Last updated: 28 August 2025
Who we are
This website is operated by SYME Music Publishing Company Ltd in support of the artist known as Jenny Toledo and the album The Threadbare Tapes. For the purposes of UK data protection law, SYME Music Publishing Company Ltd is the data controller for personal data collected through this website.
How to contact us:
Use the contact form on this website or the email address on the Contact page titled “Privacy queries”.
What personal data we collect
We only collect the data necessary to run the site and communicate with you:
-
Contact details: name, email address, and any message you send us.
-
Transactional data: order details if we sell merchandise, downloads, or tickets via the site or integrated providers.
-
Technical data: IP address, device and browser type, pages visited, referring URL, and approximate location derived from IP for analytics and security.
-
Marketing preferences: your opt-in choices for newsletters or updates.
How we collect your data
-
Directly from you when you use a contact form, subscribe to a mailing list, create an account, or complete a purchase.
-
Automatically via cookies and similar technologies when you browse the site. See Cookie section below.
-
From third parties when you interact with embedded players or links (for example Bandcamp, Spotify, Apple Music, YouTube, or social media).
Why we use your data (lawful bases)
We process personal data on the following legal bases:
-
Contract: to provide products or services you request (for example, a download or purchase).
-
Consent: for email marketing or non-essential cookies. You can withdraw consent at any time.
-
Legitimate interests: to operate, secure, and improve the website and to prevent fraud or misuse.
-
Legal obligations: to comply with tax, accounting, and other regulatory duties.
How we use your data
-
To reply to enquiries, provide downloads, fulfil orders, and deliver customer support.
-
To send opt-in newsletters or updates about Jenny Toledo and The Threadbare Tapes.
-
To maintain site security, diagnose problems, and measure performance and audience interest.
-
To comply with legal and financial record-keeping requirements.
Sharing your data
We share data only when necessary:
-
Service providers: website hosting, email, analytics, payment processors, and fulfilment partners. These parties must safeguard your data and use it only on our instructions.
-
Embedded services: if you play embedded media or click out to platforms like Bandcamp, Spotify, Apple Music, YouTube, or social media, those services may collect data under their own privacy policies.
-
Legal: we may disclose information if required by law or to protect our rights and users.
We do not sell your personal data.
International transfers
Some providers may process data outside the UK. Where applicable, we rely on lawful transfer mechanisms such as adequacy decisions, standard contractual clauses, or equivalent safeguards.
Data retention
-
Contact enquiries: typically up to 24 months.
-
Order and transaction records: up to 7 years to meet tax and accounting rules.
-
Marketing consent records: until you unsubscribe or the mailing list is closed.
We delete or anonymise data when it is no longer needed.
Your rights
You have the right to:
-
Access your data and receive a copy.
-
Correct inaccurate data.
-
Request deletion of your data in certain cases.
-
Restrict or object to processing in certain cases.
-
Withdraw consent where processing is based on consent.
-
Port your data to another provider in certain cases.
To exercise your rights, use the contact details above. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
Cookies and similar technologies
We use essential cookies to run the site and (with your consent) analytics or media cookies to help us understand usage and improve content. You can manage non-essential cookies via the on-site cookie banner or your browser settings. Blocking some cookies may affect site features or embedded players.
Security
We use administrative, technical, and physical safeguards consistent with industry practice to protect personal data. However, no system can be guaranteed 100 percent secure.
Children
This site is not directed at children under 13. If you believe a child has provided personal data, please contact us so we can delete it.
Changes to this policy
We may update this policy from time to time. We will post any changes on this page and update the “Last updated” date above. Significant changes may be notified more prominently.
Keywords
Jenny Toledo privacy policy, The Threadbare Tapes privacy statement, GDPR compliance music websites; UK data protection policy for artist websites, Privacy rights music fans, Jenny Toledo, website cookies Music website privacy protection, Artist site data retention policy, Jenny Toledo GDPR information, Protecting personal data on music sites