Privacy Policy

Reggae Folk is the trading name of Andy Jamma, a music artist and digital content seller based in Bath, Somerset, UK. We operate the website reggaefolk.com and sell digital music downloads (MP3 and WAV files) directly to customers worldwide.

Data controller: Andy Jamma trading as Reggae Folk

Email: [email protected]

Address: Bath, Somerset, United Kingdom

We may collect the following categories of personal data:

•Contact information — name and email address when you sign up to our newsletter or contact us directly.

•Purchase information — name, email address, and billing details when you purchase a digital product. Payment card data is processed by GoDaddy Payments or PayPal and is never stored on our servers.

•Usage data — IP address, browser type, pages visited, and time spent on site, collected automatically via server logs and analytics tools.

•Communications — any messages you send us via email or contact forms.

We use your personal data for the following purposes:

•To process and fulfil your digital product orders (contractual necessity).

•To send you order confirmations and download links (contractual necessity).

•To send you our newsletter and promotional emails, where you have opted in (consent — you may withdraw at any time).

•To respond to your enquiries and support requests (legitimate interest).

•To improve our website and understand how visitors use it (legitimate interest).

•To comply with legal obligations, including tax and financial record-keeping.

All payment transactions are processed securely by our payment partners:

•GoDaddy Payments — for digital product purchases via our online store. GoDaddy's privacy policy applies to data processed through their checkout.

•PayPal — for voluntary donations made via the Donate button on our homepage. PayPal's privacy policy applies to data processed through their platform.

We do not store, log, or have access to your full payment card details at any point.

Our website uses cookies to ensure it functions correctly and to understand how it is used. These include:

•Essential cookies — required for the site to operate (e.g. cart session, security tokens).

•Analytics cookies — used to measure traffic and page performance. These may be set by third-party tools.

You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.

We do not sell your personal data. We may share it with:

•GoDaddy — our website hosting, commerce, and payments provider.

•PayPal — when you make a donation.

•Email service providers — to send transactional and newsletter emails.

•Legal authorities — where required by law or to protect our rights.

All third parties are required to handle your data securely and in accordance with applicable data protection law.

We retain your personal data only for as long as necessary:

•Purchase records are kept for 7 years to comply with HMRC tax requirements.

•Newsletter subscriber data is kept until you unsubscribe.

•Contact enquiries are kept for up to 2 years.

•Website usage logs are retained for up to 12 months.

As a UK resident (or EU resident where applicable), you have the following rights:

•Right of access — request a copy of the personal data we hold about you.

•Right to rectification — ask us to correct inaccurate or incomplete data.

•Right to erasure — ask us to delete your data where there is no lawful reason to retain it.

•Right to restrict processing — ask us to limit how we use your data.

•Right to data portability — receive your data in a structured, machine-readable format.

•Right to object — object to processing based on legitimate interests or for direct marketing.

•Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption for all data in transit. Payment processing is handled by PCI-DSS compliant third-party providers.

Some of our third-party service providers (including GoDaddy and PayPal) may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions recognised by the UK ICO.

Our website and digital products are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: [email protected]

Address: Bath, Somerset, United Kingdom