The Record Stock – Privacy Policy
Effective Date: March 2026
Last Updated: March 2026
1. Who We Are
The Record Stock is owned and operated by Joe Firth, trading as The Record Stock, a sole trader based in the United Kingdom.
Website: therecordstock.com
Contact Email: contact@therecordstock.com
Postal Address (for data protection matters): 31 Heath St., Warrington, Cheshire, UK, WA46LP
For the purposes of UK GDPR, Joe Firth is the data controller of your personal data.
By purchasing or using music from The Record Stock, you are agreeing to the terms outlined in this Privacy Policy.
2. What This Policy Covers
This Privacy Policy explains:
What personal data we collect
How we use your data
The legal bases under UK GDPR that apply
How long we keep your data
When and why we may share your information
Your rights as a data subject
How we protect your personal data
3. What Data We Collect
We collect personal data when you interact with our website or services, including:
A. When You Purchase Music
Name
Email address
Purchase details
Payment information (processed securely by third‑party payment providers; we do not store card details)
B. When You Join Our Mailing List
Email address
C. When You Contact Us
Name
Email address
Message content
D. When You Use Our Website
IP address
Browser type
Device information
Cookie and analytics data (see Section 8)
We do not collect or request any special category (sensitive) data.
4. How We Use Your Data
We use your personal data only for purposes that are lawful, necessary, and clearly explained:
To process your purchases and deliver music licences
To send order confirmations and download links
To respond to enquiries and provide customer support
To operate and improve our website
To send email updates or newsletters only if you have opted in
We do not sell your personal data, and we do not share it with advertisers.
5. Legal Basis for Processing (UK GDPR)
We process your data under one or more of the following legal bases:
Contractual Necessity
To fulfil your purchase or deliver digital music licences.
Consent
If you opt in to receive newsletters or marketing emails.
You can withdraw consent at any time.
Legitimate Interests
For website analytics, spam prevention, platform security, and improving services. These activities have minimal privacy impact and are necessary for site operation.
Legal Obligation
To comply with tax, accounting, or legal requirements.
6. How Long We Keep Your Data
We only keep your personal data for as long as necessary for the purpose it was collected.
Purchase and licence records: kept for up to 6 years to meet accounting, tax, and licensing audit requirements. After this period, data may be archived or deleted unless legally required to retain it longer.
Newsletter subscriptions: until you unsubscribe.
Website analytics data: retained for up to 26 months, anonymised when possible.
You may request deletion of your personal data (see Section 10), except where we must retain it for legal obligations.
7. Third‑Party Service Providers
We share limited data with trusted third parties who help run our business. These include, but may not be limited to:
Payment processors PayPal – they process payment information securely.
Email platforms Bandzoogle, Zoho Mail – used for newsletter and transactional emails.
Website hosting and analytics providers Google Analytics, Bandzoogle, Cookie Script.
These providers access only the data necessary for their services and are required to comply with UK GDPR.
8. Cookies & Analytics
Our website uses cookies to:
enable essential site functions,
understand visitor behaviour,
improve performance.
Cookie Consent
Non‑essential cookies (such as analytics) are only activated after you provide consent through our cookie banner.
You may withdraw consent or change cookie settings at any time.
9. International Data Transfers
Some of our service providers (such as email or analytics platforms) may store or process data outside the UK.
When this occurs, we ensure appropriate safeguards are in place, such as:
UK GDPR adequacy decisions,
UK Addendum to Standard Contractual Clauses,
Contractual or technical protections.
10. Your Rights Under UK GDPR
You have the following rights:
Access – request a copy of your personal data
Rectification – request corrections to inaccurate information
Erasure – request deletion of your personal data
Restriction – limit how your data is used
Objection – object to certain types of processing
Portability – receive your data in a machine‑readable format
Withdraw consent – for email marketing at any time
To exercise any of these rights, contact: contact@therecordstock.com.
We may request proof of identity before responding. All requests are processed within one month.
11. How We Protect Your Data
We take data security seriously and use:
Secure HTTPS encryption
Industry‑standard hosting protections
Strong access controls
Trusted third‑party vendors who meet GDPR standards
12. Children’s Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect data from children.
13. Complaints
If you have concerns about how we handle your data, please contact us first at: contact@therecordstock.com.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
ico.org.uk
14. Updates to This Policy
We may update this Privacy Policy from time to time. The latest version will always be posted on this page.
The Record Stock – sounds good.