Overview
MIRROR AND MOUNTAIN C.I.C. (trading as Mirror and Mountain) is an independent music platform based in the UK. We distribute music on behalf of our artists and provide them with the opportunity to donate or split their earnings with charitable causes. Through our website (mirrorandmountain.com), we sell digital goods including downloadable music and other types of physical and non-physical merchandise. We also publish stories about the artists and charitable causes we work with and seek to actively promote unsigned artists who join our community.
100% of the income generated by the sale of music on our website is sent to our artists and beneficiary charity organisations. We also accept donations from anyone who wants to support our work. You can find more information about who we are and what we do on our about page.
As an organisation, we hope to engage with a diverse range of people and organisations including artists (inc. solo musicians and groups), charities and individual supporters and customers. To provide products, services, information and opportunities tailored to each person, artist or organisation we work with, Mirror and Mountain processes information about them (including some personal data). This helps us to provide the best possible experience on our website and through our engagements with individuals.
Mirror and Mountain is committed to safeguarding the privacy of personal data and complying with the UK Data Protection Act 1998, the European General Data Protection Regulation (2016/679) of the European Parliament, and any future changes in data protection legislation that we are required to comply with. We also work to the principle of ‘privacy by design’ for all our systems and services. This means that we ensure all the personal information we collect, store and use is done so ethically and in a minimised way where it is essential for us to provide a service.
—
Data Controller
A Data Controller is a person or organisation who decides why and how information about you (personal data) will be stored, shared, and used. For data collected, stored and processed by Mirror and Mountain, Mirror and Mountain is the Data Controller.
—
Types of personal data collected and held by Mirror and Mountain, artists using our service and how it is collected
How you choose to engage with Mirror and Mountain determines what information (personal data) we collect, store and use.
A) Customers and All Website Users
Individuals who make a purchase from our website (customers) can do do with or without an account on this website (mirrorandmountain.com). When someone completes a purchase without creating an account on our website, they are considered to be a ‘guest.’ Guests may download their purchased digital goods (e.g. music) after completing a purchase and are able to do so again using a link provided in their confirmation email for up to 24 hours. Guests are able to create an account on this website using the email address they provided when they completed a purchase. This allows them to access their digital goods and stream their music on this website for as long as it is available. Site visitors may also register an account on this website without completing a purchase. If and when they do purchase digital goods, the information previously provided to Mirror and Mountain (e.g. their email address) may be used to speed up the checkout process.
Regardless of whether a website user is a guest customer or a person with a registered account on this site, the same information is collected by Mirror and Mountain to facilitate any purchases and provide them with online services provided by this website. This includes their email address, their name and their computer’s IP address to help us validate form submissions and prevent spam on our website.
Users with a registered account on this website may sign in and edit their information (i.e., their name and email address) at their convenience. This can be done via their account page at mirrorandmountain.com/account. All user data is collected via registration forms on our website, or by our payments processor, Stripe and is processed securely in our database which is located under the jurisdiction of the UK and European Parliaments. These forms also capture your computer’s IP address to help us validate form submissions and prevent spam on our website.
Customers can make purchases on our website using a credit or debit card. No card information is stored on our website but is handled securely by Stripe. You can find out more about how Stripe processes this information on their website.
B) Artists
Website users who choose to create an artist profile on mirrorandmountain.com must first register a user account (see section A). To facilitate artist payments, these users must also associate a Stripe Connect account with Mirror and Mountain. This is done via links on artist profile pages on mirrorandmountain.com which direct users to Stripe’s onboarding service. Stripe collects information about you (the person who creates an artist profile on mirrorandmountain.com) to enable an account with their service which subsequently allows Mirror and Mountain to make payments to you. This information includes identity verification documents, such as a driver’s license or passport and other pieces of personal data. Mirror and Mountain does not store or process the data that Stripe collects with the exception of your default currency which is based on your country of residence. We advise users to familiarise themselves with Stripe’s privacy policies before creating an artist account on mirrorandmountain.com. Currency information collected by Mirror and Mountain is done so in order to facilitate payments to your artist in the correct currency.
