Privacy Policy

Last updated 26 September 2026.

This policy explains what personal information freebasstranscriptions.com collects, why, who else handles it, and your rights over it. The short version: I collect as little as I can, I never sell it, and nothing on this site is used for advertising.

Who is responsible for your data

I’m Tom Kenrick, and I run Free Bass Transcriptions as a sole trader from 174 Thorpe Lea Road, Egham TW20 8HA, United Kingdom. I’m the data controller for everything described here. Questions go to tk@freebasstranscriptions.com.

What I collect, and why

When you browse the site

Analytics, only if you accept. Google Analytics tells me which transcriptions get used, which pages people arrive on and which charts get downloaded. It records things like the pages you view, how you reached the site, your approximate location, and your device and browser. It runs only if you choose Accept on the cookie banner; otherwise it sets no cookies and collects nothing that identifies your browser. The lawful basis is your consent, and you can withdraw it at any time with the link at the bottom of this page. Nothing is used for advertising or shared with Google’s advertising services.

Security and delivery. The site is served by Cloudflare, which processes your IP address and request details for every visit so it can deliver pages and block attacks. The lawful basis is my legitimate interest in keeping the site running and secure.

YouTube videos. Videos don’t load until you click play. When you do, the video comes from YouTube’s privacy-enhanced mode (youtube-nocookie.com), and Google processes your data under its own privacy policy.

When you join the mailing list

I collect your email address, and send it to AWeber, which runs the mailing list. You’ll get an email asking you to confirm, and you won’t receive anything else until you do. The lawful basis is your consent. Every email has an unsubscribe link, and AWeber records whether emails are opened and which links are clicked, which helps me to write things people actually want.

When you use the contact or lesson enquiry form

I collect what you type in: your name, email address and message, and on the lesson enquiry form, what you play, your goals and how you found me. It’s emailed to me so I can reply. The lawful basis is my legitimate interest in answering you. None of it is added to the mailing list.

When you buy an ebook

Checkout is run by Stripe. You give Stripe your name, email address, billing address and payment details. I never see or store your card details. Stripe tells me your name, email address, country and what you bought, and I keep a record of the order so that:

• I can send your download link and keep your download page working
• you can download your files again later
• I can handle refunds and questions about your order
• I keep the tax records that HMRC requires

The lawful basis is the contract between us, and, for the tax records, my legal obligation.

At checkout you’re asked whether you’d like to join the newsletter. You’ll only be added to my Aweber list if you answer Yes. Leaving it blank or answering No means you’re never added.

Stripe also uses your information for its own fraud prevention and legal obligations, as a separate controller. See Stripe’s privacy policy.

When you review a book

About two weeks after buying, you’ll get one email inviting you to review what you bought. It’s sent on the basis of my legitimate interest in hearing from buyers. It’s cancelled if you get a refund, and there are no reminders.

If you write a review, I keep your rating, your review and the display name you choose, linked to your order so it can be marked “Verified buyer”. Your review, name and the date are published on the book’s page once I’ve approved it. Your email address is never shown. The lawful basis is your consent, and you can ask me to remove your review at any time.

Who else handles your data

These companies process data on my behalf, under contracts that require them to keep it secure and use it only for the service they provide:

Company	What it does	Whose data
Cloudflare	Hosts the site, and stores orders, reviews and the ebooks	Every visitor; buyers and reviewers
Stripe	Takes payments and sends receipts	Buyers
Resend	Sends the download, refund and review emails, and delivers form messages to me	Buyers; anyone using a form
AWeber	Runs the mailing list	Subscribers only
Google	Analytics, if you accept it	Visitors who accept analytics
Microsoft	Hosts my email inbox	Anyone who emails me or uses a form

Some of these companies store data in the United States or elsewhere outside the UK. Where they do, the transfer is protected by safeguards UK law recognises, such as the UK–US data bridge or the UK’s standard contract clauses.

I never sell or rent your data, and I never share it with anyone for their marketing. I’d only disclose it otherwise if the law required me to, for example under a court order.

Cookies and similar technology

The site itself sets no cookies. The only cookies are Google Analytics’ (_ga and _ga_*), and only after you choose Accept. Choosing Reject deletes them. Your choice is remembered in your browser’s local storage, so the banner doesn’t keep reappearing.

Stripe’s checkout page, YouTube videos you play, and sites you follow links to set cookies of their own, under their own policies.

How long I keep it

• Orders: for as long as the shop offers re-downloads, since your download page depends on the order record. You can ask me to delete it sooner; that ends your re-downloads, and I keep only what HMRC requires, for six years after the tax year of the sale.
• Reviews: until you ask me to remove them, or the book is withdrawn.
• Mailing list: until you unsubscribe.
• Form messages: as long as the conversation is useful, and no more than two years after it ends.
• Analytics: Google Analytics keeps detailed data for no more than 14 months.

Your rights

Under UK data protection law you can ask me to:

• tell you what personal data I hold about you, and give you a copy
• correct anything that’s wrong
• delete it, where I have no reason to keep it
• restrict how I use it, or stop using it where I rely on legitimate interests
• give it to you in a portable format, where it’s processed by consent or contract

Where I rely on consent, you can withdraw it at any time. Email tk@freebasstranscriptions.com and I’ll reply within a month.

If you’re unhappy with how I’ve handled your data, please tell me first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Children

The site isn’t aimed at children, and I don’t knowingly collect their data. Buying an ebook needs a card or PayPal account, so a younger player should ask a parent to buy for them.

Changes to this policy

If I change how your data is used, I’ll update this page and the date at the top.