Privacy policy
Last updated: 18 July 2026
Music Licence Consulting (“MLC”, “we”, “us”) is an independent consultancy based in the United Kingdom. This policy explains what personal data and documents we collect through this website, how we use and protect them, how long we keep them, and your rights. For the purposes of UK data protection law, MLC is the data controller for the information you provide.
What we collect
When you submit the invoice-check or new-licence form we collect:
- Contact and business details — your name, company, role, email, phone number and the description of how you use music.
- Documents you upload — invoices, “Quote Usage Summary” documents and similar files. These are commercially sensitive and may contain personal data (for example names, contact details or site addresses). We ask you to upload only what is needed for the review.
- Basic technical/analytics data — privacy-friendly, aggregated usage statistics (see “Analytics”).
How and why we use it
We use this information solely to review your music-licensing position, respond to your enquiry and, if you engage us, to carry out the audit or procurement work and manage our relationship with you. Our lawful bases are your consent (in submitting the form), the performance of a contract where you engage us, and our legitimate interests in responding to enquiries and running our business. We do not sell your data or use it for third-party marketing.
Storage & security
Uploaded documents are held in private storage that is not publicly accessible — files can only be retrieved through an authenticated, access-controlled admin area used by MLC. Enquiry records are stored in an encrypted database. Access is limited to authorised MLC personnel.
Service providers (processors)
We use a small number of reputable providers to run the site and deliver the service:
- Vercel — website hosting and private document storage.
- Neon / Vercel Postgres — the database that stores submission records.
- Resend — sending notification and confirmation emails.
- HubSpot — our CRM, where enquiries are recorded so we can follow up.
These providers process data only on our instructions. Hosting and processing may take place in the UK, the EU and the United States; where data is transferred outside the UK/EEA we rely on appropriate safeguards such as the providers’ standard contractual clauses and data-protection frameworks.
How long we keep it
We keep enquiry data and uploaded documents only as long as necessary. If an enquiry does not proceed, we delete the associated documents and records within 12 months (or sooner on request). If you engage us, we retain what we need for the duration of the engagement and for any period required to meet legal, accounting or regulatory obligations, after which it is deleted.
Your rights
You may request access to, correction of, or deletion of your personal data, object to or restrict processing, or withdraw consent at any time. To exercise any of these — including asking us to delete uploaded invoices — email matt@musiclicenceconsulting.com and we’ll action it promptly. You also have the right to complain to the UK Information Commissioner’s Office (ICO).
Analytics
We use privacy-friendly, cookieless analytics to understand aggregate usage (for example how many people start or complete the invoice check). This does not identify you individually.
Contact
Questions about this policy or your data? Email matt@musiclicenceconsulting.com.
This is a general template and not legal advice. Review with a professional before relying on it.