Privacy Policy

Last updated: 7 October 2026

Template for v1 — please have this reviewed (e.g. by a UK solicitor) and fill in the trader details marked [in brackets] before taking real payments.

This policy explains how The Magic Jukebox ([trading name / legal entity], [address], United Kingdom) uses personal data. We are the data controller. Contact: realcastcollective@gmail.com.

What we collect

  • Order details: your email, the recipient's name and pronunciation, relationship, who the song is from, music preferences, and the stories and memories you share.
  • Payment data: handled by Stripe. We receive confirmation of payment and limited details (e.g. email, amount) — never your full card number.
  • Technical data: basic server logs, and — only if you accept marketing cookies — data collected by the Meta Pixel and TikTok Pixel about ad visits and purchases.

Why we use it (lawful basis)

  • To write, produce and deliver your song and handle revisions and support — performance of a contract.
  • To keep records of orders, consents and payments — legal obligation and legitimate interests.
  • To measure our advertising — consent (you can refuse or withdraw it at any time).

Who we share it with

  • Stripe (payments).
  • Our hosting provider (e.g. Vercel) and email provider.
  • AI music and writing tools used to produce your song — we share only what's needed to create it (e.g. lyrics, style, names in the lyrics). [List the specific tools before launch.]
  • Meta and TikTok, only if you accept marketing cookies.

Some of these providers process data outside the UK; where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or adequacy regulations.

Please be thoughtful about others' data

Your story will include information about the recipient. Please only share what you're comfortable with and avoid sensitive details (e.g. health) unless they matter to the song — for memorial songs, share only what you'd be happy to hear sung.

How long we keep it

We keep order details and your song for up to 2 years so you can re-download it and request support, and payment records for 6 years for tax purposes. You can ask us to delete your song and story sooner.

Your rights

Under UK GDPR you can ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent. Email us to exercise them. You can also complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use essential cookies/local storage to run the site (e.g. saving your order form progress, admin login). Marketing pixels load only after you click “Accept” on the cookie banner.