Privacy Policy
Last updated: 1 September 2026
This Privacy Policy explains how Urban Soul Orchestra Limited ("USO", "we", "our", "us") collects, uses and protects your personal information when you visit our website (urbansoulorchestra.co.uk), make an enquiry, or communicate with us.
We are committed to safeguarding your privacy in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and guidance from the Information Commissioner's Office (ICO).
1. Who we are
Data Controller: Urban Soul Orchestra Limited
- Company number: 07852008 (registered in England and Wales)
- Registered office: Dane John Works, Gordon Road, Canterbury, England, CT1 3PP
- Trading address: Suite 45, 4 Montpelier Street, Knightsbridge, London, SW7 1EE
Email: enquiries@urbansoulorchestra.co.uk Telephone: +44 (0)20 8968 3000
2. What information we collect
a) Enquiries and contact
When you submit an enquiry through our website, or contact us by email or phone, we may collect:
- Your name
- Email address
- Phone number
- Event details you choose to share (such as date, venue, location, and the nature of your event)
- Any other information you include in your message
b) Information collected automatically
When you visit our website, we may automatically collect usage data such as your IP address, browser type, device information, and the pages you visit. This is collected through cookies, analytics and security measures (see sections 5 and 11) and is used for website analytics, security, and performance monitoring.
We do not collect any special category data (such as health information), and our services are aimed at adults.
3. How we use your information
We process personal data to:
- Respond to your enquiries and provide quotes
- Plan, manage and deliver live music services for your event
- Maintain business and financial records as required by law
- Improve our website and services using anonymised analytics
- Comply with our legal and regulatory obligations
We do not sell your personal data. We do not send marketing emails.
4. Legal bases for processing
We rely on the following lawful bases under UK GDPR:
- Contract — to respond to enquiries, prepare quotes, and deliver services you have booked or are considering booking.
- Legal obligation — to retain financial and accounting records.
- Legitimate interests — to manage client relationships, protect our website, and improve our services, provided your rights are not overridden.
- Consent — for optional analytics cookies, and where we publish testimonials, client names or event photography (see section 7).
5. Cookies and analytics
Our website uses cookies to function properly and to improve performance.
- Essential cookies — required for site security and core functionality.
- Statistics cookies — we use Google Analytics 4 (GA4) to understand how visitors use our website. Data is anonymised and retained for up to 26 months. These cookies only run with your consent. You can also opt out of Google Analytics across all websites here: https://tools.google.com/dlpage/gaoptout/
- Third-party media cookies — may be set when you interact with embedded video or audio content (see section 6).
You can manage your cookie preferences at any time via the cookie banner or your browser settings.
6. Embedded content from other websites
Some pages on our website include embedded content — such as videos hosted on YouTube and audio players from Spotify.
Embedded content behaves as if you had visited the third-party website directly. These services may collect data about you, use their own cookies, and monitor your interaction with the embedded content — particularly if you have an account and are logged in to their platform.
We recommend reviewing the privacy policies of these services:
- YouTube / Google: https://policies.google.com/privacy
- Spotify: https://www.spotify.com/legal/privacy-policy/
Where our cookie banner offers the option, embedded media only loads with your consent.
7. Testimonials, client names and event photography
With permission, we may publish client testimonials, client or brand names, and photographs or video from events we have performed at, on our website and in our promotional materials.
- We only publish testimonials and client names with the agreement of the individual or organisation concerned.
- Where event photography or video may include identifiable individuals, we rely on the permissions obtained by the event organiser and/or the consent of those featured.
- If you appear in content on our website and would like it removed or amended, contact us at enquiries@urbansoulorchestra.co.uk and we will act promptly.
8. Sharing your data
We may share your personal data with:
- Service providers — including our website hosting provider, email and productivity services (Google Workspace), website support and maintenance, and analytics providers. These providers process data on our behalf under appropriate contractual safeguards.
- Event partners — such as venues or event planners, only where necessary to deliver the services you have engaged us for.
- Regulators or authorities — where legally required.
Where data is transferred outside the UK/EEA (for example, by Google or Cloudflare), it is protected by UK GDPR safeguards such as the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses.
We do not sell your data.
9. Data retention
- Enquiries — typically retained for up to 12 months, unless the enquiry leads to a booking.
- Client and booking records — retained in line with statutory accounting requirements (generally 6 years after the end of the relevant financial year).
- Analytics data — retained according to GA4 settings (up to 26 months).
- Consent records — retained for as long as required by law.
10. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure of your data, where legally permitted
- Restrict or object to processing
- Withdraw consent at any time (for cookies or published content)
- Request transfer of your data (data portability)
- Lodge a complaint with the Information Commissioner's Office (ICO) — ico.org.uk
To exercise these rights, please contact us using the details in section 1. We aim to respond within one month.
11. Security and bot protection
We take appropriate technical and organisational measures to protect your personal data, including secure hosting, access controls, and encrypted connections (HTTPS). However, no system is completely secure, and we cannot guarantee absolute security.
This website uses Cloudflare Turnstile to protect our forms from spam and automated abuse. Cloudflare processes limited technical information about your browser to distinguish human visitors from bots. See Cloudflare's Turnstile Privacy Addendum for details.
12. Children's privacy
Our website and services are not directed at children under 13. We do not knowingly collect personal data from children without parental consent.
13. Updates to this policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the revision date shown above.







