Privacy policy

This notice explains what moltenomusic.com does with personal data. The short version: reading this site collects nothing about you that we keep, and the only way personal data reaches us is when you email. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

This is the personal website of the artist MOLTENO, Jessica Molteno Murray, who is the data controller for it. The site is built and maintained by Blume Studio on her behalf. There is no statutory data protection officer; questions go to the contact details at the end of this page.

This website

Reading this website collects nothing about you that we keep. Specifically:

• No analytics or advertising cookie runs unless you have chosen to allow it on the cookie panel, which appears on your first visit and can be reopened from the footer at any time. Refusing takes one click and is the default until you say otherwise. Every cookie the site can set is listed in the cookie policy.
• The site is served by Cloudflare, which keeps short-lived request logs (IP address, browser, pages requested) for security and to run the network. We do not see or export those logs in the ordinary course of business.
• The videos are hosted on YouTube. Nothing loads from YouTube until you press play. When you do, the player is embedded from youtube-nocookie.com, and Google's own privacy policy applies to the playback.
• Links to Spotify, Apple Music, Bandcamp and SoundCloud are plain links. Nothing loads from them until you follow one.
• There is no contact form, no newsletter form and no shop on this site.

When you email us

If you email the artist, the press and booking address or the sync address, we hold your email and what you wrote for as long as it takes to reply and follow up, in the mailbox it arrived in. Press and booking email is handled by Blume Studio, sync requests by OML Sync, both on the artist's behalf.

Lawful basis. Our legitimate interest in answering people who write to us (UK GDPR Article 6(1)(f)), or taking steps at your request before a booking or licence (Article 6(1)(b)).

How long. Until we no longer need it to answer you or follow up. Correspondence about a booking or a licence is kept for six years afterwards, which is what HMRC requires for the records behind an invoice.

Who processes data for us

• Cloudflare hosts this website and serves its images.
• Google Workspace and Gmail hold the mailboxes the contact addresses arrive in.
• Resend delivers the emails the site's own admin sends, which are only ever to the people who run it.

Each acts on our instructions. Where data leaves the UK we rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified, and otherwise on the International Data Transfer Agreement.

We do not sell personal data and we do not share it with anyone for their own marketing.

Your rights

Under UK GDPR you can ask us to tell you what personal data we hold about you and give you a copy; correct anything that is wrong; delete it, where we no longer have a reason to keep it; or stop using it for a particular purpose. Email the address at the end of this page and we reply within one month. We may ask you to confirm the email address the data is held under before we act.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would rather you told us first so we can put it right.

We do not make automated decisions about you, and nothing here involves profiling.

Security

Everything on this site travels over HTTPS. The site keeps no database of visitors. The admin that edits it is behind a password and a bot check, and its sessions are limited to the people who run the site.

Age

This site is for a general audience. We do not knowingly collect data from anyone under 13, and we delete it if we learn we have.

Changes to this notice

When this notice changes, the date at the top changes with it.