Privacy Policy

The data controller for PerformConnect Arts is Think-I Ltd, registered in England & Wales. We operate the platform at arts.performconnect.co.uk.

Contact: hello@performconnect.co.uk

We collect only what we need to run the platform:

• Account information — your name, email address, and password (hashed, never stored in plain text)
• Profile information — your artist role, genres, location, bio, links, and any media you upload
• Payment details — handled entirely by Stripe; we receive only a transaction reference and subscription status. We never see or store card numbers.
• Usage data — pages visited, features used, and device/browser type, to help us improve the platform

We use your data to:

• Provide and maintain the PerformConnect Arts service
• Process subscription payments via Stripe
• Send you transactional emails — account confirmations, payment receipts, security notices (via Resend)
• Improve the platform based on how it's used
• Send marketing updates about PerformConnect Arts where you have given consent — you can opt out at any time

We rely on the following lawful bases under UK GDPR:

• Contract performance — to deliver the service you signed up for
• Legitimate interests — to improve the platform, prevent fraud, and ensure security
• Consent — for marketing emails, where you have opted in
• Legal obligation — where we are required to retain records (e.g. financial records)

We use a small number of trusted third-party services to run the platform. We do not sell your data to anyone.

• Supabase — our database and authentication provider. Your account and profile data is stored here. Servers are located in the EU.
• Stripe — payment processing. Stripe handles all card data and is PCI-DSS compliant.
• Resend — transactional email delivery (account confirmations, receipts, security emails).
• Netlify — platform hosting and deployment infrastructure.

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data (“the right to be forgotten”)
• Restriction — ask us to limit how we use your data while a dispute is resolved
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests or for direct marketing

To exercise any of these rights, email hello@performconnect.co.uk. We will respond within one calendar month.

Your profile and account data is retained while your account is active. If you delete your account, we will remove your personal profile data within 6 months, unless we are required to retain certain records for longer.

Payment and transaction records are kept for 7 years in line with UK financial record-keeping requirements.

We use session cookies only — specifically, Supabase authentication tokens to keep you logged in. We do not use advertising trackers, analytics cookies, or any third-party tracking pixels.

If you clear your cookies, you will be logged out. That's all they do.

Supabase stores data on EU servers. However, Supabase and Stripe may process certain data in the United States. Where this occurs, it is carried out under the UK International Data Transfer Agreement or equivalent Standard Contractual Clauses, which provide appropriate safeguards for your data.

If you have any questions about how we handle your data, email us at hello@performconnect.co.uk.

If you are unhappy with how we have handled your data and we have not resolved your concern, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.