Privacy Policy

Flipside Promotions is the trading name of Franky Smith, operating as a sole trader. We are the data controller responsible for the personal data described in this policy.

Trading address: 31 Poplar Road, Esher, KT10 0DD, United Kingdom

Data protection queries: [email protected]

We collect different data depending on how you use the Services:

• Visitors: basic technical data (browser type, device type, approximate location from IP address, pages visited) collected through privacy-friendly analytics.
• Contact and enquiry forms: name, email address, and the content of your message when you contact us or register interest in a venue partnership.
• DJ accounts and applications: name, email, phone number, social and streaming profile links, biography, photos, mix and broadcast uploads, and — for radio membership applicants — the information submitted with your application (including references to the membership package and any promotional offer used).
• Radio membership and payments: billing name, billing address, and transaction metadata (amount, package, date). We do not collect or store full card numbers — these are handled directly by Stripe (see section 6).
• Account credentials: a securely hashed password for DJ portal and admin accounts, and login/session metadata used to keep your account secure.
• User-generated content: anything you upload or publish through your DJ profile or portal, such as photos, gallery images, mixes, and radio show artwork.

• To operate and maintain your account and the DJ self-service portal.
• To process radio membership applications, packages, promotions, and payments.
• To display DJ profiles, events, news, mixes, and radio schedules on the public site.
• To respond to contact form enquiries and venue registration requests.
• To send service communications — for example, application status updates, payment receipts, and account security notices.
• To keep the Services secure, prevent fraud, and enforce our Terms & Conditions.
• To understand aggregate site usage and improve the Services.

We do not sell personal data, and we do not use your data for third-party advertising.

Under UK GDPR and EU GDPR, we rely on the following legal bases:

• Contract: to create and manage your DJ or admin account, process radio membership packages, and take payment for services you have purchased.
• Legitimate interests: to run and secure the Services, respond to enquiries, and understand how the site is used — balanced against your rights and interests.
• Consent: where you have chosen to submit optional information (such as social links or a biography) or where consent is required for a specific feature.
• Legal obligation: to meet accounting, tax, and other legal requirements, for example retaining payment records.

We use a limited number of essential cookies and privacy-friendly analytics. Full details, including what is set and how to manage it, are in our Cookie Policy.

Radio membership and DJ package payments are processed by Stripe, Inc., a PCI-DSS compliant payment processor. When you make a payment, your card details are entered directly into Stripe’s secure checkout and are never stored on our servers. We receive and store limited transaction metadata from Stripe (such as payment status, amount, and a reference ID) so we can match payments to memberships, issue receipts, and handle subscription billing. Stripe’s own processing of your data is governed by Stripe’s Privacy Policy.

To help keep our public forms — including enquiry, registration, and application forms — free from spam, automated submissions, fraud, and abuse, we use Cloudflare Turnstile, a website security service provided by Cloudflare, Inc. When you submit one of these forms, Turnstile may process limited technical and behavioural information (such as browser and device signals, IP address, and interaction patterns) that is necessary to distinguish legitimate users from automated traffic.

This processing is carried out for the purposes of website security and to protect Flipside Promotions’ services and users from spam, automated submissions, fraud, and abuse. Where appropriate, we rely on our legitimate interest in securing the Services and preventing misuse as the lawful basis for this processing.

Cloudflare acts as a service provider (data processor) in connection with this processing. You can find out more about how Cloudflare handles this information in Cloudflare’s Privacy Policy and the Turnstile Privacy Addendum.

We share personal data only where necessary to operate the Services, with:

• Stripe — payment processing for radio memberships and packages.
• Supabase — our database and file storage provider, hosting account data and uploaded media.
• Resend — our transactional email provider, used to send account, application, and payment-related emails.
• Vercel — our website hosting provider.
• Plausible Analytics — privacy-friendly, cookieless website analytics.
• Cloudflare — website security provider, used to help detect and prevent spam, automated submissions, fraud, and abuse on public forms (see section 7).
• Regulators, law enforcement, or professional advisers where we are legally required to, or where necessary to protect our rights or the safety of others.

Each of these providers acts as our data processor and is contractually required to protect your data and only use it for the purposes we instruct.

Flipside Promotions is a UK-based business, but our DJs and listeners are based all over the world, and some of our service providers — including our payment processor and hosting infrastructure — may process personal data outside the UK and, for EU-based individuals, outside the European Economic Area (EEA), including in the United States. Where a transfer like this takes place, we rely on whichever lawful transfer mechanism applies:

• transferring to a country covered by an applicable UK or EU adequacy decision, which recognises that country’s data protection standards as adequate;
• putting contractual safeguards in place, such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses; or
• relying on another lawful transfer mechanism recognised under UK GDPR or EU GDPR, where required.

See our GDPR & Data Protection page for more on your rights in relation to this processing.

We keep personal data only for as long as it is needed for the purposes described in this policy. As a general guide: active account data is kept for the life of your account; payment and transaction records are kept for as long as required by UK tax and accounting law (typically six years); and contact form enquiries are kept for a reasonable period to allow us to follow up, after which they are deleted.

If you cancel a radio membership, your DJ profile and associated records (such as your show history and application details) are made inactive rather than deleted — they are removed from public listings and the broadcast schedule, but Flipside Promotions may retain them for legitimate operational, legal, and accounting purposes (for example, to support a future reactivation, to meet our tax and accounting obligations, or to resolve a dispute). See section 6 of our Terms & Conditions for how cancellation, deactivation, and reactivation work. Where we no longer have a legal or operational reason to keep inactive data, we will delete or anonymise it.

Details of your data protection rights, and how to exercise them, are set out in our GDPR & Data Protection page.

The Services are intended for individuals aged 16 or over. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us using the details below and we will remove it.

We use technical and organisational measures — including encrypted connections, access-controlled admin systems, and securely hashed passwords — to protect personal data against unauthorised access, loss, or misuse. No online service can guarantee absolute security, but we review our practices as the Services grow.

We may update this Privacy Policy from time to time, for example as the Services evolve. We will update the “Last updated” date at the top of this page, and where changes are significant we will take reasonable steps to notify registered users.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected] or by post at 31 Poplar Road, Esher, KT10 0DD, United Kingdom.