Last updated: 6 October 2026
This policy explains how CrushPlaza collects, uses and protects personal data when you visit bluesnshadow.com (the “Site”). It is written to comply with the EU General Data Protection Regulation (GDPR) and the ePrivacy Directive. Because the act is based in London and a substantial share of readers are UK residents, we also honour the equivalent rights under the UK GDPR and the Data Protection Act 2018 — see §6. Please read it before using the Site.
1. Who is responsible (data controller)
The data controller for this Site is:
CrushPlaza (label; also operates the CiberFeed brand)
Postal address: Östgötagatan 12, 116 25 Stockholm, Sweden
Privacy / personal-data contact: info@crushplaza.com
For Blues N Shadow enquiries (booking, licensing, press, general): bns@ciberfeed.com — a CrushPlaza-operated address for this artist. For anything about your personal data, please use info@crushplaza.com.
2. What we do — and do not — collect
We aim to collect as little personal data as possible.
Automatically (server logs). Like most websites, our hosting provider temporarily records basic technical data in server logs to deliver and secure the Site — typically your IP address, browser type, the pages requested and the date/time of the visit. This is stored by our host and is not used to build a profile about you. Legal basis: our legitimate interest in operating and securing the Site (Art. 6(1)(f) GDPR).
Analytics (privacy-first, cookieless). We use privacy-first analytics (Plausible / Matomo configured cookieless, with IP addresses anonymised). It counts aggregate page views and referrals only. It does not use advertising cookies, does not build cross-site profiles, and does not identify you individually. Legal basis: legitimate interest in understanding aggregate usage (Art. 6(1)(f)).
Contacting us. If you email us (for example about booking or licensing), we receive the content of your message and your email address, and use them only to reply to you and for our legitimate business purposes. Legal basis: performance of a step at your request / legitimate interest (Art. 6(1)(b) and (f)).
We do not run an account system, comments, or e-commerce on this Site, and we do not knowingly collect data from children.
3. Cookies and third-party media players
The Site is designed to set as few cookies as possible. However, some pages embed music/video players from third parties (Spotify and/or YouTube). These players are configured to load only after you interact with them (a “click-to-load” consent step), so that no third-party cookies are placed until you choose to play a track. Once you load a player, the relevant third party may set its own cookies and process data under its own privacy policy, over which we have no control:
- Spotify — https://www.spotify.com/legal/privacy-policy/
- YouTube (Google) — https://policies.google.com/privacy (we use the privacy-enhanced
youtube-nocookie.comdomain where possible)
If you prefer to avoid these cookies entirely, simply do not click to load the players. You can also control or delete cookies through your browser settings at any time.
4. Who we share data with
We do not sell personal data. We share it only with the limited service providers needed to run the Site, for example:
- Hosting: Hostinger (serves the Site and maintains server logs).
- Analytics provider (Plausible / Matomo, as configured — cookieless).
- Media platforms (Spotify / YouTube) only when you actively load an embedded player.
Where a provider is outside the EU/EEA (for example Spotify or YouTube, whose data may be processed in the United States), appropriate safeguards under Chapter V GDPR (such as Standard Contractual Clauses) apply.
5. How long we keep data
Server logs are retained only as long as our host’s security/logging policy requires (typically a short period). Analytics data is stored in aggregate, anonymised form and cannot be traced back to you. Emails you send us are kept only as long as needed for the conversation and any legitimate business/legal record.
6. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time where processing is based on consent. To exercise any of these rights, email info@crushplaza.com.
You also have the right to lodge a complaint with a supervisory authority:
- In Sweden (where the controller is based): Integritetsskyddsmyndigheten (IMY) — https://www.imy.se
- If you are a UK resident, the equivalent rights apply under the UK GDPR / Data Protection Act 2018 and complaints may be made to the Information Commissioner’s Office (ICO) — https://ico.org.uk/make-a-complaint/
7. Security
We take reasonable technical and organisational measures to protect personal data. No method of transmission over the internet is 100% secure, but we minimise the data we handle in the first place.
8. Changes to this policy
If we change this policy we will update the “Last updated” date above. Material changes may be announced on the Site.
9. Contact
Questions about this policy or your personal data: info@crushplaza.com — CrushPlaza, Östgötagatan 12, 116 25 Stockholm, Sweden.
Blues N Shadow enquiries (booking / licensing / press): bns@ciberfeed.com.
