Before approval, add the controller’s legal name, address and privacy email; confirm service providers, territories, lawful bases, age threshold, cookie inventory, international safeguards and exact retention schedule.
1. Who is responsible for your information
The organisation responsible for personal information handled through this service (the “controller”) is [operator legal name and address to be confirmed], trading as Undiscovered Bangers.
This policy covers the Undiscovered Bangers website, listener features, artist workspace, submissions, artist pages and services that link to it. Third-party music, social, payment and video platforms have their own privacy policies.
2. Information we may collect
- Account and contact details: name, email address, login identifiers and account preferences.
- Artist and submission information: artist name, biography, music and video links, artwork, credits, release details, social profiles, correspondence and rights confirmations.
- Purchase information: plan, transaction reference, payment status, billing contact and tax information. Full card details should be handled by the payment provider rather than stored by us.
- Usage and device information: IP address, browser or device type, pages viewed, referral source, approximate location, timestamps, diagnostics and security events.
- Device-only library information: favourites and playlists saved in browser storage during preview mode.
- Messages and support records: enquiries, complaints, rights requests and other communications.
We may receive information directly from you, automatically from your browser or device, from service providers, and from public artist or platform profiles you ask us to use.
3. How and why we use information
Depending on the activity and applicable law, we may use information:
- to provide accounts, listener features, submissions, artist pages and paid services under our contract with you;
- to review, publish and promote artist material with permission or as needed to deliver an agreed service;
- to operate, secure, troubleshoot and improve the platform where this is in our legitimate interests and those interests do not override your rights;
- to process payments, keep business and tax records, handle legal requests and comply with law;
- to send service messages and respond to support; and
- to send optional marketing where you have consented or another lawful basis applies, with an easy way to opt out.
We do not currently use personal information to make solely automated decisions that produce legal or similarly significant effects. This statement must be revisited if recommendation, fraud or eligibility systems change.
4. Public artist information
Approved artist names, biographies, artwork, release information, credits, social links and listening-platform links may be displayed publicly and shared in campaigns. Artists should not submit private contact details or third-party personal information for public display unless they have permission.
Music and video embedded from third-party platforms may allow those providers to collect usage information when the embed loads or is played. Where consent is legally required, non-essential embeds and tracking should remain blocked until consent is given.
6. How long information is kept
We keep personal information only for as long as needed for the purpose collected, including to provide the service, maintain security, resolve disputes, enforce agreements and meet accounting or legal duties. The decision takes account of the information’s amount, sensitivity and risk, the relationship with the user, and applicable limitation periods.
The final retention schedule is [to be confirmed]. It should cover unsuccessful submissions, published profiles, account records, support correspondence, transaction records, consent records, security logs and backups. Information may be anonymised so it no longer identifies anyone.
7. Cookies, local storage and similar technologies
The service may use strictly necessary storage for security and core functionality. In preview mode, favourites and playlists may be stored locally on the device. Clearing browser data or changing device may remove them.
Analytics, advertising, personalisation and third-party media technologies should be used only with the notice and consent required by applicable law. A complete cookie and SDK inventory—including name, provider, purpose and duration—will be added when the production stack is finalised.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete or restrict personal information; object to certain processing; receive portable data; withdraw consent; and complain to a data-protection authority. Withdrawing consent does not affect processing already carried out lawfully.
To make a request, contact [privacy email to be confirmed]. We may need to verify identity and may retain a limited record of the request. UK users may also have the right to complain to the Information Commissioner’s Office; users elsewhere can contact their local authority.
9. Children
The service is not intended for children below [minimum age to be confirmed], and we do not knowingly collect their information without any consent required by law. Contact us if you believe a child has provided information improperly.
10. Security
We use proportionate technical and organisational measures designed to protect information against loss, misuse and unauthorised access. No online service is completely secure, so users should choose strong passwords, keep credentials private and contact us promptly about suspected account misuse.
11. Changes and contact
We may update this policy as the service, providers or law changes. The current version and updated date will appear here, and material changes will be highlighted where appropriate.
Privacy contact: [email to be confirmed]
Postal address: [address to be confirmed]
