Privacy Policy

Song For You is a trading identity of SMEATON & CO LTD ("we", "our", "us"), registered in England and Wales (Company No: 07409342). We are the data controller for the personal data you provide to us.

Registered Office: 70 Market Street, Dalton-In-Furness, England, LA15 8AA

Email: hello@songforyou.co.uk

We collect the following categories of personal data:

• Identity Data: Your name and email address, and phone number if provided
• Order Data: Recipient details, occasion type, personal stories, memories, and preferences you share to create your song, including any personal details about third parties (such as the song recipient) that you choose to include in your brief
• Financial Data: Payment information processed securely through Stripe (we do not store your card details)
• Technical Data: IP address, browser type, device information, and cookies
• Usage Data: Information about how you use our website and services
• Marketing Data: Your preferences for receiving direct marketing communications from us

Under the UK General Data Protection Regulation (UK GDPR), we must have a lawful basis to process your personal data. We rely on the following lawful bases:

3.1 Contract Performance

We process your Identity Data and Order Data to fulfil our contract with you — namely, to create and deliver your personalised song. Without this data, we cannot provide our services.

3.2 Legitimate Interests

We process Technical Data and Usage Data for our legitimate interests in operating, maintaining, and improving our website and services, provided these interests do not override your fundamental rights and freedoms.

3.3 Consent

We only send direct marketing emails with your explicit consent. You can withdraw this consent at any time by clicking "unsubscribe" in any marketing email or by contacting us directly at hello@songforyou.co.uk.

Please note that by placing an order you separately grant us a licence to use your produced song for marketing and promotional purposes (for example, on our website, YouTube channel, or social media), as set out in our Terms of Service. This use of produced songs is distinct from direct email marketing and operates under a separate lawful basis. You may opt out of this at any time by contacting hello@songforyou.co.uk.

3.4 Legal Obligation

We may process your data to comply with legal requirements, such as tax record-keeping obligations under HMRC rules.

We use your personal data to:

• Create your personalised, bespoke song based on the stories and memories you provide
• Handle personal details about third parties (such as the song recipient) that you share as part of your order brief, solely for the purpose of creating and delivering your song — such details are not used for any other purpose and are not shared beyond what is strictly necessary for production and delivery
• Process payments and deliver your order
• Send order confirmations, status updates, and delivery notifications
• Provide customer support and respond to your enquiries
• Improve our services and website functionality
• Send direct marketing communications about our products and offers, where you have given explicit consent
• Prevent fraud and ensure the security of our services

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit using SSL/TLS
• Secure payment processing through PCI-DSS compliant Stripe
• Regular security assessments and updates
• Access controls limiting data access to authorised personnel only

We do not sell your personal data. We may share your data with the following categories of third parties:

• Payment Processors: Stripe processes payments on our behalf and is independently responsible for the security of payment data
• Email Service Providers: We use Resend to deliver transactional and marketing emails on our behalf
• Hosting Providers: Our website and data are hosted on secure cloud infrastructure
• Legal and Regulatory Authorities: Where required by law or to protect our legal rights

All third-party service providers are contractually bound to protect your data and to process it only on our instructions. A current list of our sub-processors is available on request by emailing hello@songforyou.co.uk.

Your personal data may be transferred to and processed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office, or transfers to countries with an adequacy decision. For further information about the safeguards in place, please contact us at hello@songforyou.co.uk.

We use cookies and similar technologies to enable the website to function and to improve your experience.

• Essential Cookies: Required for the website to operate correctly. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our site. These require your consent before being set.
• Marketing Cookies: Used to deliver relevant content and advertising. These require your explicit consent before being set.

When you first visit our website, you will be asked for your consent to non-essential cookies via our cookie banner. You can change your cookie preferences at any time using the cookie settings link in the footer. Withdrawing consent for non-essential cookies will not affect the functionality of the website for placing and managing orders. You can also control cookies through your browser settings, though this may affect your experience.

Under the UK General Data Protection Regulation, you have the following rights regarding your personal data:

9.1 Right of Access

You can request a copy of the personal data we hold about you.

9.2 Right to Rectification

You can request that we correct any inaccurate or incomplete data.

9.3 Right to Erasure

You can request deletion of your personal data in certain circumstances (also known as the "right to be forgotten").

9.4 Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances.

9.5 Right to Data Portability

You can request to receive your data in a structured, commonly used, machine-readable format.

9.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will stop processing your data for that purpose immediately.

9.7 Right to Withdraw Consent

Where we rely on consent as our lawful basis, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

9.8 Automated Decision-Making

We do not use solely automated decision-making, including profiling, that produces legal or similarly significant effects on you. All order production and fulfilment decisions involve human review by our team.

To exercise any of these rights, please contact us at hello@songforyou.co.uk. We will respond within one calendar month of receiving your request. For complex or multiple requests, we may extend this period by up to two further months, in which case we will notify you within the first month.

We retain your personal data for the following periods:

• Order Data: Retained for 7 years to comply with HMRC tax record-keeping requirements
• Account Data: Retained until you request deletion or close your account
• Marketing Data: Retained until you unsubscribe or withdraw consent
• Technical Data: Generally retained for up to 2 years for analytics and security purposes

After the applicable retention period, data is securely deleted or anonymised so that it can no longer be linked to you.

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected personal data from someone under 18, please contact us immediately at hello@songforyou.co.uk and we will take prompt steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date at the top of this document. We encourage you to review this policy periodically.

If you have concerns about how we handle your personal data, please contact us first at hello@songforyou.co.uk so we can try to resolve the issue directly.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

For questions about this Privacy Policy, to exercise your data protection rights, or for any other privacy-related enquiries, please contact us:

Email: hello@songforyou.co.uk

Post: Song For You (SMEATON & CO LTD), 70 Market Street, Dalton-In-Furness, England, LA15 8AA