Privacy Policy

This Privacy Policy explains how Interwebz Records (“we”, “us”, “the label”) handles personal data on this website. It is written for how the site actually works. We process personal data in line with the EU General Data Protection Regulation (GDPR), the Data Protection Act 2018, and, for cookies and similar technology, the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011.

Who we are

Interwebz Records is the data controller for personal data collected through this website. We are an independent record label. For privacy questions or to exercise your rights, use the Contact page on this site. If an email address is published there, you may also write to us directly.

What we collect

We only collect personal data when you choose to send it, or when it is needed to run and protect the site. You do not have to give us personal data to browse the public pages. Completing the contact form is voluntary, but we cannot reply without the details the form asks for.

Contact form

If you submit the contact form, we receive the name, email address, subject, and message you enter, together with the time of submission. We store that submission so we can read it and reply, and we also send a copy by email to the label inbox via Resend. Before you send the form you must tick the consent box. A hidden field is used only to catch automated spam; if it is filled in, the submission is discarded and not stored or emailed.

Technical data

When you send a message, our server may see your IP address for a short time to limit spam and abuse (a small number of requests per minute). That address is held in server memory for the rate-limit window only. It is not saved with your message in our content system.

What we do not collect

• We do not run advertising, analytics, or social-media tracking pixels on this site.
• We do not create marketing lists or send promotional email from contact form submissions.
• Background music and interface sounds play in your browser only. They are not used to identify you.
• We do not make automated decisions or profile you.

Why we use your data and our legal bases

We use contact form data to answer you and to handle label or artist enquiries. The legal basis is your consent (GDPR Article 6(1)(a)), which you give by ticking the box and sending the form. Where you ask us to take steps toward working together (for example an artist or release enquiry), we may also rely on Article 6(1)(b) — processing needed to take steps at your request before a contract. We use the IP address seen at the moment of sending to protect the form against spam and abuse. That is our legitimate interest (Article 6(1)(f)). You may object to that processing; see “Your rights” below.

You may withdraw consent at any time by contacting us and asking us to delete your message. Withdrawal does not affect processing already carried out. We may still keep a message where we must, for example to deal with a dispute, a legal claim, or a request from a public authority.

Where it is stored

Contact messages are stored in our Sanity content backend so the label can read them. Public site content such as artist names and artwork is also hosted there; that is editorial content, not your private form data. Hosting, DNS, and content delivery for the website are provided by our infrastructure partners. They process data only on our instructions, to run the service.

Transfers outside the EEA

Some of our processors are established outside the European Economic Area, or may access data from outside the EEA (including the United States). Where personal data is transferred outside the EEA, we rely on an adequacy decision of the European Commission where one applies, or on appropriate safeguards such as the Commission’s Standard Contractual Clauses, as required by Chapter V GDPR.

How long we keep it

We keep contact messages for as long as needed to reply and follow up, and then for up to 24 months, unless we still need a message for an ongoing conversation, a legal obligation, or to defend the label against abuse or a claim. After that we delete or anonymise it. Rate-limit records of IP addresses are not retained beyond the short in-memory window described above.

Who we share it with

We do not sell your data. We do not share contact form messages with other labels, advertisers, or social networks. People who operate the site (label staff and technical contractors acting on our instructions) may see a message in order to answer it. Processors such as Sanity, Resend (email delivery), and our host see data only as needed to store, deliver, and reply to messages. We will share data if Irish or EU law requires it, or with a competent authority where we must.

Cookies and similar technology

This public site does not use advertising or analytics cookies. Under the ePrivacy Regulations 2011, we do not set non-essential cookies. If someone opens the site in CMS preview / draft mode, a short-lived preview cookie may be set so unpublished content can be checked. That cookie is used only to operate draft preview. Ordinary visitors are not placed in draft mode.

Your rights

Under the GDPR and the Data Protection Act 2018 you may ask us to: access the personal data we hold about you; have inaccurate data corrected; have data erased in the cases the law allows; restrict how we use it; receive data you gave us in a structured, commonly used format (data portability); object to processing based on legitimate interests; and withdraw consent. We will respond within one month, or explain if we need more time as the GDPR allows. To make a request, use the Contact page and say what you need. We may need to confirm your identity before we act.

Complaints

If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to lodge a complaint with the Data Protection Commission, which is Ireland’s supervisory authority:

Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland.

Website: www.dataprotection.ie. You may also use the DPC’s online complaint form.

Children

This site is aimed at artists and listeners, not at children. Under section 31 of the Data Protection Act 2018, the age of digital consent in Ireland is 16. Do not use the contact form if you are under 16.

Other sites

Links to Spotify, Apple Music, Instagram, or an external artist dashboard leave this site. We are not the controller for those services and are not responsible for how they handle your data. Read their policies before you sign in or submit information there.

Changes

We may update this policy if the site or the law changes. The “Last updated” date at the top will change when we do. If a change affects how we process contact form data we already hold, we will not rely on old consent for a new purpose — we will ask again where the GDPR requires it.