Legal
Last updated: 13 August 2026
M1xer (“we”, “us”, “the Platform”) is a trading name of [COMPANY NAME] Ltd, a company registered in England and Wales (Company No. [TO BE CONFIRMED]). We operate an online music platform. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We are the data controller for the personal data described in this policy. ICO Registration No.: [TO BE CONFIRMED — register at ico.org.uk before processing personal data commercially].
Registered address: [TO BE CONFIRMED]
For data protection enquiries: nichesolutions6@gmail.com
Account data: Email address, artist handle, and authentication credentials when you register.
Age verification: We collect your birth year at registration solely to verify you meet the 18+ age requirement. We store only the result (age band: 18+ or under-18) and verification timestamp — your birth year is discarded immediately after the check.
Purchase data: Track and merchandise purchase records, payment amounts, and Stripe payment references. We do not store card numbers — all payment processing is handled by Stripe, Inc.
Usage data: Stream logs, playlist activity, and platform interaction events for analytics, fraud prevention, and feed personalisation.
Location data: Approximate city and country derived from your IP address at login and during streaming. We do not collect GPS or precise location. This is used for geo-analytics, fraud detection, and compliance with regional content restrictions.
Communications: Support tickets and messages you send to us.
Contract: Processing necessary to provide the platform service you signed up for (account management, purchase fulfilment, artist payouts).
Legal obligation: Financial records retained for 6 years as required by HMRC. Age verification as required by the UK Online Safety Act 2023.
Legitimate interests: Fraud detection, platform security, abuse prevention, feed personalisation, and geo-analytics (approximate city and country derived from IP address). For personalisation, we process your listening history (genres played, tracks completed or skipped) to rank music you are more likely to enjoy. This processing is limited to aggregate taste signals derived from your own activity; no individual data is shared with third parties for this purpose. You can opt out at any time by contacting us at nichesolutions6@gmail.com.
Consent: Advertising cookies (Google AdSense), where you have given explicit consent via our cookie banner.
We use your data to: provide and improve the platform; process purchases and disburse artist earnings; detect and prevent fraud; comply with legal obligations; respond to support requests; and (with your consent) display relevant advertising.
We do not sell your personal data to third parties.
We share personal data only with processors and recipients described below. We have entered into written Data Processing Agreements (DPAs) under Article 28 UK GDPR with each processor marked ✦.
Stripe, Inc. ✦ Payment processing. Stripe is PCI-DSS compliant and processes card data under its own privacy policy and our Art. 28 DPA (stripe.com/legal/dpa).
Supabase, Inc. ✦ Database and authentication infrastructure. Data is stored on EU/UK servers under our Art. 28 DPA (supabase.com/privacy).
Google LLC: Advertising (AdSense), only where you have consented to advertising cookies. Google processes data under the Google Ads Data Processing Terms.
We may disclose data where required by law, including to law enforcement or the Information Commissioner's Office (ICO).
We do not transfer personal data outside the UK/EEA without appropriate safeguards (Standard Contractual Clauses or UK Addendum as applicable).
The table below sets out how long we keep each category of personal data:
Account data — retained for the duration of your account and deleted within 30 days of account closure, unless a retention obligation applies.
Purchase and financial records — retained for 6 years from the date of transaction as required by HMRC.
Age verification records — retained for 12 months (result only: age band + timestamp). The underlying birth year is never stored.
Stream logs and usage analytics — retained for 12 months from collection, then aggregated and anonymised. Anonymised aggregate data may be retained indefinitely.
Location data (IP-derived city/country) — retained for 12 months, then anonymised into aggregate geo-statistics.
Support communications — retained for 3 years from the date of last contact, to resolve any related complaints or disputes.
Advertising consent records — retained for 3 years from the date consent was given or withdrawn, as required to demonstrate compliance.
Where a legal obligation requires longer retention, we retain the data for the required period only.
Under UK GDPR you have the right to: access a copy of your personal data (Subject Access Request); correct inaccurate data; request deletion of your data (right to erasure); receive your data in a portable format (data portability); object to processing based on legitimate interests; withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at nichesolutions6@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the ICO at ico.org.uk.
Essential cookies: Authentication session cookies required for the platform to function. These do not require consent.
Advertising cookies: Google AdSense cookies, used only where you have given explicit consent via our cookie consent banner. You can withdraw consent at any time by clearing your browser cookies and declining on the next visit.
We use industry-standard measures to protect your data, including encrypted connections (HTTPS), database-level row security policies, and regular credential rotation. In the event of a personal data breach, we will notify affected users and the ICO within 72 hours where required by UK GDPR.
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify registered users of material changes by email at least 14 days before they take effect.
Data Controller: M1xer (trading name of [COMPANY NAME] Ltd)
Registered address: [TO BE CONFIRMED]
ICO Registration No.: [TO BE CONFIRMED]
Data protection enquiries: nichesolutions6@gmail.com
ICO (UK supervisory authority): ico.org.uk · 0303 123 1113