Last updated: 27 October 2026
We have tried to keep this in plain English. If anything is unclear, email info@mixgenie.co and we will explain it.
1. Who we are
MixGenie is a trading name of Maxima Music Group Ltd, a company registered in England and Wales, company number 12843015, registered office 20-22 Wenlock Road, London N1 7GU, United Kingdom. SongGenie is a trading name of the same company. The business is run by Max Honsinger.
When you send us information through this website, Maxima Music Group Ltd is the "data controller" for it, which means we decide what happens to it and we are responsible for looking after it. We are not required to appoint a Data Protection Officer and have not done so.
Contact: info@mixgenie.co, or by post to the address above. SongGenie and MixGenie are both trading names of the same company, so that address reaches the same person either way.
We are registered with the Information Commissioner's Office (ICO) and pay the annual data protection fee, as required of UK organisations that handle personal information.
2. What this policy covers
This policy covers the information we collect through mixgenie.co, through our before-and-after audio player at listen.mixgenie.co, and through the emails, files and payments that follow from either of them when you enquire about or hire us.
song-genie.com has its own privacy policy, and so does Fiverr, which controls the information on its own platform. The same goes for any other website we link to.
3. The short version
- We collect what you type into our forms, the files you send us, and some technical information about your visit.
- We use it to reply to you, do the work you hire us for, take payment, keep the records the law requires, and keep track of enquiries so none get lost.
- Every form submission is emailed to us and copied into our customer database (a CRM). Section 4 says what goes in it.
- Analytics and advertising cookies are off unless you switch them on with the cookie banner.
- We never sell your information. Several of the companies we use are in the United States, and section 7 explains the safeguards.
4. What we collect, and where it comes from
The forms on this site
The contact forms (on the homepage, the contact page and the Special Sauce page) ask for your name, your email address and your message. The homepage and contact page forms also have an optional subject line.
The "send us your song" brief asks for your name (or your artist or label name), your email address, the name of the song or project, an optional deadline, what you hope to get out of it, and anything you would like us to know about you.
The free mix check asks for your name, your email address, a link to your song (or a tick to say you are uploading the file instead, see "Files you send us" below) and anything you would like us to listen out for.
Every form also has an optional box asking whether you would like the occasional mixing tip and MixGenie news. It is never ticked for you and it is never required. We only add you to our mailing list if you tick it (section 10).
Alongside what you type, every submission also gives us:
- The country you are connecting from. Cloudflare, who host this site, work it out from your connection and pass it to us. It is not a cookie and nothing is stored on your device. We use it to know which marketing rules apply to you.
- A record of your marketing choice: whether you ticked the box, the exact wording you were shown, when, and on which form.
- The result of an anti-spam check. Cloudflare Turnstile checks that you are a person, which involves Cloudflare processing your IP address and signals from your browser. We do not store your IP address ourselves and it does not appear in the email we receive.
- An advertising click ID, if there is one. If you arrived by clicking a Google or Meta advert, the advert adds a code (gclid or fbclid) to the page address. If that code is in the address of the page you send a form from, it goes with your submission so we know which advert brought you. If you have accepted advertising cookies we also remember it as you move between pages (section 9).
Where your submission goes
Your submission is turned into an email and sent to us by Resend, an email delivery service. A copy is also saved in our customer database (CRM), which runs on HighLevel, so that enquiries and the projects that come out of them do not get lost in an inbox.
What goes into the CRM: your name and email address, what you wrote, which form you used, your country, your marketing choice (with the wording, date and form), the advert click ID if there was one, and tags that label the record. A free mix check request also creates an entry in our sales pipeline so we remember to follow it up. We use one customer database for MixGenie and SongGenie, so if you have contacted both, your details may sit on the same record. Nothing is stored on this website itself.
Files you send us
When we need your audio, you send it through a Dropbox File Request link. Dropbox's upload page may ask for your name and email address, and no Dropbox account is needed. The upload arrives in our Dropbox account and from there onto our own storage. You can also send files by email or WeTransfer.
Audio can contain personal information: your voice, other performers' voices, lyrics, spoken notes and file names. We only use it to do the work you asked for, or to give you a free mix check. Please do not send us anything more sensitive than your music needs.
Payments
At the moment payment is taken outside this website. Once we have talked and agreed what you need, we send you a Stripe payment link or an invoice. On a payment link you enter your card details on Stripe's own secure page, so we never see or store your full card number. Stripe tells us your name, email address, what you paid for, how much, and whether the payment went through. If you pay with a digital wallet, that provider handles your information under its own privacy policy. If you pay by bank transfer, your bank tells us your name and the amount.
We keep payment and invoice records for our accounts and tax. Stripe also uses some of the payment information for its own fraud prevention and legal duties, as a controller in its own right, under its privacy policy.
