Sunflower Music is a provider of curated background-music solutions for hotels, restaurants, bars, retail stores, spas, gyms, and airport lounges. Our registered office is at [insert company address], and we can be contacted at privacy@sunflowermusic.com.

• Contractual necessity – to deliver and support the background-music service you have requested.

• Legitimate interests – to improve our products, prevent fraud, and grow our business while respecting your rights.

• Consent – for optional cookies and marketing emails (you can withdraw consent at any time).

• Legal obligations – to comply with accounting, tax, and regulatory requirements.

Our site uses:
   •    Essential cookies – required for site functionality (cannot be disabled).
   •    Analytics cookies – help us understand traffic and improve performance.
   •    Marketing cookies – only placed if you opt-in; used for remarketing and campaign measurement.

We never sell your information. We share it only:
   •    With trusted service providers (e.g., cloud hosting, payment processors, email platforms) under strict data-processing agreements.
   •    Within Sunflower Music’s corporate group for internal administration.
   •    If required by law, court order, or to defend legal claims.
   •    With your explicit consent in any other situation.

All third parties are vetted for GDPR and data-security compliance.
 

Where data moves outside your jurisdiction (e.g., to servers in the EU, UK, or US), we rely on one of the following safeguards:
   •    Adequacy decisions by the European Commission or UK Secretary of State.
   •    Standard Contractual Clauses (SCCs) or UK International Data Transfer Addendum.
   •    Binding corporate rules or other approved mechanisms.

•    Prospect/enquiry records: 24 months after last contact.
   •    Client records & contracts: 7 years after service termination (for tax/legal).
   •    Playback logs: 24 months for analytics, then aggregated or deleted.
   •    Marketing lists: until you unsubscribe or your email bounces.​

​We securely erase or anonymise data once retention periods expire.

We employ firewalls, encryption in transit and at rest, role-based access, multi-factor authentication, regular penetration testing, and staff training. If we ever detect a data breach that poses a risk to you, we will notify you and regulators within legally required time-frames.

Under GDPR, POPIA, and similar data-protection laws, you can:
   •    Access the personal data we hold about you.
   •    Rectify inaccurate or incomplete data.
   •    Erase data (“right to be forgotten”) where legal grounds permit.
   •    Restrict or object to certain processing.
   •    Port data to another provider.
   •    Withdraw consent at any time (e.g., marketing).
   •    Complain to your supervisory authority (e.g., ICO in the UK, Information Regulator in South Africa, or your local regulator).

To exercise any right, email privacy@sunflowermusic.com. We may verify your identity before processing the request.

Our website may contain links to external sites (e.g., social media). We are not responsible for their privacy practices. Please review their policies before submitting personal data.

We may update this Privacy Policy occasionally. Material changes will be highlighted on our website or emailed to affected clients. Your continued use after changes means you accept the updated policy.

For any questions or support requests, please contact:

Email: info@sunflowermusic.co.uk
Phone: +44 2039000300

Website: www.sunflowermusic.co.uk