This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website and interact with our services. We are committed to safeguarding your privacy and complying with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The Second Floor, a trading name of Unchained Music Ltd., (“we”, “us”, or “our”) is the data controller responsible for your personal data collected via this website.

We may collect information that identifies you personally, such as your name, email address, contact number, billing information, IP address, and device identifiers. We also collect information that does not identify you directly, such as anonymised usage data, browser types, and session activity. Data is collected when you interact with our website, subscribe to our communications, complete a transaction, register an account, or contact us directly.

We use cookies and similar technologies to enhance your experience on our website, tailor content to your preferences, and gather analytical data on website usage. A cookie is a small file placed on your device that helps the website remember your preferences or recognise repeat visits. Most browsers accept cookies by default, but you can modify your settings to decline them if preferred. Additionally, we may use web beacons—small, often invisible images embedded in pages or emails—to track engagement metrics. Third-party vendors may also place cookies on our site to help us analyse anonymous usage data and improve performance. All data collected this way is aggregated and not used to identify individuals.

We process your personal data to provide access to our website and services, facilitate transactions, distribute payments or royalties, respond to enquiries, and offer technical support. We may also use your data to send updates or promotional material, conduct internal research and development, and ensure compliance with legal and contractual obligations. In some cases, we anonymise your data by removing identifiers, after which the resulting information is treated as non-personal data.

We do not sell your personal data. We may share your information with trusted third-party service providers, such as payment processors or analytics partners, who assist us in delivering our services. These providers are contractually required to handle your data securely and to use it only for specified purposes. In some cases, we may be legally required to share personal data with public authorities or regulatory bodies. If we undergo a merger, acquisition, or asset sale, your data may be transferred as part of that transaction, in accordance with applicable laws.

If your personal data is transferred outside of the UK or the European Economic Area (EEA), we ensure that adequate safeguards are in place, such as the use of standard contractual clauses approved by relevant authorities, to protect your data in accordance with UK GDPR standards.

You have the right to access the personal data we hold about you, to request correction of any inaccuracies, to request deletion of your data in certain circumstances, and to object to or restrict our processing of your data where applicable. You also have the right to withdraw consent to marketing communications at any time. To exercise these rights, please contact us using the details at the end of this policy.

We implement appropriate technical and organisational measures to safeguard your personal data against unauthorised access, misuse, loss, or alteration. Access to your data is restricted to authorised personnel and third parties who are bound by confidentiality obligations. While we take all reasonable steps to secure your information, we cannot guarantee absolute security for data transmitted over the internet.

Our website may include links to third-party websites for your convenience or interest. We are not responsible for the content or privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal data.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, tax, accounting, or reporting requirements. When data is no longer required, we securely delete or anonymise it.

We may update this Privacy Policy from time to time. Any significant changes will be communicated on our website. We encourage you to review this page periodically to stay informed about how we are protecting your data.

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you can contact us at hello@thesecondfloor.io or write to us at The Second Floor, 78 Friday Street, Leicester LE1 3BW. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) via www.ico.org.uk if you are dissatisfied with how we handle your data.