Last updated: 8 September 2026

1. Who we are

Wasted State Music is the trading name of Wasted State Music Ltd.

For data protection purposes, Wasted State Music Ltd is the controller of the personal information described in this notice.

You can contact us about privacy or data protection at:

Email: music@wastedstate.com
Website: www.wastedstate.com

2. Information we collect

Depending on how you interact with us, we may collect:

• Your name, job title and organisation.

• Your email address, telephone number and other business contact details.

• Information contained in enquiries, correspondence and meeting notes.

• Information about projects and services that you discuss with us.

• Contract, invoicing, payment and transaction information.

• Records of communications, proposals and services provided.

• Website technical information, such as IP address, browser type, device information, pages visited and security logs.

• Marketing preferences and records of any objection or request not to be contacted.

• For business development, relevant professional information available from public business sources.

We do not intentionally collect special-category personal information through the website. Please avoid sending sensitive personal information unless it is necessary and has been agreed with us.

3. How we obtain information

We obtain personal information:

• Directly from you when you contact us, submit an enquiry, arrange a meeting or engage our services.

• Through our work with clients, suppliers and professional contacts.

• Automatically through website hosting, security systems and, where enabled, analytics technologies.

• From publicly available professional sources, including company websites, industry directories and professional profiles.

• Through recommendations, introductions and referrals.

4. Why we use your information

PurposeLawful basisResponding to enquiries and discussing possible workTaking steps at your request before entering into a contract, or our legitimate interest in responding to business enquiriesProviding music-rights, licensing, royalty and related servicesPerformance of a contractManaging client and supplier relationshipsPerformance of a contract and our legitimate interests in operating the businessPreparing proposals, maintaining records and communicating about projectsPerformance of a contract or our legitimate interests in managing our workInvoicing, accounting and meeting tax or regulatory obligationsLegal obligation and performance of a contractProtecting the website, systems and business against misuse or security threatsOur legitimate interests in maintaining secure and reliable systemsUnderstanding general website useOur legitimate interests in improving the website or, where legally required, your consentSending relevant, limited communications to business contactsOur legitimate interests in promoting our specialist services to organisations likely to have a professional need for themEstablishing, exercising or defending legal claimsOur legitimate interests and, where applicable, legal obligation

Where we rely on legitimate interests for business development, our interest is in identifying and contacting organisations that may reasonably require music-rights, licensing or royalty support. We aim to keep this activity relevant, proportionate and directed to people in an appropriate professional role.

You may object to direct marketing at any time. We will then stop using your personal information for that purpose.

We will not send unsolicited electronic marketing to individuals, sole traders or other recipients protected by the Privacy and Electronic Communications Regulations unless we have the required consent or another applicable legal permission.

5. Cookies and website technologies

Our website may use cookies and similar technologies for essential operation, security, preferences and website measurement.

Technologies that require consent will not be used until you have made an appropriate choice. You can reject or change your choices through [describe cookie settings link or control].

Details of the technologies currently used—including their providers, purposes and durations—are available in our [Cookie Notice/link].

6. Who we share information with

Where necessary, we may share personal information with service providers supporting our business, such as:

• Website hosting and technical-support providers.

• Email, calendar and cloud-storage providers.

• Customer or contact-management services.

• Website analytics providers.

• Accountants, insurers, legal advisers and other professional advisers.

• Payment providers and banks.

• Public authorities where disclosure is required by law.

Service providers acting on our behalf are permitted to use personal information only as necessary to provide their services and must protect it appropriately.

We do not sell personal information.

7. International transfers

Some service providers may store or access personal information outside the United Kingdom.

Where this happens, we use an appropriate legal safeguard, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, as applicable.

You can contact us for further information about the safeguards used for a particular transfer.

8. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

Normally:

• General enquiries that do not lead to work are retained for up to two years after the last meaningful contact.

• Business-development contact records are reviewed regularly and normally retained for up to two years after the last meaningful contact.

• Client, contract, project and accounting records are normally retained for six years after the relevant relationship or financial period ends, unless a different period is legally required.

• Website security logs are retained for 6 months.

• Cookie and analytics information is retained for the periods stated in the Cookie Notice.

• A minimal suppression record may be retained after an objection or unsubscribe request so that we can ensure the person is not contacted again.

We may retain information for longer where this is necessary to meet a legal obligation or deal with a legal claim.

9. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

No internet or email system can be guaranteed to be completely secure. Please contact us if you believe information you have provided may have been compromised.

10. Your rights

Depending on the circumstances, you may have the right to:

• Ask for access to your personal information.

• Ask us to correct inaccurate or incomplete information.

• Ask us to delete your information.

• Ask us to restrict how your information is used.

• Object to processing based on legitimate interests.

• Object to direct marketing at any time.

• Receive certain information in a portable format.

• Withdraw consent where processing is based on consent.

These rights are subject to legal conditions and exemptions.

To exercise a right, contact us using the details in section 1. We may need to request information confirming your identity. We will not normally charge a fee.

11. Data protection complaints

If you are concerned about how we have used your personal information, please contact us at [privacy/contact email] and state that you are making a data protection complaint.

We will:

• Acknowledge the complaint within 30 days.

• Take appropriate steps to investigate it.

• Keep you informed where appropriate.

• Explain the outcome without unjustifiable or excessive delay.

If you remain dissatisfied, you can complain to the Information Commissioner’s Office:

Website:ico.org.uk/make-a-complaint
Telephone: 0303 123 1113

You may also have the right to seek a remedy through the courts.

12. Automated decisions

We do not use personal information to make solely automated decisions that have legal or similarly significant effects on individuals.

13. Children

Our services and website are intended for businesses and professional users. We do not knowingly collect personal information from children through the website.

14. Third-party websites

Our website may contain links to websites operated by other organisations. Their handling of personal information is governed by their own privacy notices, not this one.

15. Changes to this notice

We may update this notice when our services, suppliers or legal obligations change. The date at the top shows when it was last updated. Material changes will be brought to people’s attention where appropriate.