Privacy Policy – Serenada (Including Hidden Hits by Serenada)

This Privacy Policy explains how Penny Play Ltd, trading as Serenada and Hidden Hits by Serenada (“we”, “our”, “us”), collects, uses, and protects your personal data. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are
Data Controller: Penny Play Ltd
Trading Names: Serenada, Hidden Hits by Serenada
Company Number: 15920703
Registered in: England and Wales
Email: privacy@serenada.com
Penny Play Ltd is the controller responsible for all personal data we collect through our websites, forms, waiting lists, mailing lists, and services.

2. What Data We Collect
We may collect and process the following types of personal data:

• Identity information such as name, email address, phone number, or social media handles

• Artist information such as artist name, biography, genre, music files, and press materials

• Technical and usage data such as IP address, browser type, device information, and interactions

• Payment identifiers for paid services (we do not store full card details)

3. How We Collect Your Data
We collect personal data when you:

• Submit music through our forms

• Join our mailing list or waiting list

• Request updates or early access

• Communicate with us through email or social platforms

• Interact with our websites or online services

We may also receive limited analytics data from platforms such as Instagram Insights and Google Analytics.

4. How We Use Your Data
We use your personal data to:

• Review and manage artist submissions

• Provide updates about Serenada

• Share artist opportunities and news

• Offer early access or promotional features

• Improve our services and analyse engagement

Our lawful bases include contractual necessity, legitimate interests, and consent (for marketing).
We do not sell your personal data.

5. How We Store and Protect Your Data
Your data is stored securely in UK and EU data centres operated by Google Cloud and AWS.
Access is encrypted and restricted to authorised personnel.
We retain personal data for up to two years from your last interaction unless required longer by law.
Data is deleted or anonymised once no longer needed.

6. Marketing Communications
If you join our mailing list or waiting list, or submit music to us, you may be asked whether you wish to receive communications from Serenada or Hidden Hits by Serenada.
You will receive marketing communications only if you have given explicit consent.
You may unsubscribe at any time using the link in any email or by contacting privacy@serenada.com.

7. Your Data Protection Rights
Under UK GDPR, you have the right to:

• Access your personal data

• Correct inaccurate information

• Request deletion

• Restrict processing

• Object to processing

• Request data portability

We respond to all requests within one month.

8. Cookies
Our websites may use cookies to enable essential functionality, analyse usage, and improve your experience. You can manage cookies through your browser settings.

9. Third-Party Links
Our websites or pages may contain links to external sites. This policy applies only to Penny Play Ltd services. Please review external privacy policies where relevant.

10. Updates to This Policy
We may update this Privacy Policy as needed. The latest version will always be available on our website. Significant changes will be communicated directly.

11. Contact Us
If you have questions about how we handle your personal data, contact:
Privacy Officer
Penny Play Ltd
Email: privacy@serenada.com

12. Contacting the ICO
If you are not satisfied with our response, you may contact the Information Commissioner’s Office:
Website: www.ico.org.uk
Helpline: 0303 123 1113