Privacy Policy

1. Who We Are

Soundbubble is operated by WITH BALANCE LTD, a company registered in England and Wales with its registered office in the United Kingdom with the company number 15915968.

For the purposes of UK data protection law, WITH BALANCE LTD is the data controller of personal data relating to platform users.

If you have any privacy-related questions, contact us at: hi@soundbubble.org

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): www.ico.org.uk

2. Scope of This Policy

This Privacy Policy explains how we collect, use and protect personal data when you:

• Create or use a Soundbubble account
• Build a Site
• Upload or sell music
• Use Mailouts or Promo tools
• Subscribe to an artist or label
• Visit our website

3. The Information We Collect

4. How We Use Personal Data

We use personal data to:

• Provide and maintain the platform
• Process payments and payouts
• Deliver Mailouts and Promo tools
• Provide customer support
• Improve functionality and performance
• Prevent fraud and platform abuse
• Comply with legal obligations
• Communicate important service updates

We rely on the following lawful bases under UK GDPR:

• Contract – to provide the services you sign up for
• Legal obligation – for tax, accounting and regulatory compliance
• Legitimate interests – to improve and secure the platform
• Consent – where required (e.g. marketing emails or non-essential cookies)

5. Subscriber Accounts & Preference Management

When someone subscribes to an artist or label on Soundbubble, we may create and manage a Soundbubble-managed subscriber account on their behalf. This allows subscribers to manage their preferences, view their subscriptions, and unsubscribe from mailing lists.

We process subscription data — including email addresses, names, and engagement preferences — on behalf of artists and labels as a data processor. The artist or label remains the data controller for their subscriber list.

As the platform operator, Soundbubble controls infrastructure-level preference data, such as global unsubscribe records and platform-wide suppression lists, to ensure compliance with anti-spam obligations across all artists using the platform.

Soundbubble may send subscribers platform-level service emails — for example, to confirm a subscription, process an unsubscribe request, or communicate essential account information. We will not send marketing emails to subscribers on our own behalf unless they have separately consented to receive them.

6. How We Share Data

We do not sell personal data.

We share data only where necessary with trusted service providers, including:

• Stripe – payment processing
• Supabase – database hosting
• Cloudflare – storage and content delivery
• Email delivery providers
• Infrastructure and analytics providers

These providers process data only as necessary to provide services to Soundbubble and are bound by appropriate data protection obligations.

We may also disclose information where required by law.

7. International Transfers

Some of our service providers operate outside the United Kingdom.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as:

• UK-approved Standard Contractual Clauses
• Transfers to countries with UK adequacy decisions
• Other lawful transfer mechanisms under UK GDPR

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy.

For example:

• Account data is retained while your account is active.
• Financial records are retained as required by UK law (typically six years).
• Subscriber data is retained while maintained within an artist's account.
• Security and system logs are retained for limited operational periods.

You may request deletion of your account at any time.

9. Cookies and Tracking

We use essential cookies to operate and secure the platform.

We may also use analytics tools to understand how the platform is used and improve performance.

Where required by law, we obtain consent for non-essential cookies.

You can control cookie preferences via your browser settings.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

• Encrypted data transmission (HTTPS)
• Secure infrastructure
• Role-based access controls
• Ongoing security monitoring

While no system can guarantee absolute security, we are committed to maintaining strong safeguards.

11. Your Rights

Under UK data protection law, you have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Restrict or object to processing
• Request data portability
• Withdraw consent where processing relies on consent

You may exercise these rights via your account settings or by contacting hi@soundbubble.org.

12. Children's Data

Soundbubble is not intended for individuals under the age of 16.

We do not knowingly collect personal data from children. If we become aware that a child has provided personal data, we will take steps to remove it.

If you believe a child has provided personal data to Soundbubble, please contact us.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above.

If changes are significant, we may notify users directly.