Your GDPR rights:
– The information we collect
– How we use the information we collect
– Sharing information
– Accessing and updating user information
The General Data Protection Regulation, “GDPR” is a New European Union Law coming into effect in the UK from 25 May 2018 which aims to protect EU and UK citizens’ privacy and data. This updated policy aims to help users understand and exercise these rights. As available and except as limited under applicable law, the rights afforded to individuals are:
– The right to be informed – regarding the data we process about you;
– The right of access – to the personal data we process about you;
– The right to rectification – regarding requesting amendments or updates to your personal data when inaccurate or incomplete;
– The right to erasure – meaning the right to request deletion of your personal data;
– The right to restrict – meaning the right to request that we temporarily or permanently stop processing all or some of your personal data;
– The right to object – meaning at any time, you have the right to object to us processing your personal data on grounds relating to your particular situation; or, you have the right to object to your personal data being processed for direct marketing purposes;
– The right to data portability – meaning the right to request a copy of your personal data in electronic format and the right to transmit that personal data for use in another party’s service; and
– The right not to be subject to automated decision-making – Including profiling, where the decision would have a legal effect on you or produce a similarly significant effect.
In addition, If we send you electronic marketing messages based on your consent or by otherwise lawful means, you may withdraw your consent at no cost through the ‘opt-out’ mechanism available within the email.
2.1 Registration data
When you sign up for BlueJay, we may ask you for information such as your username, password, or email address. If you connect to BlueJay using credentials from a Third Party Application (e.g., Facebook, SoundCloud and/or Spotify), you authorise us to collect your authentication information, such as your username and encrypted access credentials. We use this information to automatically log you into your Facebook, SoundCloud and/or Spotify account so that you can access your account from there to coordinate with BlueJay.
We may also collect other information available on or through your Third Party Application account, including your public profile, friends list and email address
You may also choose to voluntarily add other information to your profile, such as your date of birth or gender which we store in order to provide customised, personalised, or localised content, recommendations, features, and advertising on or outside of BlueJay.
2.2 Usage & log data
When you use or interact with BlueJay, we may use a variety of technologies that collect information about how BlueJay is accessed and used. This information may include:
– Information about your interactions with BlueJay, such as interactions with songs, playlists, other BlueJay users, Third Party Applications, and advertising, products, and services which are offered, linked to, or made available on or through BlueJay;
– Your Favourites are stored so that you can access them;
– Your Likes and Dislikes are stored in order to provide customised, personalised, or localised content, recommendations, features, and advertising on or outside of BlueJay
– User content you post to BlueJay including messages you send and/or receive via chat. We store this information so that new participants in a session can see old chat messages and so that we can monitor chat to ensure that users who abuse the service are removed.
– We collect your IP address in order to be able to establish your location. With your location we can determine what music is licensed to be played to you and we can pay the licensing authority in that place so that payment goes back to the artist and other rights holders;
– Names and profile pictures of your followers and those you follow. We store this information so that you can be notified of sessions run by people you follow and so that people who follow you can be notified of your sessions; and
– We collect data on when you listen to and what you listen to for our licensing reports. This data removes anything that identifies individuals before it is submitted to licensing authorities. We may provide this anonymised information to other organisations for a fee.
2.3 Your mobile device
– Photos and Camera: We will not access your photos or camera without first getting your explicit permission and we will never scan or import your photo library or camera roll. If you give us permission to access photos or your camera, we will only use images that you specifically choose to share with us. (You may use our application to select the photo or photos you choose to share, but we will never import the photos you review except those you explicitly share). We use this to enhance your use of the app and those of your followers. Anyone who searches for you may see your profile picture. If you ever host a session your background picture may be displayed to all users who use Bluejay Music.
– Location: We will not gather or use the specific location of your mobile device (by using, for example, GPS or Bluetooth) without first getting your explicit permission. We collect this data in order to provide customised, personalised, or localised content, recommendations, features, and advertising on or outside of BlueJay. Please note that this does not include IP address. We will continue to use your IP address, to determine, for example, what country you are in to comply with our licensing agreements.
– Voice: we will not access your microphone without first getting your explicit permission. We allow you to use your microphone to insert audio voice comments into your sessions.
