Privacy Policy

Last updated: [insert date]

1. Introduction Midnight Canvas Audio ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share your information when you use our services, visit our website, interact with us on social media, or otherwise engage with Midnight Canvas Audio.

We operate in England and comply with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Who we are Company name: Midnight Canvas Audio Industry: Music production Region of operation: England

We provide music production and related audio services, which may include recording, composition, mixing, mastering, sound design, consultation, and associated digital services.

3. Information we may collect We may collect and process the following categories of personal data:

3.1 Information you provide to us

• Contact details: name, email address, phone number, postal address
• Professional details: stage name, role (e.g., artist, producer, label representative), company or organisation
• Project information: creative brief, reference tracks, technical requirements, deadlines, budget range
• Payment details: billing address and transaction-related information (payments are generally processed via third-party payment providers; we do not store full card details)
• Account details (if applicable): username, password and any profile information you choose to provide
• Communications: emails, messages, feedback, enquiries and any other communications you send to us

3.2 Information collected automatically When you visit our website or use our online services, we may automatically collect:

• Technical data: IP address, browser type and version, device type, operating system, time zone setting, and similar technical information
• Usage data: pages you visit, time and date of visits, time spent on pages, links clicked, and other analytical data
• Cookies and similar technologies: data collected via cookies, web beacons and similar tools (see section 9 for more details)

3.3 Information from third parties We may receive personal data about you from:

• Payment processors and booking platforms
• Social media platforms when you interact with our pages or profiles
• Business partners, agents, or collaborators who introduce you to us or work with us on joint projects

4. How we use your information We use your personal data only when we have a lawful basis to do so. We may use your information to:

4.1 Provide and manage our services

• Deliver music production and related services
• Communicate with you about projects, bookings, schedules and updates
• Manage contracts, agreements and project documentation

4.2 Run and improve our business

• Operate, protect and improve our website and services
• Analyse usage to understand how users interact with our services
• Develop new offerings, features, or services

4.3 Marketing and communication

• Send information about our services, promotions, events or updates that may be of interest to you (where permitted by law and, where required, with your consent)
• Respond to your enquiries, feedback and support requests

4.4 Legal, compliance and security

• Comply with legal obligations and regulatory requirements
• Prevent, detect and investigate fraud, misuse or security incidents
• Establish, exercise or defend legal claims

5. Legal bases for processing (UK GDPR) We will process your personal data under one or more of the following legal bases:

   • Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
   • Legitimate interests: where processing is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests
   • Consent: where you have given clear consent for a specific purpose (e.g., certain types of marketing). You may withdraw your consent at any time
   • Legal obligation: where processing is necessary for us to comply with a legal or regulatory obligation

6. How we share your information We do not sell your personal data. We may share your information with:

   • Service providers: such as payment processors, cloud hosting, email service providers, analytics providers, project management tools and other technical or administrative support services
   • Professional partners: collaborators such as session musicians, engineers, studios, labels or other creative professionals, but only to the extent necessary to deliver the agreed services
   • Legal and regulatory bodies: where required by law, regulation or legal process, or to protect our rights, property or safety, or the rights, property or safety of others
   • Business transfers: in connection with a merger, acquisition, restructuring, or the sale of all or part of our assets, where your personal data may be transferred as part of that transaction

Whenever we share your personal data, we take appropriate steps to ensure it remains protected and is only used in accordance with this Privacy Policy and applicable law.

7. International transfers We are based in England, but some of our service providers or partners may be located outside the UK.

If your personal data is transferred outside the UK, we will ensure that:

• The destination country has been deemed to provide an adequate level of protection by the UK government; or
• We use specific contracts (such as UK-approved standard contractual clauses) that provide your data with equivalent protection to that in the UK.

8. Data retention We will retain your personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including:
   • For as long as you have an active relationship or ongoing project with us
   • For the period necessary to comply with legal, accounting or reporting requirements

When we no longer need your data, we will delete or anonymise it in a secure manner.

9. Cookies and similar technologies Our website may use cookies and similar technologies to:
   • Enable basic site functionality
   • Remember your preferences
   • Analyse site usage and performance

You can control or delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of the website.

Where required by law, we will ask for your consent before using non-essential cookies.

10. Security We take appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, disclosure, alteration or destruction. These measures may include:
    • Secure servers and encrypted connections (such as HTTPS)
    • Access controls and authentication
    • Regular review of our security practices

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

11. Your rights (UK residents) If you are located in the UK, you have certain rights regarding your personal data, subject to limitations under applicable law. These include:
    • Right of access: to obtain a copy of the personal data we hold about you
    • Right to rectification: to have inaccurate or incomplete data corrected
    • Right to erasure: to request deletion of your personal data in certain circumstances
    • Right to restriction: to request restriction of processing of your data in certain circumstances
    • Right to data portability: to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller where technically feasible
    • Right to object: to object to processing based on our legitimate interests or for direct marketing purposes
    • Right to withdraw consent: where processing is based on your consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the contact details provided in section 13. We may need to verify your identity before responding to your request.

12. Third-party links Our website or communications may contain links to third-party websites, services or social media platforms. We are not responsible for the privacy practices or content of those third parties. We encourage you to read the privacy policies of any third-party sites or services you visit.

13. Contact us If you have any questions about this Privacy Policy, our data practices, or wish to exercise your data protection rights, you can contact us at:

Midnight Canvas Audio [Insert postal address] [Insert contact email] [Insert contact phone number, if applicable]

14. Changes to this Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or operational needs. We will post the updated policy on our website and update the "Last updated" date at the top of this page.

Where required by law, we will notify you of significant changes and, if necessary, obtain your consent.