This policy explains what personal data Ardito collects, why, and what happens to it. Ardito is a release management and artist development service run by Laura, based in London. This applies to ardito.co.uk and anything sent through the intake form, contact form, or Gumroad checkout.
Data controller: Laura Mahler, trading as Ardito
Email: [email protected]
Through the intake form: name, email, artist or project name, links to music, and anything shared about release plans or budget.
Through the contact form: name, email, and whatever's written in the message.
Through Gumroad purchases: email and payment confirmation. Card details are handled entirely by Gumroad, Ardito never sees or stores them.
If you become an active client, this can extend to campaign notes, contact details for press or playlist outreach done on your behalf, and streaming or audience numbers relevant to your campaign.
To respond to enquiries and deliver anything purchased, based on taking the steps you asked for before or during an agreement, which is a lawful basis under UK GDPR.
To run a campaign or development relationship once you're an active client, based on performing the agreement between you and Ardito.
To keep basic records of purchases and transactions for accounting and tax purposes, which Ardito is legally required to do.
Where anything falls outside these, for example being added to a mailing list beyond a single reply, that's based on your consent, and you can withdraw it at any time.
Client and campaign data lives in Supabase. Email communication runs through Mailchimp for artists on a mailing list, and Gmail otherwise. Shared files, assets, and campaign materials are stored in Google Drive. Digital products are delivered and paid for through Gumroad, who handle all payment processing directly. The site itself is hosted through Cloudflare. Each of these providers may process data outside the UK as part of how they operate; where that happens, they do so under their own published data protection safeguards.
Ardito shares information with the service providers named above where needed to operate the business. Where you're working with Ardito on a campaign, relevant information may also be shared with third parties such as press, radio, playlist curators, venues, distributors, or other industry contacts as necessary to carry out that campaign. Ardito doesn't sell, rent, or pass on personal data to anyone for unrelated marketing purposes.
For as long as it's relevant to an active enquiry, purchase, or campaign, and for transaction records, as long as required by UK tax law. To have anything deleted sooner, email [email protected] and it'll be actioned within a reasonable time, though anything already shared externally as part of a campaign, like a press pitch already sent, can't be unsent.
This site doesn't use tracking or advertising cookies. If that changes, this section will be updated with details and, where required, a way to manage your preference.
You can ask what's held about you, ask for corrections, ask for deletion, or object to processing, at any time, by emailing [email protected].
If you're not satisfied with how a concern is handled, you also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint.
This policy may be updated as Ardito grows. Significant changes will be reflected here with an updated date.