Privacy Policy

This Privacy Policy applies to Fly Money Universe, operated by Fly Money Music C.I.C., a Community Interest Company registered in England and Wales.

Our website is located at www.flymoneyuniverse.com. For any privacy-related queries, contact us at [email protected].

We are the Data Controller for the personal data we collect through this website. We are committed to protecting your privacy and handling your data in an open and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We collect the following categories of personal data:

• Identity data: name, username or display name.
• Contact data: email address.
• Financial data: bank account details (sort code, account number, IBAN/SWIFT, PayPal email) provided voluntarily by artists and authors for cashout purposes. We do not store full card numbers or CVV codes — payment card data is handled exclusively by Stripe.
• Transaction data: details of purchases you make through our site, processed via Stripe.
• Profile data: artist or author biography, country, genre, social media handles, and uploaded content (music, books, clothing listings).
• Marketing preferences: email addresses submitted via our "Notify Me" restock alerts.
• Technical data: IP address, browser type and version, time zone, operating system, and other technology identifiers on devices used to access our site.
• Usage data: information about how you use our website, products and services.

We collect data through the following means:

• Direct interactions: when you register an account, complete a purchase, submit an artist or author profile, fill in a contact form, or sign up for restock notifications.
• Automated technologies: as you interact with our site, we may automatically collect technical data about your equipment, browsing actions and patterns using cookies and similar technologies.
• Third parties: Stripe (payment processing), Manus (platform hosting and authentication), and analytics providers.

We use your personal data for the following purposes and on the following legal bases:

We do not sell your personal data. We may share your data with:

• Stripe Inc. — for secure payment processing. Stripe's privacy policy is available at stripe.com/gb/privacy.
• Manus — our platform and hosting provider. Data is processed in accordance with their data processing agreement.
• Law enforcement or regulatory authorities — where required by law or to protect the rights and safety of our users and the public.

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.

• Account data: retained for the duration of your account and for up to 2 years after account deletion.
• Transaction and financial data: retained for 7 years to comply with HMRC requirements.
• Notify Me emails: retained until you unsubscribe or the product is restocked and the notification is sent.
• Bank details: retained only while your artist or author account is active and for 6 months after account closure.

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to restrict processing — request that we restrict the processing of your data in certain circumstances.
• Right to data portability — request transfer of your data to you or a third party in a machine-readable format.
• Right to object — object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We use essential cookies to maintain your login session and ensure the site functions correctly. We do not use advertising or tracking cookies. By using our site, you consent to the use of essential cookies.

Our platform is hosted by Manus, which may process data outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses where applicable.

We have implemented appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration or disclosure. Bank details are stored with encryption. Payment card data is never stored on our servers and is handled exclusively by Stripe's PCI-DSS compliant infrastructure.

Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at [email protected] and we will delete it promptly.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically. Continued use of the site after changes constitutes acceptance of the updated policy.

For any questions, concerns or requests regarding this Privacy Policy or your personal data, please contact: