Your information
Privacy policy
Last updated 21 July 2026
This site collects only the information needed to answer messages, protect the contact form and operate the website responsibly. It does not sell personal information or add contact-form users to a mailing list.
Who is responsible
IAMBROON is the controller of personal information collected through this website. Questions about this policy or requests concerning your information can be sent to hello@iambroon.music.
Information collected
When you make contact
If you use the contact form or send an email, the information received may include your name, email address, optional subject, message and any information you choose to include.
When you join the mailing list
If you sign up for news about new music, your email address is emailed to IAMBROON and then added by hand to a mailing list held with Brevo, the service used to send those emails. Nothing else about you is collected at sign-up. Signing up is optional and is never required to use the site or to make contact.
Technical and security information
The website and its security providers may process limited technical information such as IP address, browser and device information, request timestamps, referring page, security signals and the result of an anti-bot check. This is used to deliver the site, prevent abuse and keep the contact form secure.
Measurement information
Google Tag Manager is installed to manage website measurement. Analytics storage is denied until you choose “Accept analytics”. If you consent, Google Analytics may use first-party cookies to distinguish visitors and sessions and measure how the site is used. Advertising storage, advertising user data and advertising personalisation remain denied in every state. Limited cookieless signals may be sent by consent-aware Google tags while analytics storage is denied.
How and why information is used
- To read, respond to and manage enquiries.
- To discuss collaborations, licensing, press enquiries or other requested arrangements.
- To send occasional emails about new music, where you have signed up for them.
- To detect spam, automated submissions, misuse and security incidents.
- To operate, diagnose and improve the reliability of the website.
- To meet legal obligations and establish, exercise or defend legal claims where necessary.
The principal lawful basis is legitimate interests: communicating with people who contact IAMBROON and protecting the website. Where an enquiry asks for steps before entering an agreement, processing may also be necessary to take those steps. Consent is the basis for optional analytics storage and for mailing-list emails. Analytics consent can be withdrawn at any time through “Cookie choices” in the footer, and mailing-list consent through the unsubscribe link in any email.
Who information is shared with
Information is shared only where needed with service providers that host, secure or support the website and its email delivery. These include Cloudflare for hosting, security and Turnstile anti-bot checks, Google for Tag Manager, Brevo for the optional mailing list, and the email services used to receive and answer messages. If you choose to load a Spotify preview player on a song, Spotify receives your IP address under its own terms.
Personal information may also be disclosed if required by law or reasonably necessary to protect legal rights, safety or the security of the website. It is not sold.
Some providers may process information outside the UK. Where this happens, the provider’s recognised transfer mechanism and contractual safeguards are relied upon. See Cloudflare’s privacy policy, its Turnstile Privacy Addendum and Google’s privacy policy.
How long information is kept
Contact messages are normally retained for no longer than 24 months after the last meaningful contact, unless they need to be kept longer for an active project, contractual, accounting, legal or dispute-resolution reason. Unneeded messages are deleted. Mailing-list details are kept until you unsubscribe, after which the mailing-list provider retains a suppression record so you are not contacted again. Security and infrastructure records are retained according to the relevant provider’s standard retention periods.
How information is protected
Reasonable technical and organisational measures are used to protect information, including encrypted HTTPS connections, restricted access to the destination inbox, input validation, an anti-spam field and server-side Cloudflare Turnstile verification. No online service can guarantee absolute security.
Your rights
Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase or restrict use of your personal information; object to processing; or receive certain information in a portable format. You may also withdraw consent where processing relies on consent.
To exercise a right, email hello@iambroon.music. Reasonable information may be requested to confirm your identity. You also have the right to complain to the Information Commissioner’s Office.
Children
This website is not directed at children and does not knowingly seek to collect children’s personal information.
Changes to this policy
This page may be updated when the website, its services or legal requirements change. The latest revision date will appear near the top of the page.