Privacy Policy

Depending on how you use Soundphilia, we may collect your name, email address, purchase details, selected product, payment status, messages, consent preferences, booking or waitlist information and technical information about your use of the website.

Technical information may include your IP address, browser, device, approximate location, referral source and website interactions. Analytics and marketing information is collected only where the required consent has been provided.

We use personal information to process purchases, provide access to purchased journeys, send one-time sign-in codes, respond to enquiries, manage bookings or interest lists, maintain website security, meet legal obligations and measure and improve Soundphilia with your permission.

The legal bases we rely on include performance of a contract, compliance with legal obligations, our legitimate interests in operating and securing Soundphilia, and your consent for optional analytics, marketing and communications where required.

Payments are processed by Stripe. Soundphilia receives information such as your email address, purchased product, payment status, transaction reference, amount and currency.

Soundphilia does not receive or store your complete payment-card number or security code. Stripe processes payment credentials under its own privacy and security terms.

Sign-in uses your email and a six-digit one-time code that expires in 10 minutes. After verification, a secure session may be stored for up to 7 days.

Google Analytics and marketing technologies remain disabled unless you provide the relevant consent. You can change or withdraw your choice at any time through Cookie Settings. Further information is available in our Cookie Policy.

We do not sell your personal information. We disclose information only where necessary to operate Soundphilia, provide requested services, comply with the law or protect the security of the website and its users.

Our service providers may include Vercel for website hosting, Stripe for payments, Neon for database services, Resend for transactional emails and Google for consented analytics and campaign measurement.

Some service providers may process information outside the United Kingdom or European Economic Area. Where required, we rely on recognised transfer mechanisms and contractual safeguards designed to protect personal information.

We retain information only for as long as it is required for the purposes described in this policy. Purchase and transaction records may be retained for the period required by tax, accounting and legal obligations. One-time codes expire after 10 minutes, access sessions after 7 days, and other records are reviewed and deleted or anonymised when no longer required.

Depending on the applicable law and circumstances, you may have rights concerning the personal information we hold about you.

These may include the rights to be informed, access your information, correct inaccurate information, request erasure or restriction, object to certain processing, receive portable information and complain to the relevant supervisory authority.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

We use reasonable technical and organisational measures to protect personal information, including secure payment processing, hashed access tokens, time-limited one-time codes and restricted database access. No internet service can guarantee absolute security.

Soundphilia is not designed to collect personal information knowingly from children without appropriate involvement from a parent or guardian.

We may update this Privacy Policy when our services, technologies or legal obligations change. The latest version and its update date will remain available on this page.