Privacy policy
This covers the Marley Live website and licence server at marley.louishaywood.uk. The Marley Live application itself is dealt with separately below, because it behaves very differently.
Who is responsible
Louis Haywood, trading as Marley Live, is the data controller. Questions, requests and complaints: hello@marley.louishaywood.uk.
Before this goes live: a trading address has to appear here. Distance selling rules require a geographic address, not just an email, before a customer is bound by a purchase.
What the website collects
| What | Why | Lawful basis |
|---|---|---|
| Your name and email address | To create your account, send your licence key and let you sign in | Performance of a contract |
| A hash of your password | To sign you in. The password itself is never stored and cannot be recovered from the hash | Performance of a contract |
| A one way hash of your IP address | To rate limit sign-in and activation attempts. The address itself is not stored | Legitimate interest in preventing abuse |
| A one way hash of your browser identifier | To stop a stolen session cookie being used from another browser | Legitimate interest in security |
| Your licence keys, and which Macs they are active on | To enforce one Mac at a time and let you move a licence | Performance of a contract |
| A record of payments | To issue licences, handle refunds and keep accounts | Contract, and legal obligation for tax records |
That is the whole list. There is no analytics, no advertising, no tracking across sites and no profiling.
What the application collects
Marley Live contacts this server exactly twice in its life: once when you activate a licence, and once if you deactivate one. It sends your licence key, the name of the Mac, the app version and an anonymous identifier for the machine, which is a one way hash and cannot be turned back into a serial number.
It never sends your audio, your measurements, your sessions, your cues or your recordings. Those stay on your Mac. There is no telemetry and no usage reporting of any kind.
Once activated, the app works entirely offline and does not contact this server again, except to check for updates.
Updates
The app checks for new versions using Sparkle, which requests
appcast.xml from this site. That request carries your IP
address and the version you are running, as any web request does. It is
not logged against your account or your licence.
Who else sees your data
- Stripe handles payments. Card details go straight to Stripe and never reach this site. Stripe receives your email address and what you bought. See Stripe's privacy policy.
- Hostinger hosts the site and database, and processes data only to run the service.
Nobody else. Your data is not sold, shared or rented, and there is no advertising network involved.
Where your data is kept
On servers in the European Economic Area. Stripe may process payment data outside the UK and EEA under its own safeguards.
How long it is kept
- Account and licence records for as long as you have an account, and then until you ask for deletion.
- Payment records for six years, which is how long HMRC requires business records to be kept. This part cannot be deleted on request, because keeping it is a legal obligation.
- Rate limiting hashes for hours, then overwritten.
- Sign-in sessions for 30 days, or until you sign out.
Your rights
Under UK GDPR you can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, object to processing, or ask for it in a portable format. Email hello@marley.louishaywood.uk and it will be dealt with within 30 days, usually far sooner.
You can also delete your account yourself, at any time, from your account page. That removes your name, email address and sign-in details immediately. Licence keys you have bought keep working, and any Mac already activated is unaffected.
If you think your data has been mishandled you can complain to the Information Commissioner's Office.
Emails sent from here are transactional only: your licence key, a sign-in link, a password reset, a receipt, or a warning that a subscription payment failed. There is no marketing list and no newsletter, so there is nothing to unsubscribe from. If that ever changes, it will be opt in and every message will carry an unsubscribe link.
Age
Marley Live is a professional tool and is not directed at children. You need to be 18 to buy a licence. No data is knowingly collected from anyone under 16. If you believe a child has created an account, email hello@marley.louishaywood.uk and it will be removed.
Changes
If this policy changes in a way that affects you, the date at the top changes and anyone with an account is emailed.