Privacy Policy
Last updated: 30 September 2026
This policy explains how Samu Soul collects and uses your personal data when you visit this site or buy from us, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The data controller is:
- Business: Marvin Yeboah trading as Samu Soul (sole trader)
- Address: 4 Davey Gardens, Barking, IG11 0FB, United Kingdom
- Email: hello@samu-soul.com
ICO registration number: [ICO REGISTRATION NUMBER]. For privacy questions contact hello@samu-soul.com.
2. The data we collect
- Order data: name, artist name, email address, country, items bought, licence tier, order number, date and amount. This is needed to deliver your files and issue your licence.
- Payment data: handled directly by our payment processors (Stripe, PayPal). We receive confirmation of payment and limited details (e.g. card type, last four digits) but never your full card number.
- Contact data: anything you send via our contact form or email, including offers for exclusive rights.
- Newsletter data: your email address if you subscribe.
- Technical data: IP address, browser and device type, pages viewed and referral source, collected through server logs and (only with your consent) analytics cookies.
- Local storage: your cart contents, player volume and cookie choices are stored in your own browser, not on our servers.
3. How and why we use your data (lawful bases)
| Purpose | Lawful basis |
|---|---|
| Processing your order, delivering downloads, issuing and keeping a record of your licence | Contract |
| Keeping transaction records for tax and accounting (HMRC) | Legal obligation |
| Answering enquiries and negotiating exclusive deals | Contract / legitimate interests |
| Checking licence compliance (e.g. that releases credit the producer) and preventing fraud | Legitimate interests |
| Sending our newsletter and marketing emails | Consent (withdraw any time via the unsubscribe link) |
| Analytics cookies to understand how the site is used | Consent |
4. Who we share your data with
We never sell your data. We share it only with service providers who help us run the store, under contracts that require them to protect it:
- Payment processors: Stripe Payments Europe Ltd / Stripe, Inc. and PayPal (Europe) S.à r.l. et Cie, S.C.A. Each is an independent controller for payment and fraud-prevention data; see their own privacy policies.
- Hosting and file delivery: [HOSTING PROVIDER, e.g. Vercel Inc. / Netlify] and [FILE STORAGE PROVIDER, e.g. Cloudflare R2 / AWS].
- Email: [TRANSACTIONAL EMAIL PROVIDER] for order emails and [NEWSLETTER PROVIDER] for marketing emails.
- Analytics (only if you consent): [ANALYTICS PROVIDER, e.g. Plausible / Google Analytics].
- Professional advisers, and authorities where required by law.
5. International transfers
Some providers may process data outside the UK (for example in the EU or USA). Where they do, we rely on UK adequacy regulations, the UK International Data Transfer Agreement/Addendum, or the UK Extension to the EU-US Data Privacy Framework to keep your data protected.
6. How long we keep your data
- Order and licence records: for the length of the licence term plus 6 years, so we can verify your licence and meet tax obligations.
- Enquiries: up to 2 years after our last contact.
- Newsletter: until you unsubscribe.
- Analytics data: up to 26 months.
7. Your rights
You have the right to access, correct, erase, restrict or object to the use of your personal data, the right to data portability, and the right to withdraw consent at any time. Some rights have exceptions (for example, we must keep order records for tax purposes). To exercise a right, email hello@samu-soul.com. We'll respond within one month.
8. Cookies
See our Cookie Policy for details of the cookies and similar technologies we use and how to control them.
9. Security and children
We use HTTPS, reputable providers and access controls to protect your data. Our store is not directed at children under 13 and we do not knowingly collect their data.
10. Complaints
If you're unhappy with how we've handled your data, please contact us first. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, 0303 123 1113.