Emails and conversations
If you email us, your message is kept in our email system, Google Workspace.
Your visit to the website
Cloudflare, which hosts the site, processes technical information such as your IP address and browser details in order to deliver pages and protect the site from attacks. If you accept analytics cookies, Google Analytics also collects information about your visit (section 9).
Software tools, including AI
We use software tools to help run the business, including an AI assistant that helps us organise enquiries, schedule jobs and draft replies. They can see what is in an enquiry, brief or email, such as your name, email address and what you wrote. They help us stay organised; the decisions about you and your work are made by a person.
From other people
Sometimes someone else gives us your details: for example a manager or label booking work for you, or a bandmate sending us your recordings. We use that information only for the work in question.
5. Why we are allowed to use it
UK law requires a lawful basis for each use of your personal information. Ours are contract (we need it to do what you have asked us to do), legal obligation, legitimate interests (a genuine business reason that does not override your interests) and consent.
| What we do | What we use | Lawful basis |
|---|---|---|
| Reply to enquiries and free mix checks | Form answers, contact details, files or links you send | Legitimate interests: replying to people who have deliberately contacted us. Where you are asking about buying, also steps taken at your request before a contract |
| Do the work you hire us for, take payment, and keep accounting and tax records | Contact details, order details, files, messages, payment and invoice records | Contract, and legal obligation for the accounting and tax records |
| Keep track of enquiries and clients in our CRM | Contact details, form answers, marketing choice | Legitimate interests: running the business in an organised way |
| Protect our forms from spam | IP address and browser signals, through Cloudflare Turnstile | Legitimate interests: keeping the site and our inbox usable |
| Send marketing emails | Name, email address, country, marketing choice | Consent (you ticked the box). For people outside the UK and EEA who did not tick it, legitimate interests (see section 10) |
| Measure visits to the website | Pages viewed, device and browser, approximate location | Consent, through the cookie banner |
| Tie an enquiry to the advert that brought you | Advert click ID and campaign tags | Consent for remembering them as you browse. Legitimate interests for a code already in the address of the page you send a form from |
| Feature released work in our portfolio | Song title, artist name, link to the release | Legitimate interests: showing our work. You can object at any time. Before-and-after audio and unreleased work only with your permission |
| Use software tools, including AI, to organise enquiries and draft replies | Enquiry, brief and email content | Legitimate interests: running a small business efficiently |
| Handle complaints and legal claims | Anything relevant to the issue | Legitimate interests, and legal obligation where it applies |
Where we rely on legitimate interests we have weighed our interests against yours, and you have the right to object (section 13).
6. Who we share it with
We never sell your personal information. We share it only with the organisations below, and only as much as each one needs.
Service providers who act on our instructions
| Who | What they do for us | Where |
|---|---|---|
| Cloudflare, Inc. | Hosts this site and listen.mixgenie.co, runs our server code, delivers pages, runs the anti-spam check (Turnstile) and keeps the site secure | United States (global network) |
| Plus Five Five, Inc. (Resend) | Turns your form submission into an email and delivers it to us | United States |
| HighLevel LLC and LeadConnector LLC | Run our customer database (CRM): contact records, notes, tags, the sales pipeline and our marketing emails | United States |
| Google (Google Workspace) | Our business email | United States and elsewhere |
| Dropbox International | Receives the audio files you upload through our File Request link | United States / Ireland |
| BunnyWay d.o.o. (Bunny Fonts) | Serves the fonts this site is set in. They publish a no-logging, no-tracking policy | European Union |
| Software and AI tools | Help us organise enquiries, schedule jobs and draft replies (see section 4) | Varies by tool |
Organisations that also use information for their own purposes
| Who | Why they receive it |
|---|---|
| Stripe | Payment information, for its own fraud prevention and to meet its financial regulatory obligations, when you pay by payment link |
| Google (Analytics) | Information about your visit, only if you accept analytics cookies (section 9). Google's privacy policy is at policies.google.com/privacy |
| Our accountant, professional advisers, HMRC and other authorities | Where needed for tax, legal advice, or when the law requires it |
| A buyer of the business | If the business or its assets were ever sold, your information could pass to the new owner, who would have to handle it in line with this policy |
Content embedded on our pages
Some pages show content served by other companies. When that content loads, the company providing it can see your IP address and browser details, and may store its own cookies. This content is not behind the cookie banner, so it loads whatever you chose there. Section 9 says what we found when we checked.
| Content | Where on the site | Provider |
|---|---|---|
| Client reviews widget | Contact page | Trustugc (trustugc.com) |
| Video | Mastering page | YouTube in its privacy-enhanced mode (youtube-nocookie.com), which is part of Google |
| B'n'A before-and-after player | Homepage, mastering page, contact page | Our own player at listen.mixgenie.co, hosted by Cloudflare. Its audio comes from Cloudflare's file storage, apart from the full production examples, which are still served from our previous website host's file storage (on Amazon S3) until we move them |
Trustugc is a small outside service and we do not control what it collects. The pages work without them if you block them in your browser.
