Privacy Policy

PRIVACY NOTICE

This Privacy Notice from Elephant Music tells our customers and service users how we process your personal data in accordance with our legal obligations under the Data Protection Act (DPA) and the UK General Data Protection Regulation (UKGDPR).

Elephant Music is committed to building trust and confidence in our ability to keep your information secure and this Notice explains how we do this.

What data we collect

The personal data we collect from you includes:

  • questions, queries or feedback you leave, including your email address if you contact Elephant Music
  • your postcode and address if you use an Elephant Music service that includes a postcode or address lookup function
  • your email address and subscription preferences when you sign up to our email alerts
  • how you use our emails – for example whether you open them and which links you click on
  • your Internet Protocol (IP) address, and details of which version of web browser you used
  • information on how you use the site, using cookies and page tagging techniques

Where you provide your consent, we may use Google Analytics or other remote user monitoring (RUM) services cookies to collect information about how you use Elephant Music. This includes IP addresses.

We may process information about:

  • the pages you visit on Elephant Music
  • how long you spend on each Elephant Music page
  • how you got to the site
  • what you click on while you’re visiting the site

We also may receive the same information from other digital services.

We make sure you cannot be directly identified by Google Analytics, RUM, or other data services we may use. We do this by using address anonymisation and by removing any other personal data from the titles or URLs of the pages you visit.

We will not combine analytics information with other data sets in a way that would directly identify who you are.

Our software may also process anonymised information about:

  • how well the pages performed on your device
  • performance bottlenecks your device experienced
  • JavaScript errors your device encountered

Cookies

We sometimes put small files (known as ‘cookies’) onto your computer to collect information about how you browse the site. They cannot be used to identify you personally.

We use cookies to help us:

  • remember your device and any information you give us
  • measure how you use our services so we can update and improve them based on your needs

Important: If you delete cookies or you set your browser to not accept cookies, you will not be able to use some of our services.

Why we need your data

We collect your personal data in order to:

  • gather feedback to improve our services, for example our email alerts
  • respond to any feedback you send us, if you’ve asked us to
  • send email alerts to users who request them
  • allow you to access services and make transactions
  • provide you with information about local services
  • monitor use of the site to identify security threats
  • monitor the performance of the site to identify inefficiencies and JavaScript errors

We use the information we collect through Google Analytics and other RUM services to see how you use Elephant Music and to see how well the site performs on your device.

We do this to help:

  • make sure Elephant Music is meeting the needs of its users
  • make improvements, for example improving site search
  • make performance improvements, for example improving page load time and data usage

We combine Google Analytics information with similar data from other digital services to help understand and improve user journeys within Elephant Music digital services.

Our legal basis for processing your data

The legal basis for processing personal data in relation to site security is our legitimate interests, and the legitimate interests of our users, in ensuring the security and integrity of Elephant Music.

The legal basis for processing data collected with Google Analytics and RUM on Elephant Music and other digital services is your consent.

The legal basis for processing all other personal data is that it’s necessary:

  • to perform a task in the public interest
  • in the exercise of our functions

What we do with your data

The data we collect may be shared with other departments, agencies and entities of Elephant Music. It may also be shared with our technology suppliers, for example our hosting provider.

We will share your data if we are required to do so by law – for example, by court order, or to prevent fraud or other crime.

The data we collect with Google Analytics cookies is transferred and stored with Google where we analyse it with Google Analytics software (Universal Analytics). We do not allow Google to use or share this data for their own purposes.

We will not:

  • sell or rent your data to third parties
  • share your data with third parties for marketing purposes

How long we keep your data

We will only retain your personal data for as long as it is needed for the purposes set out in this document or for as long as the law requires us to.

We will:

  • keep your email data until you unsubscribe
  • keep your feedback data for 2 years
  • delete access log data which contain your IP address after 120 days

Children’s privacy protection

Our services are not designed for, or intentionally targeted at, children 13 years of age or younger. We do not intentionally collect or maintain data about anyone under the age of 13.

Where your data is processed and stored

We design, build and run our systems to make sure that your data is as safe as possible at all stages, both while it’s processed and when it’s stored.

All personal data is stored in the United Kingdom (UK). Data collected by Google Analytics and RUM may be transferred outside the UK for processing.

Where data processing happens in the US, suppliers need to meet the certification standards set out in the UK-US Data Bridge agreement. This facilitates flows of personal data to certified US companies that have opted in to the UK-US Data Privacy Framework.

How we protect your data and keep it secure

We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data – for example, we protect your data using varying levels of encryption.

We also make sure that any third parties that we deal with keep all personal data they process on our behalf secure.

Your rights

You have the right to request:

  • information about how your personal data is processed
  • a copy of that personal data
  • that anything inaccurate in your personal data is corrected immediately

You can also:

  • raise an objection about how your personal data is processed
  • request that your personal data is erased if there is no longer a justification for it
  • ask that the processing of your personal data is restricted in certain circumstances

If you have any of these requests, get in contact with our Privacy Team.

Links to other websites

Elephant Music contains links to other websites.

This privacy notice only applies to Elephant Music, and does not cover other services and transactions that we link to. These services have their own terms and conditions and privacy policies.

Following a link to another website

If you go to another website from this one, read the privacy policy on that website to find out what it does with your information.

Following a link to Elephant Music from another website

If you come to Elephant Music from another website, we may receive personal information from the other website. You should read the privacy policy of the website you came from to find out more about this.

Contact us or make a complaint

Contact the Privacy Team if you:

  • have a question about anything in this privacy notice
  • think that your personal data has been misused or mishandled

Privacy Team

Email address:
You can also contact our Data Protection Officer (DPO):

Data Protection Officer
Email address:

Elephant Music, 77 Forest View Road
London, E17 4EJ

Email address:
The DPO provides independent advice and monitoring of our use of personal information.
You can also make a complaint to the Information Commissioner, who is an independent regulator.

Information Commissioner

Telephone: 0303 123 1113
Textphone: 01625 545860

Monday to Friday, 9am to 4:30pm
Information Commissioner’s Office

Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF

Changes to this policy

We may change this privacy policy. In that case, the ‘last updated’ date at the bottom of this page will also change. Any changes to this privacy policy will apply to you and your data immediately.

If these changes affect how your personal data is processed, Elephant Music will take reasonable steps to let you know.

Updates to this page

Last updated 21 August 2024