Privacy Policy

If the way Crowd Notes is operated changes, including if it becomes operated through a company, this policy will be updated accordingly.

Crowd Notes is currently operated by Dylan Parry.

If you have a question about your personal information or this Privacy Policy, you can contact us through the Crowd Notes contact page or at crowdnotes1@gmail.com.

Depending on how you use Crowd Notes, we may collect the following information.

Account and profile information

When you create an account, we may collect:

• your email address;
• display name;
• username;
• profile photo;
• biography;
• location information that you choose to provide;
• favourite genres and artists; and
• other profile information you choose to add.

Your email address is not displayed publicly.

Your concert diary

When you use Crowd Notes, we may store information about:

• concerts, festivals and events you have attended;
• artists and venues associated with those events;
• ratings and reviews;
• comments and other interactions;
• favourites and follows;
• statistics generated from your activity; and
• other information you choose to add to your diary.

Photos

If you upload photographs to Crowd Notes, we store the photographs and associate them with the relevant content in your account.

Where you make the associated profile, review or concert content public, the relevant photographs may also be publicly accessible.

You should only upload photographs that you have the right to share.

Communications

If you contact us, we may retain the information you provide, including your email address and the contents of your message, so that we can respond and manage the enquiry.

Waitlist and email updates

If you join the Crowd Notes launch or update waitlist, we may collect:

• your email address;
• country;
• optional city or region;
• optional social media handle;
• the source through which you joined the waitlist;
• the date and time you subscribed;
• your marketing consent and the wording/version presented when you consented;
• whether you have verified your email address;
• the date and time of email verification; and
• whether you have subsequently unsubscribed.

We will only send marketing emails to people who have actively consented to receive them.

Technical and analytics information

We collect limited technical information needed to operate, secure and improve Crowd Notes.

This may include information such as:

• IP address;
• browser and device information;
• information about how the site is used;
• pages or features accessed;
• anonymous or pseudonymous identifiers; and
• technical error and security information.

Crowd Notes uses its own analytics functionality to understand how the service is being used. We aim to keep this information proportionate to what is needed to operate and improve the service.

We use your information to:

• create and manage your account;
• provide your personal concert diary;
• display your public profile and content according to your privacy settings;
• provide statistics and other features;
• allow users to find and interact with each other;
• provide notifications and other service functionality;
• store and display photographs and other content you upload;
• respond to enquiries and support requests;
• maintain the security and reliability of Crowd Notes;
• understand how the service is being used and improve it;
• detect, investigate and prevent misuse, spam, fraud or other harmful activity;
• comply with legal obligations; and
• where you have given appropriate consent, send you launch information and other Crowd Notes marketing communications.

We do not sell your personal information.

Where UK data protection law applies, we rely on different lawful bases depending on why we use your information.

These may include:

• Performance of a contract — where processing is necessary to provide the Crowd Notes account and features you have requested.
• Legitimate interests — where processing is necessary for purposes such as maintaining security, preventing abuse, operating and improving the service, and understanding how Crowd Notes is being used, provided those interests are not overridden by your rights.
• Consent — where we ask for your consent, including for launch and marketing emails or where consent is required for certain non-essential cookies or similar technologies.
• Legal obligation — where we need to process information to comply with a legal requirement.

We will not use one lawful basis for a purpose that is incompatible with the purpose for which the information was originally collected without an appropriate legal basis and, where required, informing you first.

Crowd Notes is designed around sharing live music experiences.

Depending on your privacy settings, your profile, attended shows, reviews, ratings and photographs may be visible to other users or publicly on the internet.

You can make your profile or individual reviews private where those controls are available.

Your email address, notification preferences and other information intended to remain private are not displayed publicly.

You should take care when deciding what information to include in public profiles, reviews, photographs or other content.

Currently, Crowd Notes only uses location information that you choose to provide, such as a city or other location entered into your profile.

Crowd Notes does not currently require precise GPS location tracking.

If we introduce optional precise location features in the future, such as browser or device location permissions, we will explain what the feature does and obtain any permissions or consent required before using precise location information.

