providers.

• Backups and recovery measures for essential order and licence records.

• Security monitoring and reasonable steps to prevent fraud, unauthorised access and file redistribution.

No internet transmission or storage system is completely secure. If we become aware of a personal-data incident, we will investigate it and take notification or corrective steps required by applicable law.

12. Your privacy rights

Depending on the law that applies to you, you may have the right to:

• receive information about how your personal information is processed;

• request access to personal information we hold about you;

• request correction of inaccurate or incomplete information;

• request deletion where there is no overriding legal reason to keep the information;

• request restriction of certain processing;

• object to processing based on legitimate interests;

• receive certain information in a portable format where the legal conditions are met;

• withdraw consent at any time where processing is based on consent, without affecting earlier lawful processing; and

• submit a complaint to a competent personal-data protection authority.

To exercise a right, email info@bojanamusic.com and provide enough information for us to identify the relevant records. We may request reasonable proof of identity before disclosing, changing or deleting personal information.

We will respond within the period required by applicable law, including within 15 days where the law of the Republic of North Macedonia requires that period. A request may be limited or refused only where permitted by law, including where retention is required for tax, accounting, licence evidence, fraud prevention or legal claims.

You may submit a complaint to the Personal Data Protection Agency of the Republic of North Macedonia:

• Address: Blvd. Goce Delchev No. 18, MRTV building, floor 14, PO Box 417, 1000 Skopje, Republic of North Macedonia.

• Email: info@privacy.mk

• Telephone: +389 2 3230 635

13. Automated decision-making

Bojana Music does not make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects. Payment and security providers may use automated systems to detect fraud, verify payments or protect accounts under their own privacy terms and legal obligations.

14. Marketing communications

We do not currently operate a marketing newsletter. If we introduce one, we will send marketing emails only where you have actively requested them or another lawful basis applies. Marketing consent will be separate from the purchase process, and every marketing email will provide an unsubscribe method. We will update this Policy to identify any marketing provider that processes subscriber information.

15. Children

The store is intended for adults aged 18 and over. We do not knowingly permit a person under 18 to place an order without the involvement and lawful authority of a parent or legal guardian. If you believe that a minor has provided personal information without appropriate authorisation, contact us so we can investigate and take appropriate action.

16. Reviews and content you submit

If you submit a product review or other content for publication, we may display the review, the name or display name you provide, and related product information. Do not include payment information, private contact details, health information or other sensitive personal information in a public review.

We may moderate, remove or retain records of submitted content where reasonably necessary to prevent fraud, comply with law, resolve a dispute or enforce our terms.

17. Links and third-party services

The website and our emails may link to PayPal, streaming platforms, social networks or other third-party services. Those services operate under their own privacy policies. This Policy does not control how an independent third party processes information when you use its website, application or account.

18. Changes to this Policy

We may update this Policy to reflect changes in the website, providers, legal obligations, security practices or the way we process information. The current version and effective date will be shown at the top of the Policy.

The current version applies to our current processing activities. We retain appropriate records of earlier versions and the privacy information made available when an order was placed. If a material change requires notice or consent under applicable law, we will provide that notice or request consent before using existing information in the new way.

19. Contact

For privacy questions, requests or complaints, contact:

Bojana Radovanovic, trading as Bojana Music
Mramorec 43 b, 1000 Skopje, Republic of North Macedonia
Email: info@bojanamusic.com
Website: bojanamusic.com

© 2026 Bojana Radovanovic, trading as Bojana Music. All rights reserved.