Legal
Last updated: 17 June 2026
UK Underground ("we", "us", "the Platform") operates an online music platform. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For data protection enquiries, contact our Data Controller at: privacy@ukunderground.co.uk
Account data: Email address, artist handle, and authentication credentials when you register.
Age verification: We collect your birth year at registration solely to verify you meet the 18+ age requirement. We store only the result (age band: 18+ or under-18) and verification timestamp — your birth year is discarded immediately after the check.
Purchase data: Track and merchandise purchase records, payment amounts, and Stripe payment references. We do not store card numbers — all payment processing is handled by Stripe, Inc.
Usage data: Stream logs, playlist activity, and platform interaction events for analytics and fraud prevention purposes.
Communications: Support tickets and messages you send to us.
Contract: Processing necessary to provide the platform service you signed up for (account management, purchase fulfilment, artist payouts).
Legal obligation: Financial records retained for 6 years as required by HMRC. Age verification as required by the UK Online Safety Act 2023.
Legitimate interests: Fraud detection, platform security, and abuse prevention.
Consent: Advertising cookies (Google AdSense), where you have given explicit consent via our cookie banner.
We use your data to: provide and improve the platform; process purchases and disburse artist earnings; detect and prevent fraud; comply with legal obligations; respond to support requests; and (with your consent) display relevant advertising.
We do not sell your personal data to third parties.
Stripe, Inc.: Payment processing. Stripe is PCI-DSS compliant and processes card data under its own privacy policy.
Supabase, Inc.: Database and authentication infrastructure. Data is stored on EU/UK servers.
Google LLC: Advertising (AdSense), only where you have consented to advertising cookies.
We may disclose data where required by law, including to law enforcement or the Information Commissioner's Office (ICO).
Account data is retained for the duration of your account and deleted within 30 days of account closure, unless a retention obligation applies.
Purchase and financial records are retained for 6 years from the date of transaction as required by HMRC.
Age verification records are retained for 12 months and then refreshed. The underlying birth year is never stored.
Under UK GDPR you have the right to: access a copy of your personal data (Subject Access Request); correct inaccurate data; request deletion of your data (right to erasure); receive your data in a portable format (data portability); object to processing based on legitimate interests; withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at privacy@ukunderground.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the ICO at ico.org.uk.
Essential cookies: Authentication session cookies required for the platform to function. These do not require consent.
Advertising cookies: Google AdSense cookies, used only where you have given explicit consent via our cookie consent banner. You can withdraw consent at any time by clearing your browser cookies and declining on the next visit.
We use industry-standard measures to protect your data, including encrypted connections (HTTPS), database-level row security policies, and regular credential rotation. In the event of a personal data breach, we will notify affected users and the ICO within 72 hours where required by UK GDPR.
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify registered users of material changes by email at least 14 days before they take effect.
Data protection enquiries: privacy@ukunderground.co.uk
ICO (UK supervisory authority): ico.org.uk · 0303 123 1113