Privacy Policy

1. Who We Are

This Privacy Policy applies to Dave Carrett Music (“we”, “us”, or “our”). Under the UK General Data Protection Regulation (UK GDPR), we are the “Data Controller” of your personal information.

2. The Data We Collect & Why

We sell digital music downloads. To deliver these files to you and prevent fraud, we collect the following data:

When you…Data We CollectWhy We Need It (Legal Basis)
Create an AccountName, Email Address, Username, Password (encrypted).Contract: You must have an account to access your download links securely.
Buy MusicBilling Address, Email, IP Address.Contract: To verify your identity and send you the download receipt.
Pay for MusicPayment details (Processed securely by PayPal/Stripe).Contract: We do not see or store your full card number; the processor handles this securely.
Contact UsName, Email, Message.Legitimate Interest: To reply to your support question (e.g., “My download didn’t work”).

3. Digital Delivery & Account Security

Because we sell digital files that are delivered instantly:

  • Email Accuracy: It is vital that you provide a correct email address. This is the only way we can send you the download link.
  • Account Requirement: We require you to create an account so you can log back in and re-download your purchases if you lose the file.

4. Third-Party Service Providers

We do not sell your data. We use the following essential service providers to operate our business:

  • Payment Processors: (e.g., PayPal / Stripe) to handle your payment securely.
  • Lloyd Hosting: Our Web Server Host. They manage the secure servers where our website and data are physically stored, but they do not access nor use your personal data.

5. Cookies

We use cookies to make the website function correctly.

  • Essential Cookies: These are strictly necessary for the WooCommerce shopping basket to work (e.g., remembering what songs are in your cart). You cannot disable these, as the site would not work without them.
  • No Tracking: We do not use third-party analytics or tracking cookies.

6. Data Retention

  • Customer Accounts: We keep your account active so you can access your past purchases. You may request to close your account at any time.
  • Order Records: We are legally required by UK tax law (HMRC) to keep records of sales for 6 years. After this period, data is deleted.

7. Your Rights

Under the UK GDPR, you have the right to:

  1. Access: Ask us what data we hold about you.
  2. Rectify: Update your email or password via your “My Account” page.
  3. Erase: Ask us to delete your account. Note: We cannot delete tax records of past purchases immediately.
  4. Complain: If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO).

8. Contact Us

For any privacy-related questions or to request account deletion, please contact:

  • Email: d.carrett@yahoo.com