Privacy Policy
Last updated: 18/08/2026
This policy explains what personal data we collect through darcywintermusic.com (the “Site”), why we collect it, what we do with it, and what rights you have. Please read it alongside our our Cookie Policy at darcywintermusic.com/cookie-policy.
1. Who we are
Darcy Winter Music (“we”, “us”, “our”) is the data controller for personal data collected through the Site.
Contact: darcy@darcywintermusic.com
Postal address: Harwood Point, 307 Rotherhithe Street, SE16 5HD
Based in: London, United Kingdom
2. What personal data we collect
If you join our mailing list: your email address, and your name if you give it.
If you contact us: your name, email address, and whatever else you choose to include in your message, including anything in your email signature. Emails you send us are stored in our email system.
If you apply to perform at one of our events: your name, artist name and email address, along with any social media handles, links or material you choose to include. Applications are submitted through a form on the Site and are also sent to our email.
Automatically, when you visit the Site: your IP address, browser and device type, operating system, the pages you visit, how long you spend on them, and the site or link that brought you here. Some of this is collected through cookies, see our Cookie Policy, and some is logged by our website platform for security and performance reasons.
We don’t ask for or need any special category data (such as health, religion, or political opinions), and we’d ask you not to send it to us.
3. Why we use it, and our lawful basis
What we use it for
Lawful basis
Sending you emails about releases, shows and projects, if you’ve signed up
Consent. You can withdraw it at any time.
Replying to your messages and enquiries
Legitimate interests — responding to people who contact us.
Considering submissions and booking artists for events
Legitimate interests — running our events; or steps at your request prior to entering an agreement.
Understanding how the Site is used, so we can improve it
Consent, given through the cookie banner.
Keeping the Site secure and working properly
Legitimate interests — protecting the Site and preventing abuse.
Keeping records we’re required to keep
Legal obligation.
Where we rely on legitimate interests, we’ve considered whether those interests are outweighed by your rights and concluded they aren’t. You can ask us about that assessment, and you can object — see section 8.
4. Who we share it with
We don’t sell your personal data, and we don’t share it for anyone else’s marketing.
We use a small number of service providers who process personal data on our behalf, under contract and on our instructions:
Squarespace — hosts the Site, provides its analytics, and processes form submissions. Squarespace’s privacy policy: https://www.squarespace.com/privacy
KOMI — manages our mailing list and sends our email campaigns. KOMI’s privacy information: https://komi.io/privacy-policy
Microsoft — provides our email, so messages you send us are stored on Microsoft’s servers. Microsoft’s privacy statement: https://privacy.microsoft.com/en-gb/privacystatement
DICE — handles ticket sales for events: https://dicefm.zendesk.com/hc/en-gb/articles/4412947716369-United-Kingdom-Privacy-Policy-for-DICE-Users
We don’t use Google Analytics or advertising pixels on the Site.
We may also disclose personal data where we’re legally required to, or to establish, exercise or defend legal claims.
Platforms we link to, but don’t control. If you follow a link from the Site to Bandcamp, a streaming service, a ticketing platform or a social network, that platform collects your data as its own controller under its own privacy policy. We don’t receive your payment details for anything bought through those platforms.
5. Transfers outside the UK
Some of our providers, including Squarespace and KOMI, are based in or store data in the United States. Emails you send us are stored by Microsoft on servers in the United Kingdom. Where personal data is transferred outside the UK, we rely on appropriate safeguards — such as UK adequacy regulations, or the International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses. You can ask us for details of the safeguards that apply.
6. How long we keep it
Mailing list data: until you unsubscribe, or after 24 months of no engagement, whichever is sooner.
Enquiries and correspondence: up to 24 months after the matter is resolved.
Submissions: up to 12 months after we’ve considered them, unless we work together, in which case we keep what’s needed for that relationship.
Analytics data: aggregated Site analytics are retained by our website platform; the activity log, which includes IP addresses, is deleted after seven days.
We delete or anonymise personal data once we no longer need it.
7. Security
We use reputable providers with appropriate technical and organisational measures, keep accounts protected with strong passwords and two-factor authentication where available, and limit access to personal data to those who need it. No transmission over the internet is completely secure, so we can’t guarantee absolute security, but we take it seriously and will notify you and the ICO where we’re required to in the event of a breach.
8. Your rights
Under the UK GDPR you have the right to:
Access the personal data we hold about you
Rectify it if it’s inaccurate or incomplete
Erase it in certain circumstances
Restrict how we use it in certain circumstances
Portability — receive it in a machine-readable format
Object to processing based on legitimate interests, and to direct marketing at any time
Withdraw consent at any time, where we rely on consent — this doesn’t affect anything we did before you withdrew it
To exercise any of these, email darcy@darcywintermusic.com. We’ll respond within one month. There’s normally no charge.
You can unsubscribe from our emails at any time using the link at the bottom of any email.
9. Complaints
If you’re unhappy with how we’ve handled your personal data, please tell us first at darcy@darcywintermusic.com so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Helpline: 0303 123 1113 https://ico.org.uk/make-a-complaint/
10. Children
The Site isn’t directed at children under 16, and we don’t knowingly collect their personal data. If you believe a child has given us personal data, please contact us and we’ll delete it.
11. Changes to this policy
We may update this policy from time to time. The version published here is the current one, and we’ll update the date at the top when we change it. If the changes are significant, we’ll say so on the Site or by email.
12. Contact
Darcy Winter Music
darcy@darcywintermusic.com