Privacy Policy

Last updated: 28 October 2026

1. Who we are

CNB Records ("we", "us", "our") is a UK independent record label and artist development agency. We have no physical office open to the public and operate digitally. For any question about this policy or your personal data, contact us at cnbrecordsltd@gmail.com.

2. What data we collect

We only collect personal data that you give us directly. Depending on how you use the site, this may include:

  • Your name and email address, if you contact us or submit a demo through one of our forms;
  • Any links, audio files or messages you choose to include with a submission or enquiry (e.g. music links, an uploaded track, genre, "why CNB");
  • Basic technical server-log data collected automatically by our hosting provider (Hostinger), such as IP address, browser type, referring page and timestamp, for security and technical operation only.

We do not use analytics, advertising trackers or third-party marketing pixels on this site.

3. Why we process your data and our legal basis

  • Responding to submissions and enquiries: legitimate interests (Art. 6(1)(f) UK GDPR), so we can consider your music and reply to you.
  • Operating and securing the website: legitimate interests, via our hosting provider's server logs.

We never sell your personal data, and we only share it with the service providers strictly needed to receive your submission (see Section 4).

4. Submission form and service providers

When you send us your music through the submit form, the following providers handle your data on our behalf:

  • Formspree (Formspree, Inc., United States) receives the details you type into the form and forwards them to our inbox. Read their privacy policy.
  • Hostinger, our web host, stores any audio file you upload. The file is saved on our server under a random name, is not publicly listed, and is reachable only through a private link that we receive with your submission.
  • Google (Gmail) hosts the inbox your submission is delivered to.

Formspree and Google may process data outside the UK, including in the United States. Where they do, they rely on recognised safeguards for international transfers, such as the UK International Data Transfer Addendum or standard contractual clauses.

To protect the form from spam and abuse, we use a hidden honeypot field, a minimum-fill-time check, and a short-lived upload limit per visitor. For that limit we store a one-way hash of your IP address, never the address itself.

5. Cookies and local storage

This site does not set tracking or advertising cookies. Your chosen accent colour (a small visual preference) is stored locally in your browser via localStorage, not as a cookie. It never leaves your device and is never sent to us.

6. How long we keep your data

We keep submission and enquiry emails only for as long as needed to consider your music or respond to your question, and delete them once that purpose has been served, unless you ask us to keep in touch. Uploaded audio files are deleted from our server automatically after 90 days. Hosting server logs are retained for a limited period for security purposes by our hosting provider.

7. Your rights

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

  • Ask us what personal data we hold about you and receive a copy of it (access);
  • Ask us to correct inaccurate data (rectification);
  • Ask us to delete your data (erasure);
  • Object to, or ask us to restrict, our processing of your data;
  • Ask for your data in a portable format.

To exercise any of these rights, email us at cnbrecordsltd@gmail.com. We will respond within one month.

8. Complaints

If you're unhappy with how we've handled your personal data, you can complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113. We'd appreciate the chance to put things right first, so please contact us directly beforehand.

9. Changes to this policy

We may update this policy as the site and our services evolve (for example, if we change form provider or start using analytics). The "last updated" date above will always reflect the latest version.