C) Charity Organisations and general enquiries
Individuals who represent a charitable organisation and want to join Mirror and Mountain’s community to receive donations via our charitable ‘funds’ can register their interest through a contact form on our website. This form collects information about the individual representing the charity. This includes personal information including your name, email address, phone number and computer IP Address (to confirm valid form submissions and reduce spam on our website). This information is transferred securely to our database and allows us to contact you about your interest. For more information about how Mirror and Mountain works with charities, please visit the relevant pages on our website.
For charities who go on to join Mirror and Mountain’s community after a review, additional information is collected to send them payments (donations) and represent them on our website. This information is typically collected during a phone call or online meeting after a relationship has been established.
Users of our website may also contact us via the contact page. This page includes a form which collects a name and email address which is used to respond to your query.
D) Donors
Mirror and Mountain accepts donations from anyone who wants to help our work in supporting our artists and charitable causes. It is possible to make standalone donations through a form on our donations page. This form collects some personal information including your name, email address and postcode for the purpose of processing a donation card payment through our payments processor, Stripe. We will not use this information for any other purpose. Personal data captured on this form is transferred securely to our database. This information is used by Mirror and Mountain for reporting purposes.
E) Comments
When visitors leave comments on this website, we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
—
Cookies
You can access more information about how we use cookies on our cookies policy page.
—
Links to other websites
Mirror and Mountain is not responsible for the content and practices of third-party websites where we have links from Mirror and Mountain’s website. Links to other websites are often provided solely as reference points to information on topics that may be useful or relevant to our users. As such, every effort is made to ensure that these websites comply with data protection legislation, but this cannot be guaranteed
This privacy notice will no longer apply if you use a link to go from the Mirror and Mountain website to a third-party website. Your browsing and interaction on any other website are subject to that website’s own privacy notice and we encourage you to read their privacy statements.
—
How personal data is stored by Mirror and Mountain
Any personal data mentioned in this policy that is stored by Mirror and Mountain is stored on Mirror and Mountain’s servers located under the jurisdiction of the UK and European Parliaments. Additionally, some user data may be stored in Mirror and Mountain’s Stripe account for the purpose of facilitating payments. Access to personal data is restricted to those members of our team who need to keep in contact with you and is controlled through multi-factor password protection and user security profiles.
—
Who Mirror and Mountain shares personal data with
We don’t share personal data with any third party.
Please note that when you make a purchase or a donation on our website, or when you connect a Stripe account to Mirror and Mountain, some personal data is processed by our payments processor, Stripe in order to facilitate payments, transfers, refunds or Stripe Connect services. If this policy is ever updated to change this, your explicit consent will be sought before any data is shared.
—
How long personal data is held by Mirror and Mountain
We hold personal data until such a time that you no longer want to stay in touch with us or exercise your right to be forgotten (see below).
—
What to do if you want Mirror and Mountain to stop holding/processing your data
Everyone has the right to object to Mirror and Mountain processing their personal data for any or all of the purposes set out in this policy and can do so at any time. If you wish to object, please contact us by emailing [email protected] and tell us what type of personal data you don’t want us to process (for example, your name, address, details of your enquiry) and/or in what area of our work you don’t want your personal data used (see above for descriptions). Alternatively, you can remove your personal data from our systems by deleting your user account on our website (if you have one). This can be done via your account page. Where you exercise this right, you will no longer receive the service that you have requested to be excluded from, unless you inform us to re-instate this again. For artists and charities, such requests could result in the termination of any agreement we have with you.
Note that if you ask us to remove your personal data from our system, we will revoke access to your account on our website (if you have one). Additionally, any orders you have made as a customer will be anonymised and you will lose access to any downloadable content you have purchased (this will not affect your ability to use the files you have already downloaded).
—
Access to personal information
You have a right to request copies of the data held about you by Mirror and Mountain. To do so, please send us a Subject Access Request to [email protected]. If you don’t want Mirror and Mountain to hold some or all of your personal data, if you don’t want your personal data used for any or all of the purposes explained in this policy, or if you wish to change the type of communications you receive or the way in which Mirror and Mountain contacts you, please let us know in your request. Note that you can update your newsletter and marketing email preferences via links included in any email you receive as part of the service. Alternatively, if you have a registered account on our website, you can update your email preferences on the ‘account’ page.
—
Changes to this privacy policy
We keep our privacy policy under regular review.