Your information, handled quietly

The data controller is Simply Hypnotic, trading as Simply Hypnotic, of [TRADING ADDRESS]. For anything on this page, write to [PRIVACY EMAIL ADDRESS].

• Account information — your email address, and a password you set, held so you can sign in and reach your library. Lawful basis: performance of our contract with you.
• Order and payment records — what you bought, when, the amount, and a payment reference from Stripe. We do not receive or store your card number. Lawful basis: contract and our legal duty to keep accounting records.
• Your library — the recordings you own and may access. Lawful basis: contract.
• Saved recordings — anything you mark to come back to. Lawful basis: contract.
• Newsletter subscription — your email address, only if you enter it into the sign-up form. Lawful basis: your consent, which you can withdraw at any time.
• Technical information — standard server logs such as IP address, browser and pages requested, kept by our hosting provider for security and reliability. Lawful basis: our legitimate interest in keeping the service safe and working.

We do not run advertising trackers, we do not build behavioural profiles, and we do not collect health information about you.

We share information only with the companies that help us run the service:

• Stripe — takes payment and handles fraud checks. Stripe is a separate controller for its own payment data and has its own privacy notice.
• Our cloud backend and hosting provider — stores accounts, orders, library records and audio files, and serves the website.
• Email delivery provider — sends order confirmations and, if you have asked for it, the newsletter.

Some of these providers may process information outside the UK. Where they do, transfers are covered by the safeguards required by UK data protection law, such as the UK International Data Transfer Addendum.

• Account and library records — while your account is open, so your purchases remain available. Deleted on request, subject to the record-keeping below.
• Order and payment records — six years after the end of the relevant financial year, as UK tax law requires.
• Newsletter subscription — until you unsubscribe.
• Server logs — a short period set by our hosting provider, typically a few weeks.

Under UK GDPR you may ask us to:

• Give you a copy of the information we hold about you.
• Correct anything inaccurate.
• Delete your information, where we are not required to keep it.
• Restrict or object to how we use it.
• Provide it in a portable form.
• Withdraw consent to marketing at any time.

Write to [PRIVACY EMAIL ADDRESS] and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

Accounts, orders and libraries are protected by database-level access rules so that you can only reach your own records. Audio files are stored privately and served through short-lived links rather than public addresses.

A separate Cookies page lists exactly what is stored in your browser and lets you change your choice.