Privacy Notice

What we collect and why

• Account data — email address and login credentials, where you create an account. Used to create and secure your account and to give you access to purchased content. Legal basis: performance of our contract with you.
• Purchase and delivery data — the order reference and which track you bought, so we can deliver your download and honour re-downloads and refunds. Legal basis: performance of our contract. Payment card details are never collected or seen by us; Paddle handles payment data as described below.
• Support messages — the content of emails or messages you send us. Used to answer you and keep a record of the issue. Legal basis: performance of our contract and our legitimate interest in supporting customers.
• Usage and device data — IP address, browser and device type, pages viewed, and error logs. Used to keep the site secure, prevent fraud and abuse, and understand what to improve. Legal basis: legitimate interests.
• Legal and accounting records — records we must keep for tax and bookkeeping. Legal basis: compliance with a legal obligation.

We do not send marketing email unless you have asked us to, and where we do it is on the basis of your consent, which you can withdraw at any time.

Who we share data with

• Service providers / subprocessors — our hosting, database, file storage and error-monitoring providers, who process data only on our instructions.
• Paddle, our Merchant of Record — for the sale of our products, order processing, subscription management, payments, invoicing, tax compliance, and refunds. Paddle collects and controls payment data under its own privacy notice.
• Streaming and video platforms — where a page embeds a Spotify or YouTube player, that platform receives your request and may set its own cookies under its own privacy policy.
• Professional advisers — legal and accounting advisers, where needed.
• Authorities — where we are required to disclose data by law.

We do not sell personal data.

International transfers

Some of our providers, including Paddle, process data outside the UK and EEA. Where that happens we rely on an adequacy decision for the destination country or on the European Commission's Standard Contractual Clauses, together with appropriate technical safeguards.

How long we keep it

Account data is kept while your account is open and for up to 12 months afterwards, so you can recover purchases. Order and accounting records are kept for as long as tax law requires (normally five to seven years). Support messages are kept for up to 24 months. Usage and security logs are kept for up to 12 months. When data is no longer needed we delete or anonymise it.

Your rights

Where UK or EU data protection law applies you have the right to access your data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. Email support@jmusicworld.com and we will respond within one month. You also have the right to complain to your data protection supervisory authority — in Denmark, Datatilsynet.

Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, encryption of stored files, access controls and role-based permissions on administrative tools, and signed time-limited links for media delivery. No system is perfectly secure, but we take these obligations seriously and review them as the site changes.

Cookies and similar technologies

We use essential cookies and local storage to keep you signed in, remember your session, and process checkout securely — the site cannot work without these. Embedded Spotify and YouTube players may set their own analytics and advertising cookies when you play them. We do not run our own advertising cookies. You can clear or block cookies in your browser settings, and you can avoid third-party player cookies by not playing embedded content.

Children

The site is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

Changes to this notice

We will update this notice when our practices change, and the "last updated" date above will always show the current version.