Legal
Last updated 27/08/2026
This explains what personal data bnliu collects, why, and what rights you have over it. It applies to everyone who uses the Service, whether or not you have an account.
01
The data controller is bnliu, contactable at hello@bnliu.com. Our ICO registration is in progress.
For any question about your data, or to exercise your rights, email hello@bnliu.com.
02
When you create an account: your email address.
When you build a profile: your artist name, handle, biography, London borough, roles, genres, what you are open to and available for, your SoundCloud link, and optionally an Instagram handle, a contact email and a profile photo.
When you use the Service: listings you create (upcoming events and releases), who you follow, and messages you send to other users.
Phone notifications: if you switch them on, the delivery address your browser’s push service gives us for that device, so alerts can reach it. Switching them off, or deleting your account, removes it.
Profile visits and listens: when a signed-in member views another member’s profile or plays a track, we record who, what and when, and show it to the owner of that profile or track. You can choose to view profiles privately in Settings; your visits are then counted without your name. Visit records are kept for up to 120 days.
Share links: when someone opens a private track link, we record that it was opened, played, how far, and whether it was downloaded, against a random identifier for that browser tab, and show this to the artist who made the link. We don’t record who the visitor is.
Public page and booking enquiries: if you switch on your public page, the details it lists (name, photo, bio, roles, genres, city, links, upcoming dates and radio shows) can be seen by anyone with the link. If you send a booking enquiry, we store your name, email address, the details you enter and a one-way hash of your IP address (used only to limit spam), and pass them to the artist you contacted.
Played out and downloads: if you say you played a track out, the date, venue and any note you add are shown to the artist, and your name appears in their “Supported by” list. Downloading a track records who downloaded it, for its owner.
Gig confirmations: if you ask a promoter to confirm a past date, we store the request and their answer. A confirmed date shows the promoter’s name next to it on your profile.
Free dates: dates you mark as free to play, and any note on them, are shown to signed-in members and used to tell you about gigs posted for those dates. Past dates are deleted.
Bookings: the details of a booking (date, venue, set times, fee, travel, guest list, rider, payment due and how to pay) are shared between the artist and the promoter on it. If an artist records a booking with a promoter who isn’t a member, we store the promoter’s name and email to send them reminders.
Automatically: technical data needed to serve the site and keep it secure, including IP address and browser information, collected by our hosting providers.
Profile photos are resized in your browser before upload, which removes embedded metadata such as location coordinates. We never receive it.
03
Your profile is public. Your artist name, handle, biography, borough, roles, genres, availability, music link and listings can be seen by anyone on the internet, including people without an account, and may appear in search engine results.
Your contact email, if you provide one, is shown only to signed-in users. Your account email address is never shown to anyone. Messages between users are private to the two people in the conversation, though we can access them where necessary to investigate a report or comply with the law.
04
05
We do not sell your data and we do not share it for advertising.
We use these processors to run the Service:
Some processors operate outside the UK. Where data is transferred internationally, we rely on the International Data Transfer Agreement issued by the ICO, incorporated into our processors' data processing agreements. Vercel and Resend, our hosting and email providers, process data in the United States and additionally rely on the EU-U.S. Data Privacy Framework, including its UK Extension, as a supplementary transfer mechanism.
We may disclose data to the police or a regulator where required by law, or where necessary to investigate illegal content or activity.
06
Profile and account data is kept for as long as your account exists. When you delete your account, your profile, listings, follows and messages are removed immediately from our live systems, and from backups within 90 days.
Records relating to reports, suspensions and removals are kept for 90 days after resolution, so that we can meet our duties under the Online Safety Act and deal with repeat behaviour.
07
Under UK GDPR you have the right to:
To exercise any of these, email hello@bnliu.com. We will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113. We would rather you came to us first.
08
We use a small number of strictly necessary cookies to keep you signed in. These do not require consent. We do not use advertising or tracking cookies.
Embedded SoundCloud and Spotify players may set their own cookies when a profile page loads or when its “In the bag” list comes into view. That is outside our control and governed by their own privacy policies.
09
The Service is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has provided us with personal data, contact hello@bnliu.com and we will delete it.
10
We will update this policy as the Service changes. Material changes will be notified by email before they take effect.