DRAFT — for review. This document has not yet been reviewed by a UK solicitor. Last updated: 2026-05-13.

Privacy Policy

Last updated: 2026-05-13

1. Who is the data controller

The data controller for personal information collected through this website is the operator of Sounds Great, 67a Newport High Street, Isle of Wight, UK.

Contact for privacy queries: headhunter5469@yahoo.com
Business form: [STORE OWNER TO PROVIDE]

2. What we collect

Server log data: IP address, browser user-agent, pages requested, timestamps. Collected automatically for security (intrusion detection) and basic traffic understanding.
Cookies: a session cookie ("sessionid") and a CSRF cookie ("csrftoken"). Both are strictly necessary for the site to function. See our Cookie Notice.
Email correspondence: if you contact us by email or phone, we retain that correspondence for as long as needed to respond and complete any transaction.
(Future) Order information: when online checkout is enabled, we will collect name, delivery address, and contact details to fulfil orders. Payment information is handled by the payment processor (currently PayPal) and never stored on our servers.

We do not currently use analytics tools (Google Analytics, etc.), nor do we set advertising or tracking cookies.

3. Lawful basis (UK GDPR Article 6)

Legitimate interest: server logs, intrusion detection, abuse prevention.
Contract performance: fulfilling any order you place (when online sales are enabled).
Consent: any optional communication you opt into (e.g. newsletter, if added in the future).

4. How long we keep your data

Server logs: 30 days.
Order records (when applicable): 7 years, to satisfy HMRC record-keeping requirements.
Email correspondence: 24 months unless related to a transaction.

5. Who we share data with

We do not sell your data. We share it only with the following processors, and only as needed:

Hosting provider: DigitalOcean LLC (server located in London, United Kingdom — DigitalOcean region lon1) processes any data that flows through the site by virtue of hosting it.
Payment processor (future): PayPal handles payment details directly. We never receive your card number.
Law enforcement: where required by valid legal process.

6. International transfers

The hosting server is located in London, United Kingdom. Personal data is not routinely transferred outside the UK. Should any future processor be located outside the UK, transfers will be made under appropriate safeguards (UK Addendum to EU Standard Contractual Clauses or equivalent UK GDPR transfer mechanism).

7. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you;
Have inaccurate data corrected;
Have your data erased (where lawful basis no longer applies);
Restrict or object to processing;
Receive a portable copy of your data;
Withdraw consent at any time where consent is the lawful basis.

To exercise any of these, email headhunter5469@yahoo.com. We will respond within one month.

8. Complaints

If you are unhappy with how we handle your data, you may complain to the UK Information Commissioner's Office: ico.org.uk, tel 0303 123 1113.

9. Changes

We may update this Policy. The "Last updated" date reflects the most recent change.

See also: Terms of Service · Cookie Notice