Privacy Policy

Who we are

This website (trstn.uk) is operated by Tristan Barraclough, performing and releasing music as TRSTN, based in the United Kingdom. For any questions about this policy or your personal data, contact hi@trstn.uk.

Under UK data protection law (UK GDPR and the Data Protection Act 2018) I am the "data controller" for information collected via this site.

What we collect and why

• Booking & contact enquiries. When you submit the contact form I collect your name, email address and the message you send. I use this solely to respond to your enquiry and, where relevant, to organise a booking.
• Song requests. Live show pages let audience members request tracks. I store the requested track name, artist and cover art, plus an anonymous device identifier so the same device cannot spam duplicate requests. No name, email or account is collected.
• Basic technical logs. Like any website, my hosting provider records IP addresses, user-agent strings and request timestamps for security, abuse prevention and debugging. These logs are retained for a short period (typically 30 days) and are not used to build a profile of individual visitors.

Legal basis

I process your data on the following bases:

• Consent — when you voluntarily submit the contact form or a song request.
• Legitimate interests — for keeping the site secure, preventing abuse and improving its reliability.
• Contract — where correspondence relates to arranging a booking.

Who we share it with

I do not sell your personal data. I use a small number of third-party processors to run the site:

• Supabase — database and authentication hosting (EU region). Booking enquiries and song requests are stored here.
• Cloudflare / Lovable — the CDN and application host that delivers this website and processes standard server logs.
• Apple (iTunes Search API) — used to search track artwork when you submit a song request. The search runs from my server, so your IP is not shared with Apple for this purpose.
• Embedded players — pages that show a SoundCloud or Spotify embed will load content directly from those providers, which are subject to their own privacy policies and may set their own cookies.

I may also disclose information where legally required (for example, in response to a valid court order or law-enforcement request).

Cookies

This site does not use analytics, advertising or tracking cookies. Third-party embeds (SoundCloud, Spotify, YouTube) may set their own cookies when their players load; disable those embeds in your browser if you do not want them.

How long we keep your data

• Contact / booking enquiries: kept while the booking or conversation is active, then archived for up to 24 months for accounting and reference before being deleted.
• Song requests: purged shortly after the show they were submitted for.
• Server logs: typically 30 days.

Your rights

Under UK GDPR you have the right to:

• Access the personal data I hold about you.
• Ask me to correct inaccurate data.
• Ask me to delete your data ("right to be forgotten").
• Object to or restrict certain kinds of processing.
• Withdraw consent at any time.
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email hi@trstn.uk. I will respond within one month.

Security

Data is transmitted over HTTPS and stored on managed infrastructure with encryption at rest. No system is 100% secure, but I take reasonable steps to protect your data and will notify you of any breach that materially affects you, in line with UK law.

Children

This site is not directed at children under 13. I do not knowingly collect personal information from children. If you believe a child has sent me information, please email me so I can delete it.

Changes to this policy

If this policy changes, the "Last updated" date at the top of the page will change. Material changes will be highlighted on the homepage where reasonable.