7. Where your information goes
We are a UK business, and UK data protection law applies to everything we do with your information wherever you live. Many of our clients live in the United States, so to be plain about it: your rights in section 13 apply to you either way.
Several of the companies in section 6 are based in the United States, and UK law only allows personal information to go outside the UK with proper safeguards. These are the ones we rely on:
- The UK Extension to the EU-US Data Privacy Framework, where the US company is certified under it. HighLevel states that HighLevel LLC and LeadConnector LLC are certified, and Cloudflare states that it complies.
- The UK Addendum to the EU Standard Contractual Clauses, included in the provider's data processing terms. Resend and Cloudflare include it in theirs, and HighLevel includes it as well as its certification.
- UK adequacy regulations, which cover the European Economic Area (Bunny Fonts).
For the other providers in this policy (Google, Dropbox, Stripe, Trustugc and our software tools) we rely on whatever transfer arrangements each of them publishes in its own terms. If you would like the specifics for any of them, or a copy of the safeguards, email us and we will point you at the relevant documents.
8. How long we keep it
| Information | How long |
|---|---|
| Enquiries and free mix checks that do not lead to an order | The emails stay in our inbox for as long as we are in touch, and for as long afterwards as we may reasonably need them |
| Your record in our CRM | Until you unsubscribe from our emails or ask us to remove it |
| Client records: contact details, briefs, correspondence, invoices and payment records | Six years from the end of the company financial year they relate to, because HMRC requires company records to be kept that long |
| Your audio files, and the mixes and masters we deliver | Indefinitely, as a backup, unless you ask us to delete them. That is deliberate: if you come back in three years having lost your own copy, we still have it |
| Marketing choice and unsubscribe records | For as long as we send you marketing. After you unsubscribe we keep your email address, and nothing else, so we never email you marketing again |
| Google Analytics data | For the period set in our Google Analytics account, which Google applies |
You can ask us to delete your information sooner (section 13). We will, unless we have to keep it, for example for tax records.
9. Cookies and similar technologies
The law here is PECR (the Privacy and Electronic Communications Regulations), which is separate from UK GDPR. It covers more than cookies: anything that stores information on your device or reads it back, including local and session storage and codes added to web addresses.
Our approach. When you first visit, a banner asks for your choice. Anything that is not strictly necessary stays switched off until you say yes. Rejecting is as easy as accepting, and you can change your mind at any time with the "Cookie settings" link at the bottom of every page.
Strictly necessary (always on)
These need no consent because the site cannot work or stay secure without them. They are remembering your cookie choices, so we do not ask on every page, and the anti-spam check on our forms. Cloudflare says the signals Turnstile uses are strictly necessary for detecting and blocking bots, and when we checked we found it keeps one small item in your browser's local storage while it works (named in the table below). It sets no cookies.
Analytics (off unless you agree)
Google Analytics tells us how many people visit, which pages they read, roughly where they are and what device they use. It only loads if you accept analytics cookies. We use Google's Consent Mode in its "basic" setting, which means nothing from Google's tag loads until you have chosen.
Advertising (off unless you agree)
If you arrive by clicking one of our adverts, the link carries a code (gclid for Google or fbclid for Meta), and our own advert and email links may carry campaign tags (utm_ codes). If you accept advertising cookies, we remember these while the browser tab stays open, so a form you send later can be tied to the advert that brought you. The click ID goes with the form. The campaign tags are remembered but are not sent with any of our forms at the moment.
If you accept both analytics and advertising, Google's tag is also told that advertising use is allowed. We do not send Google any of your enquiry details, and what Google does with that signal is governed by its own terms and the settings of our Analytics account.
If you do not accept advertising cookies but send a form from a page you reached through an advert, the code in that page's address still goes with the form. That stores nothing on your device.
Embedded content
The embedded content listed in section 6 is not controlled by the cookie banner, so it loads whatever you chose there. On 27 October 2026 we visited the pages that carry it in a fresh Chrome browser, without touching the banner or pressing play, to see what it stores:
- The YouTube video on the mastering page does not load until you press play: until then it is just a button on our page, and nothing from YouTube loads at all. Once you press play, YouTube (in its privacy-enhanced mode) sets no cookies but does store two small items in your browser's local storage. They are named in the table below.
- The Trustugc reviews widget and our own B'n'A players stored nothing on your device when the page loaded and set no cookies. The B'n'A players keep an anonymous count of how often each song is played and switched, with nothing about you attached: no cookie, no IP address, no identifier.
