Privacy policy

Last updated: 9 October 2026

This Privacy Policy explains how VOX SAMPLES PTY LTD (ABN 23 681 928 889), trading as Vox Samples ("Vox Samples", "we", "us", "our"), collects, uses, shares and protects personal information when you visit voxsamples.com, buy or download our plug-ins, sample packs and other products, activate or use our software, receive our emails or ads, or otherwise deal with us (together, the "Services").

We are based in Australia and handle personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where they apply to you, we also follow the EU and UK General Data Protection Regulation ("GDPR") and US state privacy laws such as the California Consumer Privacy Act ("CCPA"). For GDPR purposes, Vox Samples is the controller of your personal information.

1. Who to contact

VOX SAMPLES PTY LTD
447 Collins Street, Level 5, Melbourne VIC 3000, Australia
Email: contact@voxsamples.com

Write to us at this address for any privacy question or request, including the rights described in section 10.

2. The personal information we collect

Information you give us

  • Contact and account details: your name, email address and, if you give them, billing address and phone number. Also the details you use to sign in to your Vox Samples account.
  • Order details: the products you buy or download, order numbers, amounts, discount codes and payment confirmation. Card and bank details are handled by our payment processors (such as Shopify Payments, Shop Pay and PayPal). We do not receive or store your full card number.
  • Support and feedback: what you write to us, including any reviews, testimonials or survey answers.
  • Marketing preferences: whether you have agreed to receive marketing emails or browser notifications from us.

Information from our software (plug-in activation)

Our paid plug-ins need to be activated before you can use them. When you activate a plug-in, it sends the following to our activation server over an encrypted connection:

  • your email address and the activation details you enter;
  • the product and version;
  • your computer's operating system;
  • a machine identifier generated from your computer.

Our server also receives your IP address and the time of the request. The plug-in may check its licence online from time to time. We use this information only to:

  • confirm that you hold a licence;
  • let you use the product on your own computers;
  • remove access after a refund;
  • prevent piracy and misuse;
  • help you when activation goes wrong.

The plug-ins do not send us the audio you process, your projects or your files. If you sign in to our desktop app or website with an email code, we also store your account, the products you own, any trials you start, and the devices you are signed in on, so that you can download and manage your products.

Information collected automatically

When you visit our website, open our emails or see our ads, we and our partners collect information automatically using cookies, pixels, tags, local storage and similar technologies ("Cookies"). This includes:

  • your device and browser type;
  • your IP address and approximate location;
  • the pages you view and the products you look at, add to cart or buy;
  • the website or ad that referred you;
  • whether you opened or clicked an email.

See section 4 for the tools involved and how to control them.

Information from other sources

  • Shopify, which runs our store, and our payment processors.
  • Advertising and analytics partners (such as Meta and Google): reports on how our ads perform, for example which ad led to a visit or a purchase.
  • Affiliate and referral partners, if you buy through a creator's link or code.
  • Public sources, for creators, press and businesses we may work with (see section 6).

3. How we use your personal information

To provide our products and Services:

  • process orders and payments;
  • deliver downloads;
  • activate and license software;
  • manage your account;
  • provide updates and support;
  • handle refunds.

GDPR basis: performance of our contract with you.

To market our products:

  • send marketing emails and browser notifications where you have agreed to receive them;
  • show you ads for our products on other websites and apps;
  • measure how our marketing performs.

GDPR basis: your consent where the law requires it, otherwise our legitimate interest in promoting our products. You can opt out at any time (see section 10).

To understand and improve our website and products: analytics, fixing problems, and deciding what to build.

GDPR basis: our legitimate interests.

To protect our business and users: preventing fraud, piracy, licence abuse and security threats, and enforcing our Terms of Service.

GDPR basis: our legitimate interests.

To meet legal obligations: for example tax and accounting records.

GDPR basis: legal obligation.

4. Advertising, analytics and Cookies

We use the following tools on our website and in our marketing.

  • Meta Pixel and Conversions API (Facebook and Instagram).
    • What it records: visits, product views, add-to-cart, checkout and purchase events.
    • Why: to measure our ads and show relevant ads to people who have visited our site.
    • Customer lists: we may also give Meta an encrypted (hashed) list of customer email addresses. We use it to show offers to customers who have agreed to marketing, and to exclude existing customers from ads meant for new customers. Meta matches the hashed list against its own users and does not use it to learn new information about you.
    • Control it: through your Facebook and Instagram ad settings (facebook.com/adpreferences).
  • Google Analytics and Google Ads: to measure site traffic and ad results and to show our ads on Google services. Opt out at adssettings.google.com or with the Google Analytics opt-out add-on.
  • Microsoft Clarity: to understand how visitors use our pages through heatmaps and session replays, which show clicks, scrolling and mouse movement. By default, Clarity masks text you type into form fields. See the Microsoft Privacy Statement.
  • PushOwl browser notifications: only if you allow notifications when your browser asks. You can switch them off at any time in your browser settings.
  • Shopify Email: to send our emails and record opens and clicks.
  • Shopify: uses its own Cookies to run the store. See shopify.com/legal/cookies.
  • Other advertising and affiliate partners that we may use from time to time to promote our products.

