Last updated 12 November 2026. This policy explains what personal data D-N-B.co.uk collects, why, who sees it and how long we keep it, in line with UK GDPR and the Data Protection Act 2018. Which cookies and similar browser storage we use is set out in our Cookie Policy.
D-N-B.co.uk is a trading name of K4O5 Limited, company number 07071390, registered in England and Wales. In this policy “we” and “us” mean K4O5 Limited. We decide how and why your personal data is used, which makes us the controller. Our registered office is the address shown for company number 07071390 on Companies House. The site is operated from Bulldog Studios, Acton Vale, London W3.
To ask about your data, email [email protected] or [email protected].
Account and sign in. If you create an account we store your name, your email address, a securely hashed password (never the password itself), a profile picture if you add one, and whether you are a paid member. If you sign in with Google or Facebook we store the name, email address and profile picture link they send us, and we never see your Google or Facebook password. We use this to run your account. Our legal basis is contract, because you asked for an account. We keep it until you ask us to delete the account. Nothing deletes accounts automatically, so an unused account stays until someone asks.
Staying signed in. When you sign in we set a cookie that keeps you signed in for up to 30 days. It holds your account number, name, email address, picture link and whether you are a paid member or an administrator. Our legal basis is contract. Details are in the Cookie Policy.
Password reset. If you ask to reset your password we store a one time token and email you a link. The link works for one hour and the token is deleted when you use it. Tokens nobody uses stop working after an hour but are not deleted automatically; they go when the account is deleted. Our legal basis is contract (keeping your account secure).
Payments. If you buy the Members Lounge subscription, a Founding membership or an advertising banner, you pay on Stripe's own page. We never see or store your card details. We keep your email address, Stripe's reference numbers for you and your subscription, the subscription status, and what you bought. For Founding membership we also keep your name and member number. For a banner we keep your image, headline, button text and link, and the banner is shown publicly once approved. Our legal bases are contract, and legal obligation for accounting and tax records. Account and purchase records stay until the account is deleted, and we keep accounting records for as long as UK law requires, normally six years. Stripe keeps its own payment records under its own privacy policy.
Members Lounge. If you are a paid member, your name, profile picture and the year you joined are shown to other Lounge members. Nothing else from your account is shown. Our legal basis is contract, because it is part of the membership.
Network profiles. If you create an Artist, Promoter or Venue profile we store the name, location, genres, bio, availability and contact link you enter. It is shown publicly only if you tick publish, and you can untick it at any time. Our legal basis is contract for storing it and your consent for publishing it. We keep it until you delete it or the account is deleted.
Newsletter and weekly alerts. If you join the newsletter we store your email address in our mailing list at Resend. If you sign up for weekly alerts we store your email address, the cities and sounds you picked, the date you agreed, whether you have stopped, and when we last emailed you. We send a welcome email and then a weekly email, each with a link to change or stop. The alerts tick box says that ticking it also adds you to the D-N-B newsletter list. Our legal basis for both is your consent, given by ticking the box or pressing Subscribe. We keep it until you stop. Every newsletter email has an unsubscribe link, or you can email us. When you stop alerts we keep the address, marked as stopped, so that we never email you again by mistake; ask us if you would like it removed completely. Stopping alerts does not by itself remove the address from the newsletter list, so unsubscribe from the newsletter too if you want both to stop.
Forms and enquiries. If you use the Submit page we email your name, email address, optional link and message to [email protected], and nothing is saved on the site. If you submit an event we save your name, email address and the event details, and a person reads them before anything is shown on the site. If you register interest in Founding membership we save your name, email address and optional message. If you use the K4O5 studio email box on the home page we send your name, email address and message by email to the studio, and if you use the WhatsApp or Telegram boxes your message, name and optional phone number go to K4O5's own message service, which alerts the studio through Telegram. Those studio messages are not saved on D-N-B. Our legal basis is legitimate interests (answering you and running our event listings) and taking steps you ask for. Emails stay in our mailboxes. We aim to delete enquiries, event submissions and Founding interest records after 12 months, but nothing deletes them automatically yet, so ask us if you want yours removed sooner.
