NEWZONE AUDIO LTD
Privacy & Cookie Policy
Entity: NEWZONE AUDIO LTD (Co. No. 15170028) · Jurisdiction: England & Wales (UK)
Effective Date: August 12, 2026 · Website: studio.newzone.audio
Official Corporate Information
Legal Name: NEWZONE AUDIO LTD
Company Registration Number: 15170028 (Registered in England and Wales)
Registered Office Address: Bartle House, 9 Oxford Court, Manchester, England, M2 3WQ, United Kingdom
Official Email Contact: tomas@newzone.audio
Official Website: https://studio.newzone.audio
Part 1: UK GDPR Privacy Policy
1. Data Controller Identification & Privacy Contact
Plain English: This Privacy Policy explains how NEWZONE AUDIO LTD collects, uses, and protects your personal data in full compliance with UK GDPR and EU data protection laws. We collect minimal personal data—mainly your name and email via Google SSO—to deliver the course. We do not sell your data. You have complete legal rights to access, correct, or request the deletion of your data at any time.
1.1 NEWZONE AUDIO LTD is the Data Controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1.2 If you have any questions regarding this Privacy Policy, your rights, or wish to submit a data request, please contact our Data Protection Officer / Privacy Lead at:
NEWZONE AUDIO LTD — Data Privacy Office
Email: tomas@newzone.audio
Address: Bartle House, 9 Oxford Court, Manchester, England, M2 3WQ, United Kingdom
2. Personal Data We Collect & Methods of Collection
2.1 We collect personal data directly from you and automatically via platform interactions as detailed in the table below:
| Data Category | Specific Data Items | Collection Method |
|---|---|---|
| Identity & Account Data | Full name, email address, profile avatar image, unique user ID. | Collected via Google Single Sign-On (SSO) upon user registration. |
| Financial & Transaction Data | Billing address, country, transaction ID, payment status, tax region. (Note: Full payment card details are collected directly by Paddle). | Collected directly by Paddle.com as Merchant of Record. |
| Technical & Usage Data | IP address, browser type, login timestamps, course progress tracking, lesson completion metrics. | Automated logging via Supabase backend authentication services. |
| Analytics Data | Page URL, referrer, device and browser type, approximate location, and interaction events (such as page views). | Collected by Google Analytics 4 only after you accept optional analytics cookies via the Cookie Consent Banner. |
| Communication Data | Email correspondence, support inquiries, feedback submissions. | Direct email communication to tomas@newzone.audio. |
3. Lawful Bases for Processing Under UK GDPR
3.1 We process your personal data strictly where permitted under Article 6 of the UK GDPR:
- Contractual Necessity (Article 6(1)(b)): Processing is necessary to deliver the course, manage your user account, verify authentication, and grant access to purchased digital content.
- Legitimate Interests (Article 6(1)(f)): Processing is necessary for our legitimate interests in securing our platform, preventing piracy/account sharing, maintaining system integrity, and managing user support.
- Legal Obligation (Article 6(1)(c)): Processing is necessary to comply with legal, tax, corporate recordkeeping, and financial regulations in the UK.
- Consent (Article 6(1)(a)): Optional Google Analytics 4 measurement is processed only where you have given prior consent through the Cookie Consent Banner. You may withdraw consent at any time via Cookie settings.
4. Payment Processing & Merchant of Record Data Handling
4.1 All payment transactions are managed directly by Paddle.com. NEWZONE AUDIO LTD does not collect, store, or process full credit/debit card details or bank account information.
4.2 Paddle acts as an independent Data Controller for customer billing and fraud prevention data, governed by the Paddle Privacy Policy. We receive confirmation of completed transactions, tax jurisdiction data, and transaction IDs from Paddle to unlock course access.
5. Data Processors & Third-Party Sharing
5.1 We share personal data only with trusted third-party service providers ("Data Processors") necessary to operate the platform:
| Service Provider | Role & Purpose | Data Shared / Handled |
|---|---|---|
| Supabase Inc. | Database infrastructure & user authentication engine. | Account ID, email, name, course progress logs. |
| Google LLC | Single Sign-On (SSO) OAuth service. | User email verification, OAuth token validation. |
| Google LLC (Analytics) | Optional website analytics (measurement ID G-ZGXYKFL3WN). | Page URL, referrer, device/browser data, approximate location, interaction events. |
| Paddle.com | Merchant of Record, payment gateway, tax calculation. | Purchase amount, tax region, transaction ID. |
| Vercel Inc. / Bunny.net | Web hosting & video content delivery network (CDN). | IP address, request logs for secure video streaming. |
5.2 We do not sell, rent, trade, or monetally exploit your personal data under any circumstances.
6. International Data Transfers & Safeguards
6.1 Because our platform relies on global cloud infrastructure (such as Supabase, Google, and Vercel servers located in the EU and USA), your personal data may be transferred to and processed in countries outside the UK.
6.2 Where data is transferred outside the UK or EEA, we ensure appropriate legal safeguards are implemented in accordance with UK GDPR Chapter V, including:
- Transferring data to countries recognized by the UK Secretary of State as providing an adequate level of data protection (Adequacy Regulations).
- Utilizing Standard Contractual Clauses (SCCs) approved by the European Commission along with the UK International Data Transfer Addendum (IDTA).
- Data encryption in transit (TLS 1.3) and at rest (AES-256).
7. Data Retention Schedule
7.1 We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements.
- Account Data & Course Progress: Retained for as long as your account remains active and registered on our platform.
- Support & Email Correspondence: Retained for up to twenty-four (24) months following issue resolution.
- Transaction & Financial Logs: Retained for six (6) years following transaction completion in accordance with UK statutory tax and corporate accounting laws.
8. Your Legal Rights Under UK GDPR
Plain English: Under UK data protection law, you have the right to inspect, correct, export, or permanently delete your account data. You can exercise these rights anytime by emailing tomas@newzone.audio. If you are unsatisfied with our response, you can complain to the UK ICO.
8.1 Under UK GDPR, you possess the following legal rights regarding your personal data:
| Legal Right | Description & Application |
|---|---|
| Right of Access (SAR) | You have the right to obtain a copy of the personal data we hold about you. |
| Right to Rectification | You have the right to request correction of inaccurate or incomplete personal data. |
| Right to Erasure | You may request permanent deletion of your account and personal data, subject to legal record retention requirements. |
| Right to Restriction | You may request that we temporarily suspend processing your data under certain conditions. |
| Right to Data Portability | You may request a machine-readable copy (JSON/CSV) of the personal data you provided. |
| Right to Object | You have the right to object to processing based on legitimate interests. |
8.2 How to Exercise Rights: To exercise any of these rights, email us at tomas@newzone.audio. We will respond within one (1) calendar month. Proof of identity may be requested to protect your account security.
8.3 Right to Complain to the Regulator: You have the legal right to submit a complaint at any time to the UK data protection supervisory authority:
Information Commissioner's Office (ICO)
Website: https://www.ico.org.uk
Helpline: +44 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
9. Automated Decision-Making and Profiling
9.1 We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on users.
Part 2: Cookie Policy & Technical Notices
1. What Are Cookies?
Plain English: We use essential cookies to keep you logged in securely and to process payments. Optional Google Analytics cookies are used only if you accept them in our Cookie Consent Banner. You can change this choice at any time via Cookie settings.
1.1 Cookies are small text files placed on your device by websites that you visit. They are widely used to make websites work efficiently, provide secure authentication, and remember user preferences. We also store your cookie preference in first-party browser storage so we can honour your choice on later visits.
2. Our Cookie Policy
2.1 NEWZONE AUDIO LTD uses strictly necessary cookies to operate the platform. We also offer optional Google Analytics 4 measurement. Analytics cookies are non-essential and are not set unless you give prior consent through our Cookie Consent Banner. We do not use advertising, cross-site tracking, behavioral profiling, or marketing cookies. Under UK PECR (Privacy and Electronic Communications Regulations) and UK GDPR, we request consent before setting any non-essential cookies on your device.
3. Strictly Necessary Cookies Used
3.1 The strictly necessary cookies and similar storage used on our platform are described below. These are required for the site to function and do not require consent:
| Cookie Provider | Cookie Category | Purpose & Expiry |
|---|---|---|
| Supabase Authentication | Strictly Necessary (Essential) | Stores secure OAuth session tokens to keep you authenticated as you navigate course lessons. Expiry: Session / 30 days. |
| Paddle Checkout | Strictly Necessary (Essential) | Processes secure checkout transactions, prevents fraud, and maintains cart state during checkout. Expiry: Session. |
| Cookie Consent Preference | Strictly Necessary (Essential) | Stores your analytics consent choice in first-party localStorage under the key cookie_consent to honour it on later visits. Expiry: Until you clear site data. |
3.2 Optional analytics cookies are set only after you click "Accept analytics" on the Cookie Consent Banner:
| Cookie Provider | Cookie Category | Purpose & Expiry |
|---|---|---|
| Google Analytics 4 (_ga) | Optional (Analytics) | Distinguishes unique users for aggregated website measurement. Set by Google only after consent. Expiry: 2 years. |
| Google Analytics 4 (_ga_*) | Optional (Analytics) | Persists the current measurement session state for Google Analytics 4 (measurement ID G-ZGXYKFL3WN). Set by Google only after consent. Expiry: 2 years. |
4. Cookie Consent Banner
4.1 Before any Google Analytics cookies are set, we display a Cookie Consent Banner. You may choose "Accept analytics" to allow optional measurement, or "Essential only" to continue using the site without analytics cookies. The Google Analytics script is not loaded unless you accept.
4.2 You can change your choice later by selecting Cookie settings in the site footer. If you withdraw consent, we stop loading Google Analytics and delete existing analytics cookies from this site where possible.
5. Managing Cookies in Your Browser
5.1 In addition to Cookie settings on this site, you can set your web browser to block or alert you about cookies. However, blocking strictly necessary authentication cookies will prevent you from logging into your account or accessing purchased course materials.
6. Contact and Inquiries
For any legal or privacy inquiries regarding these terms, please contact:
NEWZONE AUDIO LTD
Bartle House, 9 Oxford Court, Manchester, England, M2 3WQ, United Kingdom
Email: tomas@newzone.audio
Website: studio.newzone.audio