If you join the Crowd Notes waitlist, you will be asked to actively consent to receiving email updates.

We use an email verification process to confirm that the email address belongs to the person who subscribed.

You can withdraw your consent at any time. Marketing emails will include an easy way to unsubscribe.

Unsubscribing from marketing emails does not necessarily stop essential service communications relating to an account you continue to use, such as security, account or transactional messages.

We will maintain appropriate records of marketing consent and unsubscribe requests.

Crowd Notes may use cookies or similar technologies that are necessary to provide, secure or operate the service.

We may also use analytics technologies to understand how people use Crowd Notes.

Where applicable law requires consent for a particular cookie or similar technology, we will obtain that consent before using it.

We will provide information about relevant cookies and similar technologies and how to manage them where required.

Crowd Notes relies on third-party services and external data sources to provide parts of the service.

These may include hosting, database, storage and email providers, as well as music and event data providers such as:

• Spotify;
• Ticketmaster;
• Setlist.fm; and
• MusicBrainz.

These services may provide information about artists, venues, events, releases or setlists used by Crowd Notes.

We do not control the privacy practices, availability or accuracy of third-party services. Where appropriate, Crowd Notes will provide attribution or links required by the relevant provider.

Where third-party providers process personal information on our behalf, we will use appropriate contractual and data protection arrangements where required.

Before publication: the specific providers, processing arrangements, international transfers and retention/caching arrangements should be checked against the actual Crowd Notes configuration and each provider's current terms.

We may share or allow access to personal information with service providers that help us operate Crowd Notes, such as hosting, database, storage, email, security and technical service providers.

We may also disclose information:

• where necessary to comply with the law;
• where necessary to protect the rights, safety or security of Crowd Notes or others;
• to investigate suspected fraud, abuse or other unlawful activity; or
• where required as part of a business transfer or restructuring, subject to applicable law.

We do not sell your personal information.

We keep personal information only for as long as reasonably necessary for the purposes described in this policy.

For active accounts, information forming part of your diary and profile will generally be retained while your account remains active.

If you delete your account, we will delete or anonymise personal information associated with the account where reasonably possible, subject to information we need to retain for legitimate operational, security, legal or dispute-resolution purposes.

Some information may also remain where it has been incorporated into content that is necessary to maintain the integrity of the service, provided this is permitted by applicable law.

We retain marketing consent and unsubscribe records for as long as reasonably necessary to demonstrate compliance and ensure that we do not send marketing communications to people who have opted out.

We will review retention periods as Crowd Notes develops.

Depending on the circumstances and the lawful basis for processing, you may have rights under UK data protection law including:

• the right to access your personal information;
• the right to correct inaccurate information;
• the right to request deletion;
• the right to restrict certain processing;
• the right to object to certain processing;
• the right to data portability in applicable circumstances; and
• the right to withdraw consent where processing is based on consent.

You can also unsubscribe from marketing emails at any time.

To exercise a data protection right, contact us through the Crowd Notes contact page or at crowdnotes1@gmail.com.

We may need to verify your identity before completing certain requests.

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

No online service can guarantee absolute security, and you should use a strong, unique password and keep your account credentials private.

Crowd Notes is not intended to collect personal information from children who are not legally able to use the service.

If you believe that a child has provided personal information to Crowd Notes in circumstances where they should not have done so, please contact us so that we can investigate and take appropriate action.

Some of the service providers used by Crowd Notes may process information outside the UK.

Where personal information is transferred internationally, we will use appropriate safeguards where required by applicable data protection law.

Details of relevant international transfers and safeguards may be provided on request where appropriate.

Crowd Notes may update this Privacy Policy as the service develops or our use of information changes.

The date at the top of this page will show when the policy was last updated.

Where appropriate, we will provide additional notice of significant changes.

If you have concerns about how Crowd Notes uses your personal information, please contact us first so that we can try to resolve the issue.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Information about making a complaint is available through the ICO website.

For questions about this Privacy Policy or your personal information:

Crowd Notes
Operator: Dylan Parry
Email: crowdnotes1@gmail.com

You can also contact us through the Crowd Notes contact page.