Your choices

  • Where the law requires your consent (for example in the EU and UK), marketing and analytics Cookies are used only after you agree through our cookie banner. You can change your choice at any time.
  • Most browsers let you block or delete Cookies, though some parts of the site may then stop working.
  • Our site honours the Global Privacy Control (GPC) signal as a request to opt out of the "sale" or "sharing" of your personal information and of targeted advertising, for that browser.
  • Industry opt-out tools: youradchoices.com (US) and youronlinechoices.eu (EU).

US privacy laws

Some of these laws treat letting advertising partners collect information through Cookies for targeted ads as a "sale" or "sharing" of personal information. In the last 12 months we have done this with:

  • identifiers: IP address, device and Cookie IDs, and hashed email;
  • commercial information: products viewed and bought;
  • internet activity on our site.

The recipients were advertising partners such as Meta and Google. We do not sell personal information for money. To opt out, use GPC or email us with the subject "Do not sell or share".

5. Who we share personal information with

    • Service providers that run the Services for us:
      • Shopify (store and checkout);
      • payment processors;
      • Cloudflare (hosting of our activation server, account system and downloads);
      • email, notification and customer-support tools;
      • analytics providers;
      • AI tools that help us draft and organise messages and analyse business data.

      They may use your information only to provide their services to us.

    • Advertising partners as described in section 4.
    • Affiliate partners: enough order information (such as the order value and the referral code used) to credit the creator who referred you.
    • Professional advisers and authorities: our accountants and lawyers, and regulators, courts or law enforcement where the law requires it or to protect our rights.
    • A buyer of our business: if Vox Samples is sold or merged, personal information may pass to the new owner under this policy.

6. Creators, press and business contacts

We work with music creators, educators, reviewers, journalists and other businesses. To find and contact people we may want to work with, we collect business contact details they have made public, such as:

  • email addresses listed on websites, YouTube channels or social profiles;
  • social media handles;
  • the name and topic of their channel or publication.

We also keep a record of our conversations. We use this only to contact you about partnerships, product reviews, press and similar opportunities, which is our legitimate interest in promoting our products. We do not sell these details or use them for consumer advertising.

If you would rather not hear from us, reply to any message or email contact@voxsamples.com. We will stop and keep your address on a do-not-contact list, so that you are not contacted again.

7. International transfers

We are based in Australia. Our service providers store and process information in other countries, mainly the United States, the European Union, the United Kingdom and Canada.

  • When we send your personal information overseas, we take reasonable steps so that it is protected in line with the Australian Privacy Principles.
  • For transfers out of the EU or UK, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses (and the UK equivalents).

8. How long we keep it

  • Orders and payment records: at least 5 years, as Australian tax law requires.
  • Licence and activation records: while your licence exists, so that you can keep reinstalling and re-activating your products, and for a reasonable time afterwards to handle disputes and prevent misuse.
  • Marketing data: until you unsubscribe or withdraw consent. After that we keep only what we need to respect your choice.
  • Business contact and outreach records: while they are relevant to a possible collaboration, or until you ask us to stop.
  • Website analytics: for the periods set by the tools above.

When we no longer need personal information, we delete it or make it anonymous.

9. Security

We protect personal information with reasonable technical and organisational measures, including:

  • encrypted connections;
  • access controls;
  • sign-in codes instead of reusable passwords for our account system.

No method of transmission or storage is completely secure. If a data breach is likely to cause you serious harm, we will notify you and the relevant authorities as the law requires.

10. Your rights and choices

Depending on where you live, you may have the right to:

  • access the personal information we hold about you, and get a copy in a portable format;
  • correct information that is wrong;
  • ask us to delete it;
  • object to or restrict how we use it, including for direct marketing;
  • withdraw consent you have given;
  • opt out of the "sale" or "sharing" of personal information and of targeted advertising;
  • appeal our decision on your request.

To make a request, email contact@voxsamples.com.

  • We may ask you to confirm your identity first, for example from the email address on your orders.
  • An authorised agent may act for you with your written permission.
  • We respond within the time the law requires, normally 30 days.
  • We will not treat you differently for using these rights.

Every marketing email has an unsubscribe link. Even after you unsubscribe, we will still send emails about your orders, licences and account.

11. Age requirement

Our Services are intended for people aged 18 or over. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

12. Complaints

If you have a concern about how we handle your personal information, please contact us first so that we can try to resolve it. We aim to respond within 30 days. If you are not satisfied, you can complain to:

  • Australia: the Office of the Australian Information Commissioner (oaic.gov.au);
  • EU, EEA or UK: your local data protection authority;
  • elsewhere: the privacy regulator where you live.

13. Links to other websites

Our site links to other websites and platforms, such as YouTube, Instagram and payment providers. Their own privacy policies apply when you use them.

14. Changes to this policy

We may update this policy as our practices or the law change. We will post the new version here with a new "Last updated" date. If the changes are significant, we will give more notice, for example by email.