Emails to us. Anything you send to [email protected] or [email protected] is used to answer you, on the basis of legitimate interests, and kept in our mailbox. We aim to delete it after 12 months and nothing does this automatically.
Radio listener count. While the radio plays, your browser sends a random number, made fresh on each visit, so we can show how many people are listening. It is held in the server's memory for about 25 seconds, is not saved and is not linked to you. Our legal basis is legitimate interests.
Partner shop. If you enter the partner PIN we check it and set a cookie so the shop stays open for 30 days. We do not store the PIN you type. Your basket is kept only in your own browser. The shop is a catalogue: you do not buy products there (memberships and advertising are bought through Stripe, as described above).
Security and server logs. Our web server records your IP address, the page asked for, the time and your browser type. We use this to keep the site running, safe and free of abuse. Our legal basis is legitimate interests. Server access logs are rotated daily and the last 14 days are kept. Our application error logs are not rotated automatically and are cleared by hand; they are not meant to hold personal data. To slow down abuse, the sign up, PIN and message forms briefly remember your IP address in memory for between ten minutes and an hour; it is not saved to disk.
Visitor statistics. Only if you press Accept All, a Matomo tracker counts visits and pages. Matomo is software run by K4O5 on k4o5.co.uk, not by an outside analytics company. It may record your IP address, the pages you open, your browser and device, and the page that sent you. Our legal basis is your consent, which you can withdraw by clearing this site's data in your browser. We have not set a separate deletion period for these statistics yet; ask us if you want your visits removed.
Videos and music. YouTube, SoundCloud and Apple Music players load only when you press play on one, or straight away if you pressed Accept All. They then receive your IP address and may set cookies, under their own privacy policies. Our legal basis is your consent. The Cookie Policy has the detail.
Backups. We back up the site's database every night and keep about five weeks of copies (seven daily and four weekly). Something you ask us to delete can remain in a backup until that copy expires.
Only our own staff see your data, and the companies below that help us run the site. They act on our instructions, except where we say they decide for themselves.
Stripe takes payments. For card payments and fraud checks Stripe decides for itself how it uses your data and has its own privacy policy. Resend sends our emails and holds the newsletter list. Google and Facebook (Meta) are involved only if you choose them to sign in, and use your data under their own policies. Our server is provided by Contabo, and Cloudflare sits in front of the site to deliver pages quickly and block attacks, so it handles your IP address and the pages you ask for on every visit. K4O5 runs the Matomo statistics and the studio message service. YouTube, SoundCloud and Apple receive data only when you load their players, as described above. We do not sell your data and we do not use it for advertising.
Pages, fonts, photographs, cover art and event posters are all delivered by our own server. For a visitor who is not signed in, opening a page does not send your IP address to any company other than Cloudflare and our hosting provider. One exception: if you sign in with Google or Facebook, your profile picture is shown from the link they gave us, so Google or Facebook (whichever hosts the picture) sees your IP address when it loads. In the Members Lounge, other members' pictures can load from those hosts in the same way. Event posters come from On The Door's public listings; our server fetches them and passes them on, so On The Door does not see you.
Our server is hosted with Contabo, which we understand uses a data centre in the European Union. Stripe, Resend, Google, Facebook (Meta), Cloudflare and, where it applies, Matomo and Telegram can process data outside the UK and the European Economic Area, including in the United States. Their safeguards are standard contractual clauses or an equivalent; see their own policies for details. You can ask us for more.
You can ask us to: give you a copy of your data; correct it; delete it; restrict how we use it; move it to another service; or stop using it where our basis is legitimate interests. Where our basis is consent you can withdraw it at any time, and that does not affect what we did before. We do not make decisions about you by automated means that have legal or similarly significant effects. We reply within one month.
To ask us to delete your data, follow the steps on our Data Deletion page: email [email protected] from the address on the account with the subject “Delete my data”. Deletion is done by hand, not automatically. For anything else, email [email protected]. We may keep what the law requires us to keep, such as accounting records.
If you are unhappy with how we have used your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
If we change this policy we will change the date at the top. Our Cookie Policy is part of how we explain our use of your data and should be read with this one.
Questions? Contact us at [email protected].