Privacy Policy
Privacy Policy
Last updated: 31 October 2026
1. About this Privacy Policy
The Arpa Protocol is an independent music project operated by Paul Del-Nevo.
This privacy policy explains what personal information may be collected when you use this website, why it is collected, how it is used, and the choices and rights you have in relation to it.
The basic principle is quite simple. We don't want more information about you than we need.
The website isn't an advertising platform and we don't sell personal information or use it to build advertising profiles.
2. Information we may collect
Depending on how you use the website, we may collect some or all of the following:
When you contact us
If you use the contact form or contact us by email, we may receive information such as your name, email address and anything else you choose to include in your message.
We use this information to respond to your enquiry and deal with any follow-up that is reasonably necessary.
When you join the mailing list
If you choose to subscribe to The Arpa Protocol mailing list, we collect the information required to send you those communications, normally your name and email address.
We may also retain information about whether emails have been sent or delivered and whether you have interacted with them, where this information is provided by our mailing service.
You can unsubscribe from the mailing list at any time using the unsubscribe facility provided in our emails, or by contacting us directly.
When you make a purchase
If you purchase music or other products through the website, we may collect information such as your name, email address, billing or delivery address, order details and information needed to administer the transaction.
Payment card details are handled by Stripe and are not stored by The Arpa Protocol. Stripe may process personal information as both a processor providing payment services to us and, in certain circumstances, as an independent controller for its own purposes.
We use your purchase information to process and fulfil orders, provide customer support, maintain appropriate sales records and comply with our legal and accounting obligations.
3. Website usage, music and sales
The website provides basic information about how the site, its music and its shop are being used.
Depending on how you interact with the website, this may include information such as:
- The number of visits to the website
- Which pages are visited
- Broad geographical information associated with visits, such as city and country
- Which tracks are played
- Which albums or other music are played
- Downloads made through the website
- Sales and order information
- Information relating to people who choose to join The Arpa Protocol mailing list
This information is provided through Bandzoogle, the platform that hosts and operates the website.
We use this information to understand how the website and music are being accessed, administer sales and downloads, manage the website and improve the experience for visitors.
We also use Google Analytics 4, provided by Google, to understand how visitors find and use the website. This may include information about pages viewed, website interactions, approximate geographical location, browser and device characteristics, and online identifiers.
Google Analytics is optional and is only activated through our consent system after a visitor chooses to accept analytics.
We use this information to understand website activity and improve the experience for visitors.
We do not use Google Analytics for personalised advertising, and we do not intentionally send visitors' names, email addresses or payment details to Google Analytics.
We do not sell personal information or use it to build advertising profiles.
4. Cookies
The website uses cookies and similar technologies to support its operation, remember preferences and provide certain features.
Bandzoogle's Basic Site Reporting is enabled. This provides basic information about visits, pages viewed, music activity and other website usage.
We also use Google Analytics 4, but only after a visitor has accepted optional analytics through our cookie consent system.
Visitors can accept or reject optional analytics and change their choice using the Cookie settings control on the website.
For more information about the cookies we use, their purposes and how to manage them, please read our Cookie Policy.
Third-party services, including embedded YouTube videos and payment services, may also use cookies or similar technologies.
5. YouTube
Some pages on this website may contain embedded YouTube videos.
When you interact with an embedded YouTube player, YouTube may collect information about your device, browser and use of the video service and may use cookies or similar technologies.
YouTube is operated by Google, and its use of information is governed by Google's own privacy practices.
If you do not interact with an embedded video, you can generally continue browsing the rest of the website without using the YouTube service.
6. External websites
The website contains links to external services, including music streaming services and Elastic Stage, which may be used to purchase physical releases.
Once you leave The Arpa Protocol website, those services operate under their own privacy policies and terms.
We are not responsible for the privacy practices, security or content of external websites.
7. Why we use your information
Depending on the circumstances, we use personal information for the following purposes:
- To respond to enquiries
- To provide information you have requested
- To send newsletters where you have chosen to receive them
- To process and administer purchases
- To deliver products or downloads
- To provide customer support
- To maintain appropriate financial and sales records
- To understand basic usage of the website and music
- To maintain and improve the website and its features
- To comply with legal and regulatory obligations
We do not sell personal information to third parties.
8. Our lawful bases for using personal information
Under UK data protection law, we need a lawful basis for processing personal information.
Depending on the circumstances, we may rely on:
Contract: where information is necessary to provide a product or service you have purchased.
Legal obligation: where we are required to retain or provide information to comply with legal, accounting or regulatory requirements.
Consent: where you have actively chosen to receive something, such as our mailing list.
Legitimate interests: where processing is reasonably necessary to operate, administer and improve the website and music project, including understanding basic website and music usage, provided that our interests do not override your rights and interests.
Where we rely on consent, you can withdraw that consent at any time.
For optional Google Analytics tracking, we rely on your consent. Analytics is not activated through our consent system unless you have accepted it. You can withdraw that consent at any time using the Cookie settings control on the website.
Other website processing, including Bandzoogle's reporting and essential website functions, is considered separately according to its purpose and applicable legal requirements.
9. Who we share information with
We only share personal information with third parties where this is necessary to operate the website, provide a service you have requested, process a transaction, administer the website and its features, or comply with a legal obligation.
These may include:
Bandzoogle, which provides the website platform and associated website services, including the mailing facilities, music players, shop and basic site reporting used by The Arpa Protocol.
Stripe, where necessary to process payments.
Delivery or fulfilment services, where necessary to deliver physical products.
Google, which provides Google Analytics 4 when visitors have consented to optional analytics. Google may process information such as website interactions, online identifiers and device information in connection with this service.
More information is available in Google's Privacy Policy.
We may also disclose information where required to do so by law or where necessary to protect our legal rights.
We do not sell your information or provide it to advertising companies for their own marketing purposes.
10. International processing
Some of the service providers we use may process personal information outside the United Kingdom.
Where this happens, the relevant provider is responsible for applying the appropriate safeguards required by applicable data protection law.
For example, Bandzoogle and Stripe may process personal information in different jurisdictions as part of providing their services and use appropriate safeguards where required.
Google may also process information in countries outside the United Kingdom when providing Google Analytics. Such processing is subject to the applicable data protection arrangements and safeguards used for the service.
11. How long we keep information
We keep personal information only for as long as we reasonably need it for the purpose for which it was collected.
For example:
- Contact enquiries are generally retained only for as long as necessary to deal with the enquiry and any reasonable follow-up.
- Newsletter information is retained while you remain subscribed, unless there is another legitimate reason to retain it.
- Purchase and transaction information may need to be retained for longer to meet accounting, tax and legal requirements.
- Information relating to customer support may be retained for as long as reasonably necessary to resolve the matter and maintain appropriate records.
When information is no longer required, we will delete it or otherwise securely dispose of it where reasonably practicable.
12. Your rights
Depending on the circumstances, UK data protection law gives you rights including:
- The right to ask for a copy of the personal information we hold about you
- The right to ask us to correct inaccurate information
- The right to ask us to delete information
- The right to ask us to restrict how we use your information
- The right to object to certain types of processing
- The right to data portability in certain circumstances
- The right to withdraw consent where processing is based on consent
These rights are not absolute and certain exceptions can apply.
If you want to exercise any of these rights, please contact us using the details below.
13. Marketing emails
If you subscribe to The Arpa Protocol mailing list, we will use the information you provide to send you relevant news, music releases, updates and other communications relating to the project.
You can unsubscribe at any time.
If you unsubscribe, we will stop sending marketing emails, although we may retain a record of your previous subscription or unsubscribe request where necessary to ensure that we respect your choice.
14. Security
We take reasonable steps to protect personal information from accidental loss, unauthorised access, alteration or disclosure.
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
15. Children's privacy
This website is not specifically directed at children, and we do not knowingly collect personal information from children for marketing purposes.
If you believe that a child has provided personal information to us without appropriate consent, please contact us so that we can consider the appropriate action.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time if the website, services or the way we handle personal information changes.
The latest version will always be published on this page, with the date shown at the top.
17. Contact
If you have a question about this Privacy Policy, want to exercise any of your data protection rights, or have a concern about how your information is being used, please contact:
Paul Del-Nevo
The Arpa Protocol
Email: pauldelnevo@gmail.com
You can also use the Contact page on this website to get in touch.
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).