– Contacts: We will not scan or import your contacts stored on your phone without first getting your explicit permission. We will only use the contact information to help you find friends or contacts who use BlueJay if you choose to do so, and we will not use contact information for any other purpose without first getting your separate explicit permission.
Consistent with the permissions you give us to collect the information, we may use the information we collect, including your personal information:
– to provide, personalise, and improve your experience with BlueJay and products, services, and advertising (including for third party products and services) made available on or outside BlueJay (including on other sites that you visit), for example by providing customised, personalised, or localised content, recommendations, features, and advertising on or outside of BlueJay;
– to ensure technical functionality of BlueJay, develop new products and services, and analyse your use of BlueJay, including your interaction with applications, advertising, products, and services that are made available, linked to, or offered through BlueJay;
– to communicate with you for service-related or research purposes including via emails, notifications, or other messages, which you agree to receive;
– to communicate with you, either directly or through one of our partners, for marketing and promotional purposes via emails, notifications, or other messages; which you explicitly agree to receive;
– to enable and promote BlueJay and other services or products, either within or outside BlueJay, including features and content of BlueJay and products and services made available through BlueJay;
4.1 Sharing by you
BlueJay is a social service that offers many ways to find, enjoy, and share content. We encourage you to take advantage of these social features with others on BlueJay.
Your username, profile picture, how many people you follow, how many people follow you, and the number of sessions you have hosted on BlueJay will always be publicly available.
Your live sessions are made publicly available by default and can be joined by anyone on BlueJay. You can choose, however, to make your sessions private in your profile. This means that only your followers on BlueJay will be able to see and join your sessions.
We may use your public information to promote BlueJay and to help others find and follow you and/or your BlueJay content.
4.2 Sharing by BlueJay
4.2.1 Marketing and advertising
We may share information with advertising partners in order to send you promotional communications about BlueJay or to show you more tailored content, including relevant advertising for products and services that may be of interest to you, and to understand how users interact with advertisements. The information we share is in a de-identified format (for example, through the use of hashing) that does not personally identify you.
4.2.2 Service providers and others
4.2.3 Rights holders
BlueJay allows you to listen to fully-licensed streaming content. BlueJay shares information with the rights holders that license this content. The data that BlueJay shares is in a de-identified format that does not identify you directly.
4.2.4 Other sharing
In addition to the above, we may also share your information with third parties for these limited purposes:
– to allow a merger, acquisition, or sale of all or a portion of our assets;
– to respond to legal process (e.g., a court order or subpoena), if we believe in good faith that it is necessary to do so; to comply with requirements of mandatory applicable law; to protect the safety of any person; to protect the rights and property of BlueJay; and to address fraud, security, or technical issues; and
– to publish de-identified or aggregate information about the use of BlueJay.
We may display advertisements from third parties and other content that links to third party websites. We cannot control or be held responsible for third parties’ privacy practices and content. Please read their privacy policies to find out how they collect and process your personal information.
We are committed to protecting our users’ information. Your password protects your user account, so you should use a unique and strong password, limit access to your computer and browser, and log out after having used BlueJay. While we take data protection precautions, no security measures are completely secure, and we do not guarantee the security of user information. To protect your passwords and account security we encrypt the passwords before they are stored in the database.
You can view and amend some information we keep about you through your profile. If you want to amend any additional information, or exercise any of your GDPR rights, you can request this by emailing email@example.com.
We will respond to your request within a reasonable period of time upon verification of your identity. We recommend you include documents that prove your identity and a clear and precise description of the information which you request access to.
If you are unhappy with the way we are using your personal data you have the right to lodge a complaint with the relevant supervisory authority.
BlueJay is not directed to children under the age of 13 years.
We do not knowingly collect personal data from children under 13 years. If you are under the age limit, please do not use the BlueJay service, and do not provide any personal data to us.
If you are a parent of a child under the age limit and become aware that your child has provided personal data to BlueJay, please contact us at firstname.lastname@example.org, and you may request exercise of your applicable rights.
If we learn that we have collected the personal data of a child under the age of 13 years, we will take reasonable steps to delete the personal data. This may require us to delete the BlueJay account for that child.
Occasionally we may make changes to the agreements. When we make material changes to the agreements, we’ll provide you with prominent notice as appropriate under the circumstances, e.g., by displaying a prominent notice within BlueJay or by sending you an email. In some cases, we will notify you in advance. Please make sure you read any such notice carefully.