PRIVACY NOTICE

---

Who are we?

Riff Agency Cyf ('us', 'our') is a music agency that works with bands, individual artists, venues and festival companies. We are committed to protecting your personal data and respecting your privacy.

1. Purpose of this Notice

This notice explains how we collect, use and protect your personal information when you work with us.

2. Who does this notice apply to?

Bands and their members, individual artists, venue owners/managers, representatives of festival companies, other professionals in the industry who collaborate with us.

3. The personal data we collect

Contact details (name, email, phone), professional information (band name, role), financial details (bank details), contract details.

4. How we collect your Information

Directly from you

5. Why we use your Information

To manage orders, contracts and payments.

The legal basis we rely on for processing your personal data is Article 6(1)(b) of the UK GDPR, as processing is necessary to fulfill a contract with you, or to take action on your request before entering into a contract.

6. Who we share your information with

Event organisers, venues, promoters, legal and accounting providers, payment processors. We do not sell your data.

7. International Transfers

We store your data in the UK/EEA. If it is transferred outside, we ensure security measures.

8. How long we keep your data

Only as long as necessary for the purposes and legal requirements.

9. Your rights

You can access, correct, delete, restrict or object to the use of your data, withdraw consent, and request portability.

10. How we protect your data

We use technical and organizational measures to protect your personal information.

11. Contact us

If you have any questions or concerns, please contact us: [email protected]

12. Complaints

If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office: www.ico.org.uk / 0303 123 1113.