Privacy Policy for Stacks Music London Limited

Last updated 17/01/23

At Stacks Music London Ltd (also referred to as “Stacks”), accessible from https://www.stacksmusic.co (our “Platform”), one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by Stacks Music London Ltd and how we use it.

This Privacy Policy applies only to our online activities and is valid for visitors to our Platform with regards to the information that they share and/or collect in Stacks. Our Platform provides information about us and allows individuals and businesses to sign-up as Stacks Users (to create a personalised, easily-customisable page), as Subscribers (to subscribe to and follow Stacks Users) (together, the “Stacks Services“). The pages that Stacks Users are able to create are referred to in this Privacy Notice as “User Profiles“. User Profiles are accessible by the public.

This policy is not applicable to any information collected offline or via channels other than the Stacks website.

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.

Consent

By using our website, you hereby consent to our Privacy Policy and agree to its terms.

How does this Privacy Notice apply to me?

This Privacy Notice only applies to personal information we collect as a controller from:

  • visitors to our Platform (“Platform Visitors“);
  • individuals, representatives of individuals, or companies that sign up to use our Stacks services, together our “Stacks Users“;
  • individuals that sign up to subscribe to and/or follow User Profiles (“Subscribers“);
  • individuals that visit and interact with User Profiles (“Profile Visitors“); and
  • individuals who respond to our surveys, marketing materials or participate in trade promotions or competitions that we may run from time to time.

This Privacy Notice applies to the processing of personal information by Stacks as a controller.

When we talk about Linktree acting as a “controller”, we mean that Linktree determines the purpose and the means of the processing (i.e. we make decisions about how we will handle your personal information).

Because of the nature of our services, we can also act as a “processor” on behalf of Linktree Users. This means that, when we are instructed by a Linktree User, we can facilitate processing of Profile Visitors’ and Subscribers’ personal information on behalf of that Linktree User (“Processor Services“). This Privacy Notice does not address Processor Services. If you are a Profile Visitor or Subscriber, and want to know how a Linktree User handles your personal information, please get in touch with the Linktree User directly and/or refer to any privacy notice on the relevant User Profile.

If you provide us with information about another person (if, for example, you are a representative of an individual), you must provide them with a copy of this Privacy Notice and let that other person know that we use their personal information in the ways set out in this Privacy Notice.

What personal information do we collect?

The personal information that we may collect about you broadly falls into the following categories:

  • Information you provide voluntarilyWhen you sign up to become a Stacks User, a Subscriber, visit our Platform, visit a User Profile, or respond to a survey we may ask you to provide personal information voluntarily. For example, if you are a Stacks User we will ask you to provide your email address, username, and hashed password. If you are a Subscriber, we will ask you to provide your email address or SMS number. To opt-out of marketing communications we send you at any time you can click on the “unsubscribe” or “opt-out” link in the marketing e-mails or SMS we may send you. If you are a Profile Visitor, a User might request that you provide your email address, mobile number, date of birth or age, or other personal information in order to access elements of a User Profile (such as locked content). We may use the results of such access (i.e. successful or unsuccessful access attempts) to produce aggregated statistics for our own internal purposes and to improve the Stacks Services.
  • You may also provide personal information voluntarily if you respond to our surveys, marketing materials, or through your participation in trade promotions and competitions we may run from time to time.
  • Information that we collect automatically
  • When you visit our Platform, interact with a User Profile, respond to a survey or participate in a trade promotion we collect certain information automatically from your device. In some countries, including countries in the European Economic Area and UK, this information may be considered personal information under applicable data protection laws. Specifically, the information we collect automatically may include information like your IP address, device type, unique device identification numbers, browser-type, broad geographic location (e.g. country or city-level location), time zone, usage data, diagnostic data and other technical information. We may also collect information about how your device has interacted with our Platform or User Profiles, including the pages accessed and links clicked. Collecting this information enables us to better understand you, where you come from, and what content is of interest to you. We use this information for our internal analytics purposes, to improve the quality and relevance of our Platform and to provide hints and tips to our Stacks Users and to make recommendations of Stacks Profiles you might be interested in viewing. Some of this information may be collected using cookies and similar tracking technology, as explained further under the heading “How do we use cookies and similar tracking technology” below.
  • Further, we may undertake automatic scanning of User Profiles and links to determine whether mandatory or default sensitive content warnings should be applied and presented to Profile Visitors who wish to access the relevant User Profile or linked content, and to determine if any content should be removed or any User Profiles should be suspended. Where a User changes their User Profile, we will also notify relevant Subscribers to that User Profile that updates have been made.
  • Information that we obtain from third party sourcesFrom time to time, we may receive personal information about you from third party sources (including from service providers that help us run marketing campaigns or competitions and our partners who help us provide our Stacks Services). In all cases, we will only receive such data where we have checked that these third parties either have your consent or are otherwise legally permitted or required to disclose your personal information to us.
  • Children’s dataOur services are not intended for use by children under the age of 18 (the “Age Limit”). If you are under the Age Limit, please do not use Stacks and do not provide us with your personal information. If you are a parent or guardian and you are aware that an individual (of whom you are a parent or guardian) under the Age Limit has provided us with personal information, please contact us. We will, upon notice or discovery, take all reasonable efforts to erase or destroy any personal information that may have been collected or stored by us about that individual.

