Legal
Privacy Notice
How Blinding Talent Limited collects, uses, and protects your personal data.
Version3.0
Effective date: 1 January 2026
Last reviewed: June 2026
Applies to: blindingtalent.com
Blinding Talent Limited ("we", "us", "our") is a music industry consultancy registered in England and Wales. We are the data controller in respect of personal data processed under this notice, and are registered with the Information Commissioner's Office (ICO) as required by UK data protection law.
Registered nameBlinding Talent Limited
Address1 The Briars, Waterberry Drive, Waterlooville, PO7 7YH
Email: [email protected]
Website: blindingtalent.com
For any questions about this notice, or to exercise your data rights, please contact us at [email protected].
This notice is issued under and complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), the Privacy and Electronic Communications Regulations 2003 (PECR), and guidance issued by the Information Commissioner's Office. References to "data protection law" in this notice mean the UK GDPR and DPA 2018 together.
We may receive personal data from analytics providers such as Google Analytics (pseudonymised usage data), social media platforms when you interact with us through those channels, and business partners where we have a legitimate joint purpose. We do not purchase marketing lists or obtain data from credit reference agencies unless specifically required for a contract with you.
Data protection law requires us to have a lawful basis for processing your personal data. Below are the purposes for which we process your data and the basis on which we do so.
Responding to enquiries and providing our services
Lawful basis: Article 6(1)(b) — performance of a contract or pre-contractual steps
Managing our relationship with you, including billing and account management
Lawful basis: Article 6(1)(b) — performance of a contract
Sending marketing communications about our services (where you have opted in)
Lawful basis: Article 6(1)(a) — consent
Sending marketing communications about similar services to existing clients
Lawful basis: Article 6(1)(f) — legitimate interests (direct marketing under PECR soft opt-in)
Improving our website, services, and user experience
Lawful basis: Article 6(1)(f) — legitimate interests (service improvement)
Complying with legal obligations such as tax and fraud prevention
Lawful basis: Article 6(1)(c) — legal obligation
Protecting our legal rights and interests
Lawful basis: Article 6(1)(f) — legitimate interests (legal defence)
Conducting analytics and understanding how our website is used
Lawful basis: Article 6(1)(f) — legitimate interests, or consent where cookies require it
Where we rely on legitimate interests, we have carried out a balancing test to ensure our interests do not override your rights. You can request details of that assessment by contacting us. Where we rely on consent, you may withdraw it at any time — withdrawal does not affect the lawfulness of processing carried out before that point.
If you are a prospective client or have not previously purchased from us, we will only send you marketing communications where you have given us your explicit consent. If you are an existing client, we may contact you about similar services under the "soft opt-in" exemption in PECR Regulation 22.
You can opt out at any time by clicking the unsubscribe link in any marketing email, emailing [email protected], or writing to our registered address. We will never sell, rent, or trade your personal data to third parties for their own marketing purposes.
We do not sell personal data. We may share it with the following parties:
We engage trusted third parties who process data on our behalf under written data processing agreements — including IT and hosting providers, email platforms, analytics services, accounting software, and CRM tools. They may only use personal data for the purposes we specify and must implement appropriate security measures.
We may share personal data with our lawyers, accountants, auditors, and insurers where necessary.
We may disclose personal data where required by law, court order, or at the request of a regulatory authority such as the ICO or HMRC.
If we sell, merge, or transfer all or part of our business, personal data may be transferred to the acquirer. We will notify you before any such transfer takes place and your rights under this notice will continue to apply.
Some of our service providers are based outside the UK. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including transfers to countries covered by UK adequacy regulations, use of the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, or other ICO-approved transfer mechanisms. You may request further details by contacting us at [email protected].
We retain personal data only for as long as necessary for the purposes set out in this notice, or as required by law.
Client contract records and correspondence7 years
Accounting and financial records7 years (HMRC)
Prospect and marketing contact records3 years or until opt-out
General correspondence and enquiries3 years
Website analytics (cookies)Up to 26 months
Job applicant records (unsuccessful)6 months
At the end of the applicable retention period, personal data is securely deleted or anonymised.
Our website uses cookies and similar technologies to distinguish you from other users, remember your preferences, and improve your experience. We use four categories of cookie:
A cookie consent banner will appear on your first visit. You can update your preferences at any time via the cookie settings link in our website footer. Full details are in our Cookie Notice.
Under UK data protection law, you have the following rights in relation to your personal data:
Access: Request a copy of the personal data we hold about you (a Subject Access Request).
Rectification: Ask us to correct inaccurate or incomplete personal data.
Erasure: Request deletion of your personal data where there is no compelling reason for its continued processing.
Restriction: Ask us to restrict or suspend processing of your data in certain circumstances.
Portability: Receive a copy of data you have provided to us in a structured, machine-readable format, where processing is based on consent or contract.
Objection: Object to processing based on legitimate interests, or to direct marketing — this is an absolute right.
Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
Automated decisions: Not to be subject to solely automated decision-making, including profiling, that has a significant effect on you.
To exercise any of these rights, submit a written request to [email protected]. We will respond within one calendar month and will not charge a fee for reasonable requests. We may need to verify your identity before we can act on your request.
We implement appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, or disclosure — including encryption of data in transit (TLS/SSL), role-based access controls, regular security testing, and staff training on data protection.
Where we have issued you a password to access our services, you are responsible for keeping it confidential. In the event of a personal data breach likely to risk your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify affected individuals without undue delay.
Our website may contain links to third-party websites. This notice does not apply to those sites. We encourage you to read the privacy notice of any external site you visit. We are not responsible for the privacy practices of third parties.
Our services are not directed to individuals under 18. We do not knowingly collect personal data from children. If we become aware that we have done so without appropriate parental consent, we will delete it promptly. If you believe we hold data on a child, please contact us at [email protected].
We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects on you. If this changes, we will update this notice and, where required by law, seek your consent beforehand.
If you believe we have not handled your personal data lawfully, you have the right to complain to the Information Commissioner's Office (ICO).
ICO website: ico.org.uk
Helpline: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
We would welcome the opportunity to resolve your concerns directly before you contact the ICO — please reach out to us first at [email protected].
We review and update this notice at least annually, or whenever there is a material change to how we process personal data. The version number and "last reviewed" date at the top of this page will be updated accordingly. Where changes are material, we will notify you by email or via a prominent notice on our website. Previous versions are available on request.
For any questions, concerns, or to exercise your rights under this notice:
Email: [email protected]
Post: Blinding Talent Limited, 1 The Briars, Waterberry Drive, Waterlooville, PO7 7YH
Website: blindingtalent.com
© 2026 Blinding Talent Limited. All rights reserved.
Privacy Notice v3.0 — last reviewed June 2026