Privacy Policy
1. Introduction and company information
This Privacy Policy explains how Aurora Sound Studios Ltd collects, uses, stores, shares, and protects personal data when you visit our website, contact us, book or use our recording services, attend our premises, or otherwise interact with us.
Data controller: Aurora Sound Studios Ltd
Registered and trading address: Aurora Sound Studios, 14-16 Fonthill Road, London N4 3HH, United Kingdom
Email: [email protected]
Telephone: +44 20 7690 4837
Business type: Recording
We are committed to handling personal data in a lawful, fair, transparent, and secure manner. This Privacy Policy is intended to provide information about the categories of personal data we process, the purposes for which we use it, the legal grounds relied upon, and the rights available to individuals.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, professional title, artist name, band name, username, or similar identifiers.
- Contact data: email address, telephone number, postal address, and other contact details.
- Booking and service data: session dates, studio bookings, project details, preferences, notes, production requirements, technical specifications, and communications relating to recording services.
- Payment and billing data: invoicing details, transaction records, payment status, and related financial information.
- Technical data: IP address, browser type, device information, operating system, usage logs, cookie identifiers, and website analytics data.
- Audio, image, and video data: recordings, photographs, video footage, or other media created or supplied in connection with our services.
- Communications data: emails, messages, call records, feedback, enquiries, complaints, and other correspondence.
- Security and access data: CCTV footage, entry logs, visitor records, and other information collected for site security and safety.
- Marketing data: preferences relating to promotional communications, newsletter subscriptions, and engagement with our communications.
We collect personal data directly from you, from your representatives, from third-party booking platforms or payment providers, from website analytics tools, and in some cases from publicly available sources where relevant to our services.
We may process personal data by collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
3. Purpose of data processing
We process personal data for the following purposes:
- to respond to enquiries and communicate with clients, artists, suppliers, and visitors;
- to manage bookings, studio sessions, and delivery of recording services;
- to provide, administer, and improve our recording and related services;
- to prepare quotations, contracts, invoices, receipts, and financial records;
- to manage customer accounts and maintain service records;
- to process payments and prevent fraud;
- to operate, maintain, and secure our website, systems, and premises;
- to monitor site security and health and safety;
- to send service-related notices and, where permitted, marketing communications;
- to analyse website usage and service performance;
- to comply with legal, regulatory, tax, accounting, and insurance obligations;
- to establish, exercise, or defend legal claims;
- to administer consent preferences where consent is the lawful basis.
4. Legal basis for processing
We process personal data only where we have a lawful basis to do so. Depending on the context, our legal bases may include:
- Performance of a contract: where processing is necessary to enter into or perform a contract with you, such as managing bookings or delivering recording services.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include running and improving our business, securing our premises, preventing fraud, and managing communications.
- Consent: where you have given clear consent, for example for certain marketing communications or optional cookies, and where consent is required by law.
- Legal obligation: where processing is necessary for compliance with applicable laws, regulations, court orders, tax rules, or accounting requirements.
- Vital interests: in limited circumstances where processing is necessary to protect someone’s life or physical safety.
- Public task or official functions: where applicable in rare circumstances involving authorities or official requests.
Where we process special category data or other sensitive data, we will only do so where permitted by applicable law and subject to appropriate safeguards.
5. Data sharing and third parties
We may share personal data with trusted third parties where necessary for the purposes described in this policy. These may include:
- payment service providers and banks;
- booking, scheduling, and customer management platforms;
- IT, cloud storage, email, website hosting, and cybersecurity providers;
- accountants, auditors, insurers, lawyers, and professional advisers;
- contractors, session engineers, producers, technicians, and freelance personnel engaged in delivering services;
- analytics and marketing service providers;
- security providers, CCTV monitoring services, and access control providers;
- government bodies, regulators, law enforcement, or courts where disclosure is required or permitted by law;
- other third parties where you instruct us to share data or where sharing is necessary to provide a requested service.
We require third parties processing personal data on our behalf to act only on our instructions, to keep the data secure, and to comply with applicable data protection obligations where required.
We do not sell personal data.
6. Data transfer to third countries
Where personal data is transferred outside the United Kingdom, we will take appropriate steps to ensure that it remains protected in accordance with applicable data protection requirements. This may include using standard contractual clauses, relying on adequacy regulations or decisions where available, or implementing other lawful transfer mechanisms and safeguards.
Some of our service providers may store or process data in countries outside the United Kingdom. In such cases, we assess the risks and implement measures intended to protect the data against unauthorised access, disclosure, alteration, or destruction.
7. Storage duration
We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, tax, contractual, and reporting obligations.
- Client and booking records: retained for the period necessary to manage the relationship and any follow-up obligations.
- Accounting and transaction records: retained for the period required by applicable tax and accounting laws.
- Communications and enquiry data: retained for as long as needed to handle the enquiry and maintain business records.
- Security and CCTV data: retained for a limited period unless required longer for security, incident investigation, or legal purposes.
- Marketing data: retained until you withdraw consent or object, or until it is no longer needed.
- Website analytics data: retained according to the settings of the relevant analytics tools and our internal policies.
When personal data is no longer required, we will delete it or anonymise it securely.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Right of access: to request confirmation of whether we process your personal data and to receive a copy of that data.
- Right to rectification: to request correction of inaccurate or incomplete personal data.
- Right to erasure: to request deletion of personal data in certain circumstances.
- Right to restriction: to request that we limit the processing of your personal data in certain situations.
- Right to data portability: to request that certain data be provided to you or another controller in a structured, commonly used, machine-readable format, where applicable.
- Right to object: to object to processing based on legitimate interests and to object at any time to direct marketing.
To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding. We will respond within the time period required by applicable law.
9. Withdrawal of consent
Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we will stop processing the relevant data for the applicable purpose unless we have another lawful basis to continue processing it.
You can withdraw consent by contacting us at [email protected].
10. Right to complain
If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue.
You also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. If you are based in the United Kingdom, this is generally the Information Commissioner's Office (ICO).
We encourage you to contact us before making a complaint, as we may be able to address your concerns quickly and directly.
11. Data security
We implement appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, misuse, alteration, disclosure, or destruction. These measures may include access controls, secure storage, encryption where appropriate, staff confidentiality obligations, backup procedures, and security monitoring.
However, no method of transmission over the internet or method of electronic storage is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.
Where appropriate, access to personal data is limited to personnel and service providers who need access for legitimate business purposes.
12. Contact information
If you have any questions about this Privacy Policy or how we process personal data, please contact:
Aurora Sound Studios Ltd
Aurora Sound Studios, 14-16 Fonthill Road, London N4 3HH, United Kingdom
Email: [email protected]
Telephone: +44 20 7690 4837
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or operational needs. Any updated version will be published with a revised effective date where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how Aurora Sound Studios Ltd protects your personal data. Continued use of our services after any changes take effect will indicate your acknowledgement of the updated policy, to the extent permitted by law.