Why do we collect your personal information?

In general, we will use the information we collect for the purposes described in this Privacy Notice or for purposes that we explain to you at the time we collect your personal information. These include:

  • To provide and deliver the Stacks Services and to assess, maintain and improve the performance and functionality of the Stacks Services.
  • To ensure the Stacks Services are relevant to you and your device, to notify you about changes to the Stacks Services, and to deliver targeted and/or localised content based on your user data, location and preferences.
  • For consumer research and to allow you to participate in surveys or interactive features of the Stacks Services when you choose to do so.
  • To provide customer support, process and respond to a request or complaint that you may have made.
  • To monitor the usage of the Stacks Services and to detect, prevent and address technical issues.
  • To process payments for Stacks subscriptions.
  • To conduct business planning, reporting, and forecasting.
  • To deliver promotional materials, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted out of receiving such information.
  • For the administration of our business including for fulfilling and exercising our obligations and rights, exercising or defending legal claims, to comply with our legal obligations and law enforcement requests, and managing the relationship with you.
  • To verify your identity and to detect fraud and potential fraud, including fraudulent payments and fraudulent use of the StacksServices.
  • To include Stacks User content as part of our advertising and marketing campaigns to promote Stacks.
  • To inform our algorithms so we can deliver the most relevant recommendations to you, including of User Profiles that you may be interested in.

Legal basis for processing personal information

Our legal basis for collecting and using personal information described above will depend on the personal information concerned and the specific circumstances in which we collect it.

However, we will normally collect personal information from you only where we have your consent, where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal information from you, or may otherwise need the personal information to protect your vital interests or those of another person.

If we ask you to provide personal information to comply with a legal requirement we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information). As indicated above, we require certain personal information to enter into a contract with you as a Stacks User. Without your personal information, we will be unable to provide you with Stacks Services available to Stacks Users.

If we collect and use your personal information in reliance on our legitimate interests (or those of any third party), this interest will normally be to develop and improve the Stacks Services, to provide additional functionality, to ensure appropriate security or to implement sensitive content warnings and content moderation. We may have other legitimate interests, and if appropriate, we will make clear to you at the relevant time what those legitimate interests are.

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “Contact Us” heading below.

Who may we disclose your personal information to?

We may disclose your personal information to the following categories of recipients:

  • to third party services providers (for example, to support the delivery of, provide functionality on, or help to enhance the security of our Platform or Stacks Services), or who otherwise process personal information for purposes that are described in this Privacy Notice or notified to you when we collect your personal information.
  • to the extent we introduce social media log-ins in the future, we may provide personal data to the relevant social media provider to facilitate such log-in;
  • to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
  • to an actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Notice; and
  • to any other person with your consent to the disclosure.

