Privacy policy

What we collect, why, who helps us handle it, and your rights. Last updated 5 November 2026.

Who is responsible

Tobin Coles, trading as FEYYYO, of 91a Moorland Road, Weston-super-Mare, Somerset, BS23 4HS, United Kingdom, is the "controller" of your personal data. Contact: tobinmc.music@gmail.com.

What we collect and why

  • Studio account: your email address, your plan (none, invited, monthly or lifetime) and when you signed up. We use it to sign you in and give you the right access. Legal basis: needed to provide the service you asked for.
  • Payments: when you buy, Stripe handles your card and billing details. We receive your email, your Stripe customer and subscription IDs and what you bought. We never see or store your card number. Legal basis: contract, and our legal obligation to keep financial records.
  • Mailing list and Studio early-access list: your email address, which you give us when you sign up. We use it to send news, release announcements and invites. Legal basis: your consent. You can unsubscribe at any time.
  • Booking and contact forms: the details you put in the form, so we can reply to your enquiry. Legal basis: our legitimate interest in answering you, or steps before a contract.
  • Technical data: your IP address is used briefly to protect the sign-in form from abuse (rate limiting), and ordinary server logs are kept by our host. Legal basis: legitimate interest in keeping the service secure.

We don't sell your data, and we don't use advertising or tracking cookies.

Cookies and similar technology

When you sign in to the Studio we set one cookie to keep you signed in (for up to 30 days, or until you sign out). It's strictly necessary for the sign-in to work, so we don't ask for consent. We don't use analytics or advertising cookies. The website loads fonts from Google Fonts, which means your browser contacts Google's servers when a page loads.

Who else handles your data

We use these services ("processors") to run the site:

  • Cloudflare: hosting, the Studio sign-in and database, security.
  • Resend: sends the sign-in emails.
  • Stripe: takes payments and handles billing.
  • Formspree: receives the booking form and mailing-list sign-ups and passes them to us.

Some of these companies are based outside the UK (mainly in the United States) and rely on safeguards such as the UK data bridge or standard contractual clauses to protect your data.

How long we keep it

  • Studio account details: for as long as you have an account, then up to 12 months after it ends.
  • Payment records: 6 years, as UK tax rules require.
  • Mailing list: until you unsubscribe.
  • Booking and contact enquiries: up to 2 years.

Your rights

Under UK data protection law you can ask to see the data we hold about you, correct it, have it deleted, restrict or object to how we use it, take a copy of it, and withdraw consent at any time. Email tobinmc.music@gmail.com and we'll reply within one month. If you're unhappy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If we change this policy in a way that matters, we'll say so on this page and update the date above.