Privacy Policy
Last updated: 12 October 2026
Fully Open Records ("Fully Open Records", "FOR", "we", "us" or "our") provides an online platform for artists and listeners to discover, share and promote music and related content.
This Privacy Policy explains what personal information we collect, why we use it and the choices available to you.
1. Information we collect
Account information
When you create or use a Fully Open Records account, we may collect information such as:
- your name or display name;
- email address;
- account and profile information;
- profile image;
- authentication information;
- account type and settings.
Passwords, where used, must only be stored using the application's existing secure password-hashing mechanism and must never be stored in plain text.
Social sign-in
If you choose to sign in using a third-party authentication provider, such as Google or Facebook, we receive limited information necessary to identify you and create or connect your Fully Open Records account.
Depending on the provider and permissions you grant, this may include your name, email address, profile image and a provider-specific account identifier.
We do not receive your Google or Facebook password.
We use social authentication to identify you and provide access to your FOR account. We do not use social sign-in to access unrelated services such as your Gmail, Google Drive, Facebook posts or contacts.
Artist information and content
Artists may provide information and content including:
- artist or band name;
- biography;
- photographs and artwork;
- music and audio;
- releases and track information;
- gig information;
- press information;
- links and social profiles;
- other material submitted to an artist profile.
Much of this information is intentionally made public as part of the Fully Open Records artist platform.
Listener and usage information
We may record information about how FOR is used, including:
- profile and page views;
- qualifying music plays;
- track and release interactions;
- radio listening and radio plays;
- follows, favourites or similar interactions where available;
- referrals and traffic sources;
- basic technical and diagnostic information.
This information helps operate the service, provide artist analytics, understand how FOR is used and improve the platform.
Messages and communications
Where FOR provides messaging or other communication features, we may store messages and associated information so that the service can deliver and display those communications.
Users should not include sensitive personal information in messages unless necessary.
Technical information
When you use FOR we may automatically receive technical information such as IP address, browser/device information, timestamps, request information, security events and similar server or diagnostic data.
We use this information to operate, secure, diagnose and improve the service.
2. How we use information
We may use personal information to:
- create and manage accounts;
- authenticate users;
- operate artist and listener features;
- display artist profiles and submitted public content;
- deliver music and radio services;
- provide analytics to artists;
- provide messaging and communication features;
- prevent abuse, fraud and unauthorised access;
- diagnose technical problems;
- improve FOR;
- communicate important service information;
- respond to support enquiries;
- comply with applicable legal obligations.
We do not sell personal information to advertisers.
3. Legal bases
Where UK data-protection law applies, we process personal information where necessary for one or more appropriate legal bases, including:
- performing our contract with you when providing the service;
- our legitimate interests in operating, securing and improving FOR;
- complying with legal obligations; and
- your consent where consent is required.
Where processing relies on consent, you may withdraw that consent, subject to any processing that is otherwise legally permitted.
4. Public information
Artist profiles and material intentionally published through FOR may be publicly accessible.
Public pages may be indexed by search engines and shared outside Fully Open Records.
Artists should therefore only publish information they are comfortable making public.
5. Service providers
We use third-party infrastructure and service providers to operate FOR.
These may include hosting, content delivery, authentication, email, analytics and other technical services.
For example, Google and Meta may process information when you choose their respective authentication services.
Those organisations process information under their own privacy policies where they act independently.
6. Cookies and similar technologies
FOR may use cookies or similar technologies that are necessary for authentication, security, preferences and operation of the service.
If FOR introduces non-essential advertising, marketing or analytics cookies that require consent, appropriate consent controls must be provided.
7. How long we keep information
We keep personal information for as long as reasonably necessary to provide FOR, maintain legitimate business records, protect the service and comply with applicable legal obligations.
Retention periods may vary depending on the type of information and why it is held.
Users may request deletion as described below.
8. Account and data deletion
You can request deletion of your account and associated personal information.
Instructions are available at:
https://fullyopenrecords.com/data-deletion
Some information may need to be retained where required by law, for security or fraud prevention, to resolve disputes, or where another lawful reason for retention applies.
Public artist/content deletion may require consideration of content ownership, shared artist administration or other users' rights.
9. Your data-protection rights
Depending on applicable law, you may have rights including:
- access to personal information we hold about you;
- correction of inaccurate information;
- deletion of personal information;
- restriction of certain processing;
- objection to certain processing;
- portability of certain information;
- withdrawal of consent where processing is based on consent.
You may also have the right to complain to the UK Information Commissioner's Office.
10. Security
We use reasonable technical and organisational measures intended to protect personal information.
No internet service can guarantee absolute security.
Users are responsible for protecting their own account credentials and should notify us if they believe their account has been compromised.
11. Children
Fully Open Records is not intended to knowingly collect personal information from children where parental or guardian consent would be required by applicable law.
If we become aware that personal information has been collected inappropriately from a child, we will take appropriate steps to address it.
12. Changes to this policy
We may update this Privacy Policy as FOR develops or legal requirements change.
The current version and its update date will be published on this page.
13. Contact
Questions about this Privacy Policy or personal information held by Fully Open Records can be sent to:
