The Small Print

This policy explains what personal data we collect when you visit this site, why we collect it, and what we do with it. We operate under the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).

Who we are

The data controller for this site is Tan Sholto, [Registered address — to be confirmed]. This site is built and managed using VerbStage, a website platform for independent artists — VerbStage acts as a data processor on Tan Sholto’s behalf.

For data-related queries, contact us at privacy@verbstage.com.

What data we collect

Newsletter sign-up — the “sign up” button takes you to a sign-up form hosted by HubSpot. Anything you enter there (such as your email address) is collected and processed directly by HubSpot on behalf of Tan Sholto, under Tan Sholto’s own HubSpot account. This website does not receive or store your newsletter details.

Contact form — if you send a message using the contact form (your name, email, and message), it is delivered to Tan Sholto by email so they can reply. The message is not stored by this website — it is transmitted for delivery only, and we do not add you to any mailing list.

Usage data — we use privacy-friendly analytics to understand how people use this site. This data is aggregated and anonymised where possible. See the Cookie Policy below for details.

Lawful basis

Newsletter sign-ups are collected and handled by HubSpot under Tan Sholto’s account; the consent for those (UK GDPR Article 6(1)(a)) is captured on HubSpot’s form and managed there. Contact-form messages are processed on the basis of legitimate interests (Article 6(1)(f)) — delivering a message you chose to send. Analytics are processed on the basis of legitimate interests in understanding site performance; because they run in a cookieless mode that stores nothing on your device, no cookie-consent banner is required.

How long we keep your data

We do not store newsletter data — it is held by HubSpot under Tan Sholto’s account until you unsubscribe. Contact-form messages are not stored by this website; they are delivered to Tan Sholto by email, and any retention after that sits with Tan Sholto. Analytics retain only aggregated, anonymous statistics with no personal data stored.

Third parties

We share data with the following processors, all of whom are contractually bound to handle it securely:

• HubSpot — newsletter sign-ups, collected and processed directly under Tan Sholto’s HubSpot account (US, EU-US Data Privacy Framework)
• Resend — transmits contact-form messages by email for delivery to Tan Sholto (not stored)
• Google Analytics 4 — site analytics, run in a cookieless configuration (Google Consent Mode, analytics storage off); aggregated usage only, no analytics cookies set (Google, US, EU-US Data Privacy Framework)
• Vercel — site hosting (UK, London region)
• Supabase — database hosting (EU region)

We do not sell your data to any third party.

Your rights

Under UK GDPR you have the right to access, correct, delete, or port your data, and to object to or restrict processing. To exercise any of these rights, email privacy@verbstage.com. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

By using this site you agree to these terms. If you don’t agree, please don’t use the site.

What this site is

This is the official website of Tan Sholto. The site is built and hosted using VerbStage, a website platform for independent music artists. All content — music, images, biographical text — is owned by Tan Sholto or their licensors.

Intellectual property

All music, artwork, photographs, videos, and written content on this site are protected by copyright. You may not reproduce, distribute, or use any of it without the explicit written permission of the rights holder. Sharing links to the site is always welcome.

Acceptable use

You must not use this site to transmit spam, attempt to gain unauthorised access to any system, scrape content in bulk, or do anything unlawful. We reserve the right to block access for misuse.

Links to third parties

This site links to streaming platforms, ticketing services, and social media. We are not responsible for the content or privacy practices of those external sites.

The mailing list

The mailing list is operated by Tan Sholto using HubSpot. When you sign up you are taken to HubSpot’s own form and deal directly with Tan Sholto and HubSpot. This website and the VerbStage platform do not operate, control, or store the mailing list, and are not responsible for it.

Platform

This website is provided using VerbStage, a platform for independent artists. VerbStage’s role is limited to hosting the website and passing contact-form messages to Tan Sholto for delivery. VerbStage is not the author of the site’s content, does not operate Tan Sholto’s mailing list, and is not responsible for any third-party service you are directed to from this site.

Disclaimer

This site is provided “as is” without warranties of any kind. We do not guarantee uninterrupted access or that all information is always up to date. Nothing on this site constitutes professional advice of any kind.

Governing law

These terms are governed by the laws of England and Wales. Any disputes are subject to the exclusive jurisdiction of the courts of England and Wales.

Cookies are small files stored on your device when you visit a website. We use them to keep the site working and to understand how it’s used.

Essential cookies

These are necessary for the site to function and cannot be switched off. They do not identify you personally.

Analytics

We use Google Analytics 4 to understand how people use this site — pages visited, time on site, referral source. It is run in a cookieless configuration (Google Consent Mode with analytics storage disabled), so it does not set analytics cookies on your device. The data is aggregated and is not used to identify you, and because nothing is stored on your device, no cookie-consent banner is required under PECR. Google acts as our analytics provider and may process this data in the US under the EU-US Data Privacy Framework.

Managing cookies

You can control and delete cookies through your browser settings. Disabling cookies may affect how the site works. For more information visit allaboutcookies.org.

Changes to this policy

We may update this cookie policy as we add or remove tools. The “last updated” date at the top of each section tells you when it was last changed.