Privacy Policy
Privacy Policy
Last updated: 31 August 2026
1. About this Privacy Policy
The Arpa Protocol is an independent music project operated by Paul Del-Nevo.
This privacy policy explains what personal information may be collected when you use this website, why it is collected, how it is used, and the choices and rights you have in relation to it.
The basic principle is quite simple. We don't want more information about you than we need.
The website isn't an advertising platform and we don't sell personal information or use it to build advertising profiles.
2. Information we may collect
Depending on how you use the website, we may collect some or all of the following:
When you contact us
If you use the contact form or contact us by email, we may receive information such as your name, email address and anything else you choose to include in your message.
We use this information to respond to your enquiry and deal with any follow-up that is reasonably necessary.
When you join the mailing list
If you choose to subscribe to The Arpa Protocol mailing list, we collect the information required to send you those communications, normally your name and email address.
We may also retain information about whether emails have been sent or delivered and whether you have interacted with them, where this information is provided by our mailing service.
You can unsubscribe from the mailing list at any time using the unsubscribe facility provided in our emails, or by contacting us directly.
When you make a purchase
If you purchase music or other products through the website, we may collect information such as your name, email address, billing or delivery address, order details and information needed to administer the transaction.
Payment card details are handled by Stripe and are not stored by The Arpa Protocol. Stripe may process personal information as both a processor providing payment services to us and, in certain circumstances, as an independent controller for its own purposes.
We use your purchase information to process and fulfil orders, provide customer support, maintain appropriate sales records and comply with our legal and accounting obligations.
3. Website usage and music
The website may provide basic information about how the site and its music are being used, including information such as:
- The number of visits to the website
- Which pages are visited
- Which tracks are played
- Approximate listening activity
- Downloads made through the website
- Broad geographical information, such as the city associated with a visit
This information is used to understand how the website and music are being accessed and to help us maintain and improve the site.
We have disabled Bandzoogle's optional Basic Site Reporting, which uses additional cookies for activity reporting.
We do not use Google Analytics, Meta Pixel or similar advertising or behavioural tracking services on this website.
4. Cookies
The website uses cookies and similar technologies where they are necessary for the website to function correctly.
These may be used for things such as remembering settings, maintaining website functionality, processing purchases or enabling features provided by the website platform.
We have disabled Bandzoogle's optional activity reporting because it requires additional analytics cookies.
Some third-party services linked to or embedded within the website may use their own cookies or similar technologies. These services include YouTube and Stripe.
Those services operate according to their own privacy and cookie policies.
5. YouTube
Some pages on this website may contain embedded YouTube videos.
When you interact with an embedded YouTube player, YouTube may collect information about your device, browser and use of the video service and may use cookies or similar technologies.
YouTube is operated by Google and its use of information is governed by Google's own privacy practices.
If you do not interact with an embedded video, you can generally continue browsing the rest of the website without using the YouTube service.
6. External websites
The website contains links to external services, including music streaming services and Elastic Stage, which may be used to purchase physical releases.
Once you leave The Arpa Protocol website, those services operate under their own privacy policies and terms.
We are not responsible for the privacy practices, security or content of external websites.
7. Why we use your information
Depending on the circumstances, we use personal information for the following purposes:
- To respond to enquiries
- To provide information you have requested
- To send newsletters where you have chosen to receive them
- To process and administer purchases
- To deliver products or downloads
- To provide customer support
- To maintain appropriate financial and sales records
- To understand basic usage of the website and music
- To maintain and improve the website
- To comply with legal and regulatory obligations
We do not sell personal information to third parties.
8. Our lawful bases for using personal information
Under UK data protection law, we need a lawful basis for processing personal information.
Depending on the circumstances, we may rely on:
Contract: where information is necessary to provide a product or service you have purchased.
Legal obligation: where we are required to retain or provide information to comply with legal, accounting or regulatory requirements.
Consent: where you have actively chosen to receive something, such as our mailing list.
Legitimate interests: where processing is reasonably necessary to operate, administer and improve the website and music project, provided that our interests do not override your rights and interests.
Where we rely on consent, you can withdraw that consent at any time.
9. Who we share information with
We only share personal information with third parties where this is necessary to operate the website, provide a service you have requested, process a transaction, or comply with a legal obligation.
These may include:
Bandzoogle, which provides the website platform and associated website services, including the mailing facilities used by The Arpa Protocol.
Stripe, where necessary to process payments.
Delivery or fulfilment services, where necessary to deliver physical products.
We may also disclose information where required to do so by law or where necessary to protect our legal rights.
We do not sell your information or provide it to advertising companies for their own marketing purposes.
10. International processing
Some of the service providers we use may process personal information outside the United Kingdom.
Where this happens, the relevant provider is responsible for applying the appropriate safeguards required by applicable data protection law.
For example, Stripe may process personal information in different jurisdictions and uses contractual and other safeguards where required.
11. How long we keep information
We keep personal information only for as long as we reasonably need it for the purpose for which it was collected.
For example:
- Contact enquiries are generally retained only for as long as necessary to deal with the enquiry and any reasonable follow-up.
- Newsletter information is retained while you remain subscribed, unless there is another legitimate reason to retain it.
- Purchase and transaction information may need to be retained for longer to meet accounting, tax and legal requirements.
- Information relating to customer support may be retained for as long as reasonably necessary to resolve the matter and maintain appropriate records.
When information is no longer required, we will delete it or otherwise securely dispose of it where reasonably practicable.
12. Your rights
Depending on the circumstances, UK data protection law gives you rights including:
- The right to ask for a copy of the personal information we hold about you
- The right to ask us to correct inaccurate information
- The right to ask us to delete information
- The right to ask us to restrict how we use your information
- The right to object to certain types of processing
- The right to data portability in certain circumstances
- The right to withdraw consent where processing is based on consent
These rights are not absolute and certain exceptions can apply.
If you want to exercise any of these rights, please contact us using the details below.
13. Marketing emails
If you subscribe to The Arpa Protocol mailing list, we will use the information you provide to send you relevant news, music releases, updates and other communications relating to the project.
You can unsubscribe at any time.
If you unsubscribe, we will stop sending marketing emails, although we may retain a record of your previous subscription or unsubscribe request where necessary to ensure that we respect your choice.
14. Security
We take reasonable steps to protect personal information from accidental loss, unauthorised access, alteration or disclosure.
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
15. Children's privacy
This website is not specifically directed at children, and we do not knowingly collect personal information from children for marketing purposes.
If you believe that a child has provided personal information to us without appropriate consent, please contact us so that we can consider the appropriate action.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time if the website, services or the way we handle personal information changes.
The latest version will always be published on this page, with the date shown at the top.
17. Contact
If you have a question about this Privacy Policy, want to exercise one of your data protection rights, or have a concern about how your information is being used, please contact:
Paul Del-Nevo
The Arpa Protocol
Email: pauldelnevo@gmail.com
You can also use the Contact page on this website to get in touch.
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).