Last updated: 06 June 2026
Who we are
This website is operated by SYME Music Publishing Company Ltd in support of the Jenny Toledo folk project and the album The Threadbare Tapes. For the purposes of UK data protection law, SYME Music Publishing Company Ltd is the data controller for personal data collected through this website.
How to contact us
For privacy queries, please email: home@jennytoledo.co.uk
What personal data we collect
We only collect the data necessary to run the site and communicate with you.
Contact details: name, email address, and any message you send us.
Technical data: IP address, device and browser type, pages visited, referring URL, and approximate location derived from IP address for analytics and security.
Marketing preferences: your opt-in choices for newsletters or updates, if such a mailing list is active.
How we collect your data
Directly from you when you use a contact form or subscribe to a mailing list.
Automatically via cookies and similar technologies when you browse the site. See the cookie section below.
From third parties when you interact with embedded players or links, for example Bandcamp, Spotify, Apple Music, YouTube, or social media.
Why we use your data
We process personal data on the following legal bases.
Consent: for email marketing or non-essential cookies. You can withdraw consent at any time.
Legitimate interests: to operate, secure, and improve the website and to prevent fraud or misuse.
Legal obligations: to comply with any tax, accounting, or other regulatory duties that may apply.
How we use your data
To reply to enquiries and provide basic website support.
To send opt-in newsletters or updates about Jenny Toledo and The Threadbare Tapes, if you have chosen to receive them.
To maintain site security, diagnose problems, and measure performance and audience interest.
To comply with legal and financial record-keeping requirements where applicable.
Sharing your data
We share data only when necessary.
Service providers: website hosting, email, analytics, security, and technical support providers. These parties must safeguard your data and use it only for the services they provide.
Embedded services: if you play embedded media or click out to platforms such as Bandcamp, Spotify, Apple Music, YouTube, or social media, those services may collect data under their own privacy policies.
Legal: we may disclose information if required by law or to protect our rights and users.
We do not sell your personal data.
International transfers
Some providers may process data outside the UK. Where applicable, we rely on lawful transfer mechanisms such as adequacy decisions, standard contractual clauses, or equivalent safeguards.
Data retention
Contact enquiries: typically up to 24 months.
Marketing consent records: until you unsubscribe or the mailing list is closed.
Technical and security records: kept only for as long as needed for website operation, security, analytics, and legal compliance.
We delete or anonymise data when it is no longer needed.
Your rights
You have the right to:
Access your data and receive a copy.
Correct inaccurate data.
Request deletion of your data in certain cases.
Restrict or object to processing in certain cases.
Withdraw consent where processing is based on consent.
Port your data to another provider in certain cases.
To exercise your rights, use the contact details above. You also have the right to lodge a complaint with the Information Commissioner’s Office at ico.org.uk.
Cookies and similar technologies
We use essential cookies to run the site. With your consent, we may also use analytics or media cookies to help us understand site usage and improve content.
Embedded media players or third-party links, such as Bandcamp, Spotify, Apple Music, YouTube, or social media, may set their own cookies or collect usage data when you interact with them.
You can manage non-essential cookies via the on-site cookie banner, where available, or through your browser settings. Blocking some cookies may affect site features or embedded players.
Security
We use administrative, technical, and physical safeguards consistent with industry practice to protect personal data. However, no system can be guaranteed 100 percent secure.
Children
This site is not directed at children under 13. If you believe a child has provided personal data, please contact us so we can delete it.
Changes to this policy
We may update this policy from time to time. We will post any changes on this page and update the “Last updated” date above. Significant changes may be notified more prominently.
Keywords
Jenny Toledo privacy policy, The Threadbare Tapes privacy policy, SYME Music Publishing privacy policy, Jenny Toledo website privacy, UK data protection, GDPR information, website cookies, music website privacy, personal data rights, privacy rights for music fans, data retention policy, contact form privacy, Bandcamp embedded media privacy, independent music website privacy