Privacy Policy.

Music Intel Ltd is the controller for its corporate and musician marketing sites and for business administration such as enquiries, accounts and direct communications. For customer-directed processing in Musicata, Musicata Pro or BlackBox Royalty Investigator, Music Intel may act as a processor; in other product contexts it may act as a controller. The applicable agreement and collection notice define the role for each use.

Company number 17022941. Registered in England and Wales. Registered office: Ingles Manor, Castle Hill Avenue, Folkestone, Kent CT20 2RD, United Kingdom.

Contact: legal@musicintel.co.uk

• Hashed IP-derived signals (company / region; IP addresses are hashed before storage and the raw IP address is not retained).
• User agent and device (browser, OS, mobile or desktop).
• Referrer and UTM (traffic source, campaign metadata).
• On-page behaviour (scroll depth, dwell time, pages visited).
• Optional customer-supplied metadata (e.g. brand logo, industry) where customers enrich their own records.
• Account data (email, name, company) for users who register to use our services.
• Enquiry and communication data (contact details, organisation, role, message, newsletter choices and consent records).
• Artist, catalogue and rights data supplied by customers or obtained from public, licensed, connected-platform or authoritative records for the agreed service.
• Campaign and fan-interaction data submitted through smart links, pre-save or email-gate journeys, where the relevant customer and collection notice define the purpose.
• Pseudonymous analytics data. With Performance consent, Groove uses a first-party visitor identifier, device/browser capability signals and interaction summaries; Google Analytics receives site-use events. Details and controls are in our Cookie Policy.
• Payment information. Musicata subscription payments are processed through Stripe; Industry invoices are administered through Xero. Merchandise checkout and fulfilment are handled by Spreadshirt. Music Intel does not store full payment-card numbers.

• Legitimate interests (Article 6(1)(f) UK GDPR): operating and securing our business and services, responding to business enquiries, fraud and bot prevention, and proportionate product improvement after balancing your rights.
• Contract (Article 6(1)(b)): to deliver the dashboard and services to paying users.
• Consent: for optional Performance and Marketing technologies, direct marketing where required, and other uses presented as optional. You can withdraw consent at any time.
• Legal obligation (Article 6(1)(c)): accounting, tax, regulatory and rights-request records where required.

Music Intel does not sell browsing data. Under Essential only, Groove, Google Analytics and Meta Pixel do not load on the corporate and musician marketing sites. If you accept Performance technologies, Groove derives pseudonymous browser/device hashes and interaction summaries as described in our Cookie Policy. Third-party services, including the merch shop, are identified separately and may apply their own privacy controls.

• Raw visitor telemetry: 30 days maximum, then aggregated.
• Account and billing records: for the life of the account plus statutory retention (e.g. 6 years for invoices in the UK).
• Security and event logs: up to 90 days for abuse detection.
• Groove visitor identifier: up to 1 year where Performance consent remains in place; withdrawal clears the site-controlled identifier.
• Enquiries and optional communications: for as long as needed to handle the enquiry or communication purpose, then only where required for legal, contractual or suppression records.
• Customer-directed product data: as set out in the applicable order, DPA, product notice or configured retention setting.

Depending on the service and your choices, personal data may be received by providers acting as processors, independent controllers or other recipients. Observed public-site services include:

• IP-API Pro (geolocation)
• Brandfetch (logo resolution, B2B only)
• People Data Labs (optional enrichment, only when enabled by customers)
• Stripe (Musicata subscription payment processing)
• Xero (Industry invoicing and accounting records)
• Google Analytics (optional site measurement after Performance consent)
• Meta (optional advertising measurement after Marketing consent)
• TikTok (optional customer-configured campaign measurement after Marketing consent)
• Google reCAPTCHA (form abuse prevention where shown)
• Spreadshirt / Spreadshop (merch shop, checkout, fulfilment and customer service)
• Cloud hosting and CDN providers in the UK and EU, or with adequate safeguards in place

For an enterprise engagement, we confirm the service-specific providers, legal roles and assurance documents available for the proposed scope during due diligence. Where Music Intel will act as a processor, the required Article 28 terms must be agreed before that processing begins. Contact legal@musicintel.co.uk.

The Musicata platform allows users to connect their own social media and streaming accounts via OAuth 2.0 to view aggregated audience metrics in a unified dashboard. These connections are optional and user-initiated.

Meta (Instagram and Facebook)

• Permissions requested: pages_show_list, pages_read_engagement, instagram_basic, instagram_manage_insights.
• Data accessed: follower counts, page list, public profile information.
• Storage: we cache follower counts and profile metadata only. We do not store posts, comments, stories, or private messages.
• Disconnection: via Settings > Connected Accounts in the dashboard. Deletion and retention then follow the applicable product notice and agreement.

Google (YouTube and Search Console)

• Data accessed: YouTube subscriber count, Search Console impressions and clicks.
• Storage: aggregate metrics only.
• Disconnection: Settings > Connected Accounts.

Spotify

• Data accessed: follower count, monthly listener count (public data).
• Disconnection: Settings > Connected Accounts.

All connections use OAuth 2.0. We request the scopes needed for the selected connection. Unless a feature and its permission screen expressly say otherwise, we do not post on your behalf or access private messages. We do not sell connected-platform data; authorised service providers may process it to operate the service.

Music Intel merch shop (Spreadshop / Spreadshirt)

The merch page contains a shop operated and fulfilled through Spreadshop by Spreadshirt. When you open that page, your browser connects directly to Spreadshirt, which supplies the storefront, basket, checkout and its own cookie controls.

• Data handled by Spreadshirt: browser and network information needed to deliver the shop, plus order, payment, delivery and customer-service information you provide during checkout.
• Music Intel access: we do not receive or store full payment-card details through the embedded shop.
• Your controls: use the controls shown by Spreadshop, or open the shop directly and review Spreadshirt's privacy policy and customer terms.

We host primarily in the UK and EU. Where a restricted transfer requires safeguards, we use an approved mechanism such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with the required data-protection test or transfer risk assessment.

Encryption in transit (TLS 1.2+), encryption at rest for customer data, least-privilege access, rate limiting, and regular key rotation for production secrets.

Under UK GDPR you can request access, correction, deletion, restriction, objection or portability where the right applies. You can withdraw consent at any time without affecting earlier lawful processing. Because some visitor records are pseudonymous, we may ask for information such as an approximate visit time to locate the relevant data without collecting more than necessary.

To exercise a right or make a data-protection complaint, email legal@musicintel.co.uk. We will acknowledge a complaint within 30 days, investigate without undue delay, keep you informed where appropriate and communicate the outcome. You can also complain directly to the Information Commissioner's Office (ICO) at ico.org.uk; contacting Music Intel first is not a condition of that right.

Our services are not directed to children. A school, university or other organisation may authorise access for a student under 18 only under an applicable written agreement and with the permissions, notices and supervision required for that context.

Music Intel does not use personal data collected through its marketing sites to make solely automated decisions that produce legal or similarly significant effects. Product scores, alerts and identity candidates are decision-support signals and require human interpretation; any materially different customer use must be described in the applicable notice and agreement.

If we make material changes, we update the effective date and post a website or dashboard notice.