privacy policy

We value your privacy and are committed to protecting your personal information. This policy outlines how we collect, use, disclose, and safeguard personal information in accordance with the New Zealand Privacy Act 2020. By using our services, you agree to this policy.

Information We May Collect

Personal Information: Full name, email, address, and phone number. We do not collect financial details.
Non-Personal Information: Demographic data and website usage statistics that do not directly identify individuals.

How We Collect Information

Directly from Individuals: Via forms, emails, phone calls, or Spotify OAuth for playlist creation app sign-ups.
Automatically During Website Visits: IP address, browser type, and browsing activity via cookies and similar technologies.

Cookies: Our website is hosted on Squarespace, which uses cookies to enhance user experience, analyze traffic, and support basic site functionality. See Squarespace’s cookie policy for details.

Consent and Transparency

Newsletter Opt-In: You may opt in to receive newsletters. You can unsubscribe at any time via the unsubscribe link in emails or by emailing [email protected].
Spotify Playlist Creation App: Users authorising our app via Spotify OAuth consent to data collection for playlist delivery. You can revoke app permissions in your Spotify account settings or request data deletion by emailing [email protected].

Under GDPR, our legal bases for processing personal data include user consent (e.g., newsletter sign-ups and Spotify app use) and legitimate interests (e.g., service improvement and non-personally identifiable analytics).

Use of Information

Personal Information: For communication, playlist delivery via our Spotify app, service improvement, and sending newsletters (if subscribed).
Non-Personal Information: For statistical analysis and service enhancement.

Information Sharing

Service Providers: Trusted third parties, such as our email marketing tool, may access personal information (e.g., email addresses for newsletters) under strict confidentiality agreements compliant with New Zealand privacy laws.
Legal Requirements: We may disclose information if required by law to protect rights, property, or safety.

Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy (e.g., delivering playlists or newsletters). Data is securely deleted when no longer needed, typically within 30 days of a deletion request or when you revoke Spotify app permissions or unsubscribe from newsletters.

Data Breach Notification

If a notifiable privacy breach occurs, we will promptly notify affected individuals and the Office of the Privacy Commissioner as required by the Privacy Act 2020. We will take steps to mitigate harm and prevent future breaches.

Security

We implement reasonable measures to protect personal information from unauthorized access, use, or disclosure. However, no internet transmission or electronic storage is 100% secure, so we cannot guarantee absolute security.

Third-Party Links

We are not responsible for the content, privacy, or security of third-party websites linked on our site.

Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect or require age information from users. If a parent or guardian believes their child has provided personal information, please contact us at [email protected] to remove it.

Your Rights

Under the Privacy Act 2020, you have the right to access and correct your personal information. To exercise these rights, email [email protected].

Spotify Data Removal

To revoke access or delete data collected via our Spotify playlist creation app, visit your Spotify account settings to remove app permissions or email [email protected] to request deletion of all associated data.

Cross-Border Data Transfers

Personal information (e.g., email addresses for newsletters) may be processed by third-party service providers outside New Zealand, such as our email marketing tool. We ensure these providers comply with privacy standards equivalent to the Privacy Act 2020.

Changes to the Privacy Policy

Updates to this policy will be posted on our website with an effective date. Significant changes will be communicated via email or website notification.
Effective date: 1 June 2025

Contact Us

For questions or concerns, email [email protected]

Global Privacy Rights

For fans outside New Zealand, we comply with applicable privacy laws in your jurisdiction, including the EU’s GDPR and California’s CCPA. You have rights to access, correct, delete, or restrict processing of your personal information, and, where applicable, data portability or objection to processing. To exercise these rights, email [email protected]. We do not sell your personal information. If your data is transferred to third-party providers (e.g., email marketing tools), we ensure they meet privacy standards equivalent to those in New Zealand.