[[Resonate Studios]]
Last updated: 04 November 2026
UK GDPRData Protection Act 2018PECR (Cookies)Google AdSense
In plain English: we run a music and creator platform.
We collect only what we need to run it, we never sell your personal data,
and we show ads through Google AdSense (which uses cookies — you can turn
those off in your Google settings). You can ask us to see, correct, or
delete your data at any time by emailing
privacy@jaysoftware.co.uk.
1. Who we are
[[Resonate Studios]] (“we”,
“us”, “our”) operates ITS (In The Shot)
at www.jaysoftware.co.uk
and its sub-paths, including /af/music/ (the “Service”).
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the
Data Protection Act 2018, we are the data controller of the
personal data described in this policy.
Postal address:
[52 Colchester Avenue, E12 5LE, United Kingdom]
Account data — name, email address, password (hashed), role (Shopper / Creator / Admin), and profile details you choose to add.
Content you upload — music tracks, cover art, podcast audio, video URLs, store listings, and any text you submit.
Payment-related data — billing name and email passed to PayPal. We do not store full card numbers. Card data is handled by PayPal under its own privacy policy.
Communications — messages you send us, support requests, and job applications.
2.2 Information collected automatically
Usage data — pages visited, tracks played, share-button clicks, referral source (ref/src parameters), and approximate session length.
Device & technical data — IP address, browser type and version, operating system, device type, and screen size.
Approximate location — derived from your IP address (country, region, city, and ISP name). We do not collect precise GPS location.
PayPal — payment status, transaction ID, and subscription status.
Google AdSense — aggregated ad performance and, where you consent, advertising identifiers.
Social platforms — if you share content, we receive the fact that a share occurred and the platform name (e.g. Facebook, X, WhatsApp), not your social credentials.
3. How we use your data
Purpose
Data used
Create and manage your account
Name, email, hashed password, role
Deliver the Service (play tracks, host stores, process orders)
Account data, uploaded content, usage data
Process payments and payouts
Billing name/email, transaction data via PayPal
Provide analytics and attribution (e.g. which shares drive plays)
IP address, referral parameters, aggregate usage
Show advertising and keep it relevant
Cookies, advertising identifiers (with consent)
Detect fraud, abuse, and security incidents
IP address, device data, session data
Comply with legal obligations (tax, consumer law)
Transaction and identity records
Respond to your enquiries and complaints
Contact details, message contents
We do not sell your personal data.
4. Lawful bases for processing
Under UK GDPR Article 6, we rely on the following lawful bases:
Contract — to provide the Service you signed up for (account, playback, purchases).
Legitimate interests — to keep the Service secure, prevent fraud, and understand aggregate usage. We balance these against your rights.
Consent — for non-essential cookies (including personalised advertising). You can withdraw consent at any time via the cookie banner or your Google settings.
Legal obligation — to retain records required by tax and consumer law.
Where we process special category data (we generally do not), we would rely on
your explicit consent under Article 9.
5. Cookies
Cookies are small text files stored on your device. We use them to keep you
logged in, remember preferences (such as your background-video choice), measure
usage, and — where you consent — serve personalised advertising.
Category
Purpose
Consent
Strictly necessary
Session, login, CSRF protection, security
Not required
Preferences
Remembering settings (e.g. video background, volume)
Not required (functional)
Analytics
Understanding which pages/tracks are used
Required
Advertising
Google AdSense personalisation and frequency capping
Required
You can control cookies through your browser settings. Blocking strictly
necessary cookies will break login and playback. To manage advertising
cookies specifically, see Section 6.
6. Google AdSense and third-party advertising
Required disclosure. This section is the exact disclosure Google
requires on sites displaying AdSense ads. Do not remove it while ads are live.
We use Google AdSense to display advertising on parts of the
Service. Third-party vendors, including Google, use cookies to serve ads based
on your prior visits to this and other websites.
6.1 Google’s use of advertising cookies
Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the Internet.
Google may use the DoubleClick DART cookie and similar technologies for this purpose.
You may opt out of personalised advertising by visiting
Google Ads Settings.
Other third-party vendors and ad networks may also serve ads on the Service.
Where required, we obtain consent through a Google-certified consent management
platform (CMP) before any personalised advertising cookie is set. For more
information, see
How Google uses information from sites that use its services.
Google (AdSense, Analytics) — for advertising and measurement, as described in Section 6.
Our email provider — to send you transactional email (receipts, password resets). Messages are not used for marketing without your consent.
Our hosting provider — who store data on our behalf under a data-processing agreement.
Law enforcement or regulators — where required by law, or to protect our legal rights.
A successor entity — if we are bought, merged, or restructured, your data may transfer to the new controller, who will remain bound by this policy.
We do not sell personal data to anyone.
8. International transfers
Some of our processors (notably Google and PayPal) are based in the United
States. Where personal data is transferred outside the UK, we rely on:
the UK Government’s adequacy regulations (including the UK–US Data Bridge, where applicable); or
the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses; or
another lawful transfer mechanism permitted under UK GDPR Chapter V.
You can ask us for a copy of the relevant safeguards by emailing the address in Section 14.
9. How long we keep your data
Data
Retention
Account data
Until you close your account, then 30 days, then deleted (except as below)
Uploaded content (tracks, covers, stores)
Until you delete it, then removed from public view immediately; backups purged within 90 days
Transaction records
6 years (UK tax and accounting law)
Analytics / click logs
Raw views 90 days; aggregated summaries indefinitely (no personal identifiers)
IP-geolocation cache
12 months, then refreshed or deleted
Support emails
24 months from last contact
Server access logs
90 days
10. Your rights
Under UK GDPR you have the right to:
Access — request a copy of the personal data we hold about you.
Rectification — correct inaccurate or incomplete data.
Erasure — ask us to delete your data (“right to be forgotten”), subject to legal retention obligations.
Restriction — ask us to limit how we use your data.
Portability — receive your data in a machine-readable format.
Objection — object to processing based on legitimate interests, including profiling.
Withdraw consent — at any time, for processing based on consent (this does not affect processing already carried out).
Not to be subject to solely automated decisions with legal or significant effects — we do not make such decisions.
To exercise any right, email
privacy@jaysoftware.co.uk
with enough information for us to identify you. We will respond within
one month, extendable by two months for complex requests
(we will tell you if so).
We may need to verify your identity before acting. We will not charge a fee
unless a request is manifestly unfounded or excessive.
You also have a right to lodge a complaint with the Information
Commissioner’s Office (ICO) — see Section 14.
11. Security
We protect your data with measures including: HTTPS on all pages, hashed
passwords, CSRF protection on forms, rate limiting on authentication and
receipt lookups, prepared SQL statements, and restricted access to production
systems. No system is perfectly secure; if a breach is likely to affect your
rights, we will notify you and the ICO as required by law.
12. Children
The Service is not directed at children under 13. We do not knowingly collect
personal data from children under 13. If you believe a child has provided us
with personal data, contact us and we will delete it. In the UK, users under 18
should use the Service with the consent of a parent or guardian.
13. Changes to this policy
We may update this policy from time to time. The “Last updated”
date at the top of this page shows when it was last revised. Material changes
will be announced on the Service or by email where appropriate. Continued use
after the effective date means you accept the updated policy.
14. Contact & complaints
Questions, requests, or complaints about this policy or your data:
Email: privacy@jaysoftware.co.uk
Post:
[52 Colchester Avenue, E12 5LE, United Kingdom]
If you are not satisfied with our response, you have the right to complain to
the UK Information Commissioner’s Office: