Cookie & privacy policy

What we collect

• Orders: name, email, song brief, package, promo, and payment status.
• Guest checkout: you can order as a guest with no account needed. We only collect the details needed for your order, such as your name, email, the song brief and, for physical gifts, a delivery address.
• Find your song: if you look up a song so you can order a keepsake, we use the order number and the email on that order to show you that song’s title and cover. When you ask, we email a one-time code to the address on the order. The result is kept for your visit only. We keep a short log of lookup attempts so we can limit misuse.
• Account (optional): if you choose to create an account: email, optional name and company name, international address (lines, city, optional region, postal/ZIP code, country), phone with country code, optional “how did you hear about us?”, and an explicit marketing email preference (off by default — separate from order emails). We serve customers worldwide. We keep a sign-in session after you request an email code.
• Phone calls: calls to our business phone line may be answered by an assistant. We keep a summary and transcript of the call so we can deal with your enquiry and provide customer service.
• Newsletter: name and email if you subscribe (including the popup).
• News and offers after you buy: if you pay for an order and leave the “rather not hear from us” box unticked, we may email you occasional news and offers on our similar songs and gifts (the “soft opt-in” under PECR). We never do this for an order you didn't finish. Every such email has an unsubscribe link, and you can opt out at any time.
• Enquiries: details you send via the contact form.
• Analytics (optional): after you click “Accept”, a first-party visitor id cookie and anonymous page-view records in our own database (path, referrer if available, rough visit counts). No advertising cookies. No Google Analytics unless we change this policy later.
• Campaign labels (optional): if you accepted cookies, your order can store the campaign labels from the link you arrived on (no name or email) so we can see which posts and emails lead to orders.
• Notifications (optional): if you tap Allow, we store a push subscription for that browser, linked to your account and orders, so we can tell you when your song is in production, ready to download, or live on Spotify. You can turn this off on your account. We don't use it for marketing.
• Gift recipients: if you ask us to post a card or a postcard, we collect the recipient’s name and UK address, and the message you want printed. We use those details only to deliver what you ordered. We never use them for marketing. Prodigi prints and posts the item for us. We delete the recipient’s address and message 90 days after the item is dispatched. The order itself stays in our records.
• Purchase metrics: when an order is paid, we store a first-party conversion record (amount, package, whether gifts were added, promo code if any) for internal sales reporting. This is part of the order business record, not a marketing cookie, and does not require analytics consent.

Photos you upload

A photo is optional. If you upload one, we use it for cover artwork and for gifts such as a plaque. We keep it while the order is on your account so we can produce that artwork and gift. We delete it when you delete your account, or sooner if you ask us to. We do not use uploaded photos for advertising.

Photos you upload for an Album From You are used to make that album and its 4-page booklet. Our songwriter looks through the photos you share to spot the people and moments worth asking you about. We delete those photos 30 days after you approve the album, or 90 days after we email the listening page, whichever comes first. The finished 4-page booklet PDF stays with the album download. A shared-album link you paste is stored so we can ask you about it. We do not download that album automatically. Dates in a photo are read so we can put photos in order. The place stored in a photo is kept only if you tick the box that asks us to. A streaming release needs a separate tick from the person the album is about.

Printed gifts are made by our print partner. We send that partner the photo or artwork for the gift, and the delivery address, so they can make and post it. For a CD of your song, our CD duplication partner also receives the song recording, so they can make the CD, and for the card wallet format the front and back print files (with your text for the back or your song lyrics, if you chose them). For a cover-art mug of your song, our mug print partner receives the cover artwork (with your personal message and Spotify code, if you added them) and the delivery address, so they can print and post the mug. For a song poster, our print partner receives the print file (the cover artwork, the song title and, if you added them, your personal message and the Spotify code) and the delivery address, so they can print and post the poster. Orders for a vinyl record placed before we stopped selling records were sent to our vinyl cutting partner with the recording, the cover artwork and the delivery address.

Payments (Stripe)

Card payments are taken by Stripe. Your card number, expiry date and security code are handled by Stripe on Stripe’s pages. We never store those card details. We keep the payment status, the amount, and Stripe’s payment reference on the order.

Email (Resend) and review invitations

We send sign-in codes, order updates and other emails through Resend. Resend processes the email address and the message so it can be delivered.

Order-confirmation emails are also blind-copied to Trustpilot, so Trustpilot can send you a review invitation. That copy includes your name and email address. Other emails are not copied to Trustpilot.

Streaming

If you add listen anywhere, our streaming distribution partner offers the song on streaming services. We send that partner the recording and the title details they need. We do not send them your card details.

Cookies

You can change your mind anytime by clearing site cookies in your browser; the consent banner will appear again.

Cloudflare Web Analytics

If you choose “Accept”, we load Cloudflare Web Analytics. It is cookieless and records aggregate visitor statistics, such as which pages were viewed. It does not use an advertising cookie. If you choose “Essential only”, we do not load it. Our own first-party visit counts, described above, use the same choice.

The Android app

The Tune From You Android app shows this same website. Signing in, ordering and deleting your account all happen here. The app does not keep a separate account, and it does not keep a separate copy of your photos or orders.

How long we keep data

Order and fulfilment records are kept as long as needed to deliver songs and meet accounting / legal duties. Analytics page views are operational metrics we may prune over time. Uploaded photos are kept while the order is on your account, then deleted when you delete the account. Album From You photos follow the shorter timetable in “Photos you upload”.

Delete your account

You can delete your account and the personal details we hold, from the website or from the Android app, which shows this site. See how to delete your account. That page explains what is deleted and what we have to keep: paid order and invoice records, with personal details removed, because UK tax and accounting law requires them.

Contact

Questions about privacy or cookies: hello@tunefromyou.co.uk. To ask us to delete an account without using the site or the app, email customerservice@tunefromyou.co.uk. Also see our terms and conditions and contact page.