Privacy Policy

1. Who We Are

CyprusSound.com is operated by Backlight Media, based in Limassol, Cyprus. We are the data controller for personal data collected through the Platform. You can reach us at info@backlight.media.

2. Data We Collect

We collect the following categories of personal data:

• Account data: email address, name (optional), city (optional)
• Profile data: artist/venue/festival name, bio, genres, social media links, images
• Newsletter data: email address, user type preference (fan, artist, venue)
• Usage data: pages visited, features used, device type, browser type
• Submission data: gig details, contact information submitted via forms

3. How We Use Your Data

• To provide and maintain the Platform
• To authenticate your account via magic link email
• To display your artist, venue, or festival profile publicly
• To send transactional emails (login links, gig notifications, claim invitations)
• To improve the Platform through analytics
• To respond to support requests

4. Third-Party Services

We use the following third-party services to operate the Platform:

5. Cookies

We use minimal cookies strictly necessary for the operation of the Platform:

• cs_session: Session authentication cookie. HttpOnly, secure, expires after 30 days (90 days for admins).

We do not use advertising cookies or third-party tracking cookies. Google Analytics uses its own cookies for analytics purposes, which can be disabled via your browser settings.

6. Data Sharing

We do not sell your personal data to third parties. We do not use third-party advertising trackers. Your data is only shared with the third-party services listed above, solely for the purpose of operating the Platform.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Request your data in a structured, machine-readable format
• Restriction: Request restriction of processing of your data
• Objection: Object to processing of your data

To exercise any of these rights, contact us at info@backlight.media. We will respond within 30 days.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Platform. If you request account deletion, we will delete your personal data within 30 days, except where we are required by law to retain it.

Session data is automatically purged after expiry. Newsletter subscriptions can be cancelled at any time.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), secure authentication via magic links, and access controls on our database. Our database is hosted in the EU (Ireland) by Supabase.

10. Changes

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this page periodically.

Contact

For privacy-related questions or data requests, contact us at info@backlight.media.

Backlight Media
Limassol, Cyprus