Privacy Policy

Last updated: [Insert date]

This Privacy Policy explains how World Reggae Link (“we”, “us”, “our”) collects, uses, stores and protects personal data when you use our website, services and related platforms.

We are committed to handling personal data fairly, lawfully and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all users, visitors, members, artists, DJs, musicians, producers, sound systems, promoters, fans and other individuals who interact with us.

1. Who we are

World Reggae Link is a UK-based reggae, roots and Afrobeats platform connecting artists, DJs, musicians, producers, sound systems, promoters and fans.

For the purposes of data protection law, we are the data controller for the personal data described in this policy.

Contact details

Name: [Company Name]
Address: [Company Address]
Email: [Privacy Email Address]
Telephone: [Telephone Number]

If we have appointed a Data Protection Officer (DPO), their details will be provided here:

DPO: [Name / Contact Details or “Not appointed”]

2. Personal data we collect

We may collect and process the following types of personal data:

Information you provide to us

Name
Username or display name
Email address
Telephone number
Postal address
Date of birth, where relevant
Profile information, biography or stage name
Account login details
Payment or billing information, if you make a purchase
Details you provide in messages, forms, enquiries or support requests
Event, booking or membership information
Artist, promoter, DJ or business details you choose to share
Any other information you voluntarily provide

Information we collect automatically

When you use our website or services, we may collect:

IP address
Device information
Browser type and version
Operating system
Log data
Pages viewed and time spent on pages
Referring website or link
Cookie and similar tracking data

Information from third parties

We may also receive personal data from:

Payment providers
Analytics providers
Social media platforms, where you connect your account
Event partners, promoters, artists or other users
Publicly available sources, where lawful and appropriate

3. How we use personal data

We use personal data for the following purposes:

To provide and operate our website and services
To create and manage user accounts
To verify identity where needed
To process bookings, payments, subscriptions or purchases
To communicate with you about your account, enquiries or requests
To connect users within the platform
To manage events, promotions, listings and memberships
To send service updates and administrative messages
To personalise content and improve user experience
To monitor, analyse and improve our website and services
To detect, prevent and investigate fraud, misuse or security incidents
To comply with legal and regulatory obligations
To establish, exercise or defend legal claims
To send marketing communications, where permitted by law and where required, with your consent

4. Lawful bases for processing

We only process personal data where we have a lawful basis under UK GDPR. Depending on the context, we may rely on:

Consent

Where you have given clear consent, for example for certain marketing emails or optional cookies.

Contract

Where processing is necessary to provide our services, manage your account, process payments, or perform our agreement with you.

Legal obligation

Where we must process data to comply with legal requirements, such as tax, accounting, fraud prevention or regulatory obligations.

Legitimate interests

Where processing is necessary for our legitimate interests or those of a third party, provided your rights and interests do not override those interests. This may include:

Improving our services
Securing our platform
Preventing fraud and misuse
Administering our business
Sending limited marketing to existing customers where permitted by law

Vital interests

Where processing is necessary to protect someone’s life in an emergency.

Public task

This basis is unlikely to apply in normal circumstances, but may be relevant if we are required to process data for an official function.

5. Marketing communications

We may send you marketing emails or messages about our services, events, offers or news where permitted by law.

You can opt out at any time by:

Clicking the unsubscribe link in a marketing email
Updating your account preferences
Contacting us using the details above

Even if you opt out of marketing, we may still send you essential service messages, such as account notices, booking confirmations or security alerts.

6. Cookies and similar technologies

Our website may use cookies and similar technologies to:

Make the site work properly
Remember your preferences
Measure website traffic and performance
Improve security
Deliver relevant content and advertising, where applicable

Where required, we will ask for your consent before placing non-essential cookies on your device.

For more information, please see our Cookie Policy, if available.

7. Sharing personal data

We may share personal data with the following categories of recipients where necessary and lawful:

Service providers and suppliers who help us run our website, hosting, email, analytics, payment and support services
Professional advisers such as lawyers, accountants, insurers and auditors
Event partners, promoters, artists, DJs, sound systems or other users where required to deliver a service you requested
Regulatory bodies, law enforcement or public authorities where required by law
Buyers or successors in the event of a merger, sale or transfer of our business or assets
Other third parties where you have asked us to share your data or given consent

We require relevant third parties to handle personal data securely and in accordance with applicable data protection law where they act as our processors or otherwise process personal data on our behalf.

8. International transfers

Some of our service providers or recipients may be located outside the UK.

If we transfer personal data outside the UK, we will take appropriate steps to ensure it is protected in accordance with UK data protection law. These may include:

Transferring data to countries with adequate protection regulations
Using the UK International Data Transfer Agreement (IDTA)
Using the UK Addendum to EU Standard Contractual Clauses
Taking other safeguards required by law

9. How long we keep personal data

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting or reporting requirements.

Retention periods will vary depending on the type of data and the reason it is held. In general:

Account data is kept for as long as your account remains active
Transaction and billing records are kept for the period required by tax and accounting law
Support and correspondence records are kept for a reasonable period after the matter is closed
Marketing preferences are kept until you unsubscribe or withdraw consent
Technical logs and analytics data are kept for a limited period unless needed longer for security or legal reasons

When personal data is no longer needed, we will delete it or anonymise it where appropriate.

10. Security of personal data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include:

Access controls
Password protection
Encryption where appropriate
Secure storage
Staff confidentiality obligations
Regular review of our systems and processes

However, no method of transmission over the internet or electronic storage is completely secure. While we do our best to protect your data, we cannot guarantee absolute security.

11. Children’s data

Our services are not intended for children under 13, unless otherwise stated.

If we knowingly collect personal data from a child without the appropriate consent or lawful basis, we will take steps to delete it as soon as possible.

If you believe a child has provided us with personal data, please contact us.

12. Your rights

Under UK data protection law, you have certain rights in relation to your personal data. These may include:

Right of access

You can ask us for a copy of the personal data we hold about you.

Right to rectification

You can ask us to correct inaccurate or incomplete data.

Right to erasure

You can ask us to delete your data in certain circumstances.

Right to restriction

You can ask us to limit how we use your data in certain circumstances.

Right to data portability

You can ask for certain data in a structured, commonly used and machine-readable format, where applicable.

Right to object

You can object to processing based on legitimate interests and to direct marketing at any time.

Right to withdraw consent

Where we rely on consent, you can withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.

Rights relating to automated decision-making

You have rights relating to decisions made solely by automated means, where applicable. We will tell you if this applies.

To exercise any of these rights, please contact us using the details above.

13. How to make a complaint

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue.

You also have the right to complain to the UK Information Commissioner’s Office (ICO):

Information Commissioner’s Office

Website: https://www.ico.org.uk
Telephone: 0303 123 1113

14. Third-party links and services

Our website may contain links to third-party websites, platforms or services.

We are not responsible for the privacy practices of third parties. We encourage you to read the privacy policies of any third-party sites or services you use.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or services.

When we make changes, we will update the “Last updated” date at the top of this page. Where appropriate, we may also notify you by email or through our website.

16. Contact us

If you have any questions about this Privacy Policy or how we use your personal data, please contact us:

Email: [Privacy Email Address]
Address: [Company Address]
Telephone: [Telephone Number]

General note

This document is a general template for website use and is not a substitute for legal advice from a qualified solicitor.

Privacy Policy (UK GDPR / DPA 2018)