Privacy Notice

SendItGood provides promo distribution software to record labels. Labels upload music, maintain contact lists, and send promos to DJs and press.

We are the controller for your account and for the operation of the service. For a label's contact list, that label is the controller and we act as its processor under Article 28. Contact us at privacy@senditgood.com.

What we process, and where it came from

Your email address and name; contact details supplied by a label, which may include outlet, city and country; promo activity, meaning clicks, plays, downloads and any feedback you submit; audio and artwork uploaded by labels; and sign-in records. Promo activity is recorded with an IP address and browser user agent; these are erased from the event after 13 months, leaving the countable fact without the device behind it. Where we log a consent or an opt-out we store a shortened IP that cannot identify a single connection. If you receive promos, a label supplied your details. On upload the label confirms that each person agreed to be emailed about promos and that the addresses were not purchased, rented or scraped.

Purposes and lawful bases

Operating your account and delivering promos: Article 6(1)(b), contract. Promotional email: Article 6(1)(a), consent obtained by the label. Security and prevention of misuse: Article 6(1)(f), legitimate interests. Accounting and tax: Article 6(1)(c), legal obligation.

We do not sell personal data, buy contact lists, or send marketing of our own. Consent may be withdrawn at any time, without affecting processing carried out beforehand.

Two things are ours rather than any label's. Your account, sign-in records and billing references, which we hold to run the service. And the platform-wide opt-out list described below, which we keep so that asking us to stop applies to every label at once and is not undone by the next import. For those we are the controller, and requests about them come to us.

Recipients and transfers

Processors for email delivery, file storage, payment processing and hosting, each engaged under Article 28 terms and acting only on our instructions. They are US-based cloud services, so personal data is stored in the United States. Transfers from the UK and EEA are made under the Standard Contractual Clauses. The current list is available on request.

Retention

Kept no longer than necessary. After an account closes we retain accounting records for the statutory period, the label's confirmation that it had permission to contact you, and a record that lets us check an address against our do-not-contact list without storing the address itself.

Security

Access to personal data is restricted to those who need it to operate the service. Data is encrypted in transit and at rest, sign-in is passwordless, and we log access. No service is immune, and if a breach is likely to result in a risk to your rights we notify the relevant supervisory authority within 72 hours of becoming aware of it, and tell you directly where the risk to you is high.

Your rights

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Objection to direct marketing is absolute and needs no reason. Signed-in users can export their data and close their account from their account settings. For any request, write to privacy@senditgood.com; we respond within one month and normally make no charge.

Every promo email carries an unsubscribe link, and recipients can switch off individual labels or all labels from Manage Senders. You may lodge a complaint with the supervisory authority where you live or work: in the UK the Information Commissioner's Office, and in the EEA your national data protection authority.

If you are in the United States

Depending on your state you may have the right to know what personal information we have collected about you and who we disclosed it to, to have it corrected or deleted, and to appeal a refusal. We do not sell personal information and do not share it for cross-context behavioural advertising, as those terms are used in state privacy law, and we have not done so in the preceding twelve months. Exercising these rights will not get you worse service. Write to privacy@senditgood.com; we respond within 45 days and may extend once where the request is complex. An authorised agent may act for you with written proof.

If you are in Canada

We handle personal information under PIPEDA and, for Quebec residents, Law 25. You may ask for access to your information and for corrections, and you may complain to the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information. Personal information is stored on our providers' servers in the United States and is therefore subject to the laws of that country. Our privacy officer can be reached at privacy@senditgood.com.

Children

The service is for people working in music and is not directed at children. We do not knowingly collect personal data from anyone under 16, and we delete it if we learn we have.

Changes to this notice

We update this notice when what we do changes. The date at the top is the last revision. Where a change materially affects your rights we tell account holders directly rather than relying on you to check.

Cookies and tracking

Strictly necessary cookies to keep you signed in. No advertising, no third-party tracking, and no open tracking in the emails we send.