In order to facilitate paid products and/or services within the Stacks Service, we use third party payment processors. We will not store or collect your payment card details. That information is provided directly to our third party payment processors whose use of your personal information is governed by their privacy policies and their own terms and conditions. These payment processors adhere to the standards set by payment card industry data security standards (“PCI-DSS”) as managed by the Payment Card Industry Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

Disclosure of personal information to other countries

Your personal information may be transferred to, and processed in, countries other than the country in which you are a resident. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective).

The countries in which these organisations are located will vary, but, in the course of our business operations, we generally disclose personal information to organisations located in the United Kingdom or the United States. Such transfers are made in order to provide the Stacks Services and carry out the activities specified in this Privacy Notice.

However, we have taken appropriate safeguards to ensure that your personal information will remain protected in accordance with this Privacy Notice and applicable data protection laws. No transfer of your personal information will take place to an organisation or another country unless we believe there to be adequate controls in place including the security of your data and other personal information. For more details please see the “How do we secure your personal information” section below.

How do we use cookies and similar tracking technology?

Cookies

We use cookies and similar tracking technology (collectively, “Cookies”) to collect and use personal information about you. These cookies are used to store information including visitors' preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users' experience by customizing our web page content based on visitors' browser type and/or other information.

Cookies are not the only way to recognise or track visitors to a website. We may use other, similar technologies from time to time, like web beacons (sometimes called “tracking pixels” or “clear gifs”) on our website. These are tiny graphics files that contain a unique identifier that enable us to recognise when someone has visited our Platform or opened an e-mail that we have sent them. This allows us, for example, to monitor the traffic patterns of users from one page within our Platform to another, to deliver or communicate with cookies, to understand whether you have come to our Platform from an online advertisement displayed on a third-party website, to improve site performance, and to measure the success of e-mail marketing campaigns. In many instances, these technologies are reliant on cookies to function properly, and so declining cookies will often impair their functioning.

Log Files

Stacks follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services' analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. The purpose of the information is for analysing trends, administering the site, tracking users' movement on the website, and gathering demographic information.

How long do we retain your personal information?

We will retain your personal information for the period necessary to fulfil the purposes outlined in this Privacy Notice and in each case in accordance with applicable legal and regulatory requirements in respect of permitted or required retention periods and limitation periods relevant to legal action.

How do we secure your personal information?

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

In addition we limit access to your personal information to employees, agents, contractors and other third parties who have a business need for access. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.

While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. Therefore, we have put in place procedures to deal with any suspected personal information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

What are your rights in relation to personal information?

You have the following data protection rights:

  • If you wish to access, correct or update your personal information, you can do so at any time by contacting us at help@stacksmusic.co

Depending on the country which you live in and the laws that apply to you, you may also have additional data protection rights. If you are resident in the UK or the European Economic Area, these rights include:

  • To request deletion of your personal information. You can do so by contacting us at help@stacksmusic.co
  • To object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. Again, you can exercise these rights by contacting us at the above email address
  • To opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you
  • If we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
  • The right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. (Contact details for data protection authorities in the European Economic Area, Switzerland and certain non-European countries (including the US and Canada) are available here and the UK here.)

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

Additional CCPA Privacy Rights for Californian Residents:

Under the CCPA, among other rights, California consumers have the right to:

  • Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.
  • Request that a business delete any personal data about the consumer that a business has collected.
  • Request that a business that sells a consumer's personal data, not sell the consumer's personal data.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us

Complaints

We take your privacy concerns seriously. If you have a complaint regarding our handling of your personal information or concerning our privacy practices, you may file a complaint by contacting us at help@stacksmusic.co. We will confirm receipt of your complaint and, if we believe necessary, we will open an investigation.

We may need to contact you to request further details of your complaint. If an investigation has been opened following a complaint made by you, then we will contact you with the result as soon as possible. In the unlikely circumstances we are unable to resolve your complaint to your satisfaction, you may contact the local privacy and data protection authorities in your jurisdiction.

Changes to This Privacy Notice

We may update our Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws.

You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.

‍

‍