If you press play on any of them they may store more, under their own policies. If you would rather not have the YouTube items stored, just don't press play on that video: the rest of the page works without it.
What we set on your device
| Name | What it does | How long it lasts | When it is set |
|---|---|---|---|
| mgConsent (local storage, set by mixgenie.co) | Remembers your cookie choices: analytics yes or no, advertising yes or no, and when you chose | Until you clear your browser's stored data or change your choice | When you make a choice on the banner. Strictly necessary |
| cf.turnstile.u (local storage, set by Cloudflare Turnstile) | Part of Cloudflare's anti-spam check on our forms | As far as we can tell, until you clear your browser's stored data | On pages with a form, when the spam check loads. Strictly necessary |
| _ga (cookie, set by Google Analytics) | Tells visitors apart, for statistics | Up to 2 years | Only after you accept analytics |
| _ga_ followed by our Analytics ID (cookie, set by Google Analytics) | Keeps track of your session | Up to 2 years | Only after you accept analytics |
| gclid, fbclid, utm_source, utm_medium, utm_campaign, utm_content, utm_term (session storage, set by mixgenie.co) | Remembers which advert or campaign brought you, so a form you send later can be tied to it | Until you close the tab | Only after you accept advertising, and only for codes that were in the address you arrived on |
| ytidb::LAST_RESULT_ENTRY_KEY and yt-icons-last-purged (local storage, set by YouTube) | Used by the YouTube player | Until you clear your browser's stored data | Only if you press play on the video on the mastering page. Not controlled by the banner |
The Google Analytics cookie names and lifetimes are from Google's own documentation. The other names are what we found when we checked on 27 October 2026. Cookies and storage can change when a provider updates its code, so if you spot something not listed here, please tell us.
10. Marketing emails
We send occasional emails about our services and useful articles. We send them through HighLevel.
Who gets them:
- If you tick the marketing box on one of our forms, we email you on the basis of your consent.
- If you live in the UK or the European Economic Area and did not tick the box, we will only reply to what you asked us about. We will not add you to marketing.
- If you live elsewhere and did not tick the box, we may send you occasional marketing emails where the law where you live allows it. For example, US law allows this as long as every email includes an unsubscribe link and our postal address. Our lawful basis under UK law is legitimate interests, and you can stop them at any time.
Stopping them. Every marketing email has an unsubscribe link. You can also reply asking us to stop, or email us. We stop promptly, and we keep your email address only to make sure we never email you marketing again. Unsubscribing from marketing does not stop emails about work you have ordered.
Email tracking. Our marketing emails may tell us whether an email was opened and which links in it were clicked. You can stop that at any time by unsubscribing.
Every marketing email includes our postal address: Maxima Music Group Ltd, 20-22 Wenlock Road, London N1 7GU.
11. Automated decisions
We do not make decisions about you by purely automated means that have legal or similarly significant effects.
One simple automatic rule runs when you send a form: your country and whether you ticked the marketing box decide how your record in our CRM is tagged, so we can see at a glance what you have agreed to. It does not score you or build a profile of you.
12. Keeping your information secure
We use reputable providers, serve our pages over HTTPS, and limit access to your information to the people running the business. No system is perfectly secure, but if something goes wrong that puts your information at risk, we will tell you and the ICO where the law requires it.
13. Your rights
You have the right to:
- ask for a copy of the personal information we hold about you;
- have it corrected if it is wrong or incomplete;
- have it deleted;
- ask us to restrict how we use it;
- receive it in a portable format, in some circumstances; and
- withdraw your consent at any time, where we rely on consent. This does not affect anything we did before you withdrew it.
You also have the right to object. Where we rely on legitimate interests you can object at any time and we will stop unless we have compelling grounds to continue. If you object to marketing, we will always stop. The ICO asks businesses to present this right clearly and separately from the others, which is why it has its own paragraph.
To use any of these rights, email info@mixgenie.co. It is free. We will reply within one month, or tell you within that month if we need longer because the request is complex. We may ask you to confirm your identity first.
14. Complaints
If you are unhappy with how we have handled your information, please tell us first at info@mixgenie.co. We will acknowledge your complaint within 30 days, look into it without undue delay, and tell you the outcome.
You also have the right to complain to the Information Commissioner's Office, who regulate this in the UK, at ico.org.uk/make-a-complaint. Their contact details are at ico.org.uk/global/contact-us. You do not have to complain to us first.
15. Children
Our services are for adults. If you are under 18, please ask a parent or guardian to place any order for you. This website is not aimed at children under 13, and we do not knowingly collect their information. If you think a child has given us their information, email us and we will delete it.
16. Changes to this policy
We will update this policy before we switch on any new feature that changes how we handle your information, and we will change the date at the top when we do. If a change significantly affects how we use information we already hold about you, we will tell you directly before it takes effect.