Your account data, explained.

Effective 29 October 2026

DJ Compilations uses account and optional DJ-profile information to review access requests, operate the service, keep playlists in sync and manage subscriptions. We do not sell personal data.

1. Controller and contact

DJ Compilations, operated under the Ascer Studio name, is the controller for this service. Privacy and deletion requests can be sent to djcompilations@ascerstudio.com.

2. Information we collect

• Application and account: email address, password hash, DJ name, real name, account role and status.
• Vetting: the Facebook, Instagram, YouTube, Mixcloud or SoundCloud links you choose to provide and the decision made by an administrator.
• Service content: selected labels, playlists, folders, queue state, settings, download history and Spotify connection details where you choose to connect Spotify.
• Usage and security: sign-ins, plays, download counts, cache size, transfer totals, technical logs, IP/security information and session identifiers.
• Payment: Stripe customer, subscription, price, status and billing-period identifiers. Stripe—not DJ Compilations—handles card details.
• FTP connection: encrypted connection credentials or a record that access has been shared with the account. Passwords are not shown back in the interface.

3. Why we use it

• To take steps requested before a contract and to provide the account and paid service.
• For legitimate interests in vetting professional access, preventing abuse, keeping the service secure and understanding costs and capacity.
• To comply with tax, payment, consumer, fraud-prevention and other legal obligations.
• With consent where a particular optional connection requires it, such as authorising Spotify.

Access-request and service emails are administrative messages, not marketing. We will ask separately before sending electronic marketing where consent is required.

4. Who receives data

Authorised DJ Compilations administrators can review account and vetting information. We use Cloudflare for hosting, database and security services; Stripe for checkout and subscription management; Brevo for transactional email; Spotify when you choose to connect it; and the configured FTP provider for authorised file access. These providers handle data under their own terms and applicable data-protection obligations.

5. International processing

Some providers may process data outside the United Kingdom. Where required, transfers rely on an adequacy decision, approved contractual safeguards or another lawful transfer mechanism. Provider privacy information contains further details about its locations and safeguards.

6. How long information is kept

Pending or rejected applications are reviewed periodically and should normally be removed within 12 months unless needed to handle a query or prevent repeated abuse. Active account data is kept while the account operates. Playlists and settings are removed or anonymised after a valid deletion request unless retention is required. Payment and transaction records may be retained for up to seven years for tax, accounting and legal claims. Short-lived sessions, caches and operational logs are removed or rotated according to their technical purpose.

7. Your choices and rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, objection or a portable copy of personal data, and may withdraw consent where processing relies on consent. You may also ask for a human review of an account-vetting decision. We may need to verify identity before fulfilling a request.

You may complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, but we would appreciate the chance to address the concern first.

8. Security

We use access controls, secure sessions, password hashing and encryption for stored FTP credentials. No online service is completely risk-free. If a breach creates a legally reportable risk, we will follow the applicable notification requirements.

9. Changes

We will update the effective date when this notice changes. Material changes affecting active accounts will be communicated in the service or by email where appropriate.