Privacy policy

Privacy Policy

Last updated: 30th October 2026

This policy explains what personal information HCN Designs LLC, doing business as The MIDI Maker ("we", "us"), collects when you visit themidimaker.com, buy from us, contact us or use The Aviary, and how we use and protect it.

1. Who is responsible for your data

HCN Designs LLC (d/b/a The MIDI Maker), 5900 Balcones Dr STE 100, Austin, TX 78731, USA, is the data controller. For any privacy question or request, email Support@TheMIDIMaker.com.

2. What we collect

Information	Examples	Where it comes from
Order details	Name, billing and shipping address, email, phone number, items bought, order history	You, at checkout
Payment details	Card or wallet details	You, at checkout. Handled by our payment providers; we never see or store full card numbers
Support messages	Emails, photos and details you send about an order or product	You
Custom build details	The layout and options you request	You
Reviews	Your name, review and photos	You, if you leave a review
Newsletter	Your email address	You, if you sign up
Device and browsing data	IP address, browser, device, pages viewed, how you reached our site	Collected automatically with cookies and similar tools
Aviary account	Email address, encrypted password, saved presets	You, only if you create an account

3. How we use it and our legal basis

For visitors in the UK and EU, the legal basis for each use is in brackets.

To take, ship and support your order, handle returns and warranty claims, and send order emails (performing our contract with you).
To calculate and collect duties and taxes, keep tax and accounting records, and meet customs and product-safety rules (legal obligation).
To prevent fraud and keep the store secure (legitimate interests).
To understand how the site is used and improve it (your consent, where required).
To show you our ads on other sites and measure them (your consent, where required).
To send newsletters and offers, if you sign up. You can unsubscribe from any email (consent).
To run your Aviary account and cloud backups (contract).

We don't sell your personal information, and we don't make decisions about you based solely on automated processing that have legal or similarly significant effects. Shopify uses some automated checks to block fraudulent payments.

We share personal information only with service providers who help us run the business, and only what each needs:

Store and checkout: Shopify (including Shop Pay and Shopify Payments), our payment providers, Zonos (duties and taxes), and Product Customizer (custom build options).
Shipping: carriers such as UPS, USPS and DHL, and customs authorities in the destination country.
Reviews: Judge.me.
Analytics and advertising: Google (Analytics, Ads, Merchant Center) and Meta (Facebook and Instagram).
The Aviary and order records: Supabase (account, preset and order record storage), Sentry (anonymous crash reports) and Plausible (cookieless analytics).
Advisers and authorities: our accountants and legal advisers, and authorities when the law requires it, for example to respond to a court order.

5. Cookies

We use cookies and similar tools to run the store (for example your cart and checkout) and, with your consent where required, for analytics and advertising. Visitors in the UK and EU can accept or reject non-essential cookies in the cookie banner, and change their choice at any time with the cookie settings link at the bottom of every page. You can also block cookies in your browser, though parts of the store may stop working.

6. International transfers

We are based in the United States, and our service providers store data in the US and other countries. When we transfer data from the UK or EU, we rely on safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or the EU–US Data Privacy Framework where the provider is certified.

7. How long we keep it

Order, tax and customs records: as long as tax and accounting law requires, usually up to 7 years.
Support emails: up to 3 years after your last contact, or longer if needed for a warranty claim.
Newsletter: until you unsubscribe.
Aviary account and presets: until you delete your account in Settings → Delete Account, which removes them immediately.
Analytics and advertising cookies: up to 2 years, unless you delete them sooner.

8. Your rights

Depending on where you live, you can ask us to:

give you a copy of your personal information, or send it to another company;
correct it;
delete it;
restrict or stop using it, including for direct marketing;
withdraw your consent at any time, without affecting earlier use.

California residents also have the right to know what we collect and to limit its use, and to opt out of the "sale" or "sharing" of personal information. We don't sell your information for money, but our advertising cookies may count as "sharing" under California law. You can opt out using the cookie settings link at the bottom of every page, or by turning on Global Privacy Control in your browser. Residents of other US states with privacy laws have similar rights.

To make a request, email Support@TheMIDIMaker.com. We'll reply within one month, and we won't treat you differently for using your rights. We may need to confirm your identity first.

9. Security

We use reputable providers with encryption in transit and at rest, and limit access to personal information to those who need it. No system is completely secure. To report a security issue, see themidimaker.com/pages/security.

10. Children

Our store and The Aviary are not aimed at children under 16, and we don't knowingly collect their personal information.

11. Complaints

If you're unhappy with how we've handled your information, please contact us first. You also have the right to complain to your data protection authority, for example:

United Kingdom: Information Commissioner's Office, ico.org.uk
France: CNIL, cnil.fr
Germany: the data protection authority for your state, listed at bfdi.bund.de
Netherlands: Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl

12. Changes

We'll update this policy when our practices change and change the "Last updated" date. For significant changes, we'll let account holders and subscribers know by email.

13. Contact

HCN Designs LLC (d/b/a The MIDI Maker), 5900 Balcones Dr STE 100, Austin, TX 78731, USA · Support@TheMIDIMaker.com