top of page
​
PRIVACY POLICY​
​
Revised July 12th 2026
​

Publika Amorale Ltd (trading as "Sirdsapes") is committed to protecting your personal data. This Privacy Policy explains who we are, what personal data we collect about you, why we collect it, how we use it, how long we keep it, and what rights you have. Please read it carefully alongside our Terms and Conditions.

​

This Privacy Policy applies to all personal data collected through www.sirdsapes.com (the "Website") and through any related transactions, communications, or services, including the purchase of merchandise, event tickets, and digital music.

 

1. Who We Are — The Data Controller

Company: Publika Amorale Ltd

Registration number: 16942540

Registered address: 20 Wenlock Road, London, N1 7GU, England

Trading name: Sirdsapes

Website: www.sirdsapes.com

​

Publika Amorale Ltd is the data controller responsible for your personal data. This means we determine the purposes and means by which your personal data is processed. If you have any questions about this Privacy Policy or how we handle your data, please contact us using the details in Section 11.

We are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we process the personal data of individuals located in the European Economic Area (EEA), we also comply with the EU GDPR.

​

2. Personal Data We Collect

We collect personal data in the following ways and categories.

 

2.1 Data You Provide Directly

When you use our Website or purchase from us, you may provide:

  • Identity data: your full name;

  • Contact data: email address, postal address, and telephone number;

  • Account data: username and password if you create an account;

  • Transaction data: details of products and services you have purchased and your order history;

  • Payment data: billing address and payment method details — note that full card numbers are processed by our payment provider and are not stored by us;

  • Communication data: messages, enquiries, or feedback you send us;

  • Event preferences: ticket selections, seating preferences, and any accessibility requirements.

 

2.2 Data We Collect Automatically

When you browse the Website, we may automatically collect:

  • Technical data: IP address, browser type and version, operating system, and device identifiers;

  • Usage data: pages visited, time and date of your visit, time spent on pages, referring URLs, and clickstream data;

  • Cookie data: as described in Section 8 below.

 

2.3 Data from Third Parties

We may receive personal data about you from:

  • Payment processors, including transaction confirmation and fraud screening results;

  • Analytics providers, providing aggregated and pseudonymised browsing behaviour;

  • Social media platforms, if you interact with our content or sign in via a social account.

 

3. How We Use Your Personal Data

We only use your personal data when the law allows us to. For each purpose below, we have identified the legal basis we rely on under the UK GDPR and EU GDPR.

 

Processing your orders

We use your identity, contact, transaction, and payment data to process and fulfil orders for merchandise, event tickets, and digital music, and to send you order confirmations, shipping updates, and customer service communications. The legal basis is performance of a contract.

​

Managing your account

We use your identity, contact, and account data to create and manage your account on the Website. The legal basis is performance of a contract.

 

Marketing communications

With your explicit consent, we use your identity and contact data to send you marketing emails, newsletters, and updates about new music, events, and merchandise. The legal basis is consent. You may withdraw your consent at any time by clicking the unsubscribe link in any marketing email or by contacting us directly. Withdrawal of consent does not affect the lawfulness of any processing carried out before you withdrew it.

 

Fraud prevention and payment security

We use your identity, payment, and technical data to process payments securely and to detect and prevent fraudulent activity. The legal basis is our legitimate interests in protecting our business and customers from fraud and financial crime.

​

Website analytics and improvement

We use technical, usage, and cookie data to analyse how visitors use the Website and to improve our products and services. The legal basis is our legitimate interests in understanding our audience and developing our offerings.

 

Legal and regulatory compliance

We use your identity, contact, transaction, and payment data to comply with applicable legal and regulatory obligations, including tax reporting and accounting requirements. The legal basis is compliance with a legal obligation.

 

Customer enquiries and complaints

We use your identity, contact, and communication data to respond to your enquiries, complaints, and requests. The legal basis is our legitimate interests in maintaining effective customer relationships.

 

Protecting our legal rights

We may use your identity, contact, transaction, and technical data to enforce our Terms and Conditions and to defend or pursue legal claims. The legal basis is our legitimate interests in protecting our business and rights.

 

3.1 Automated Decision-Making

We do not currently use automated decision-making or profiling in a way that produces legal or similarly significant effects on you.

 

4. Who We Share Your Data With

We do not sell your personal data to third parties. We share your data only with the following categories of recipients, strictly to the extent necessary to provide our services:

  • Payment processors, to securely process payments. These processors are PCI-DSS compliant and process payment data on our behalf under strict data processing agreements.

  • Shipping and fulfilment partners, to deliver physical merchandise to you. We share your name and delivery address for this purpose only.

  • Email service providers, to send transactional and, where applicable, marketing communications on our behalf.

  • Analytics providers, to help us understand how the Website is used. Data shared with analytics providers is aggregated and/or pseudonymised where possible.

  • Ticketing and event technology platforms, to manage event ticket issuance, verification, and entry.

  • Professional advisors, including lawyers, accountants, and auditors, where necessary to protect our legal and business interests.

  • Regulatory and law enforcement authorities, where we are required to do so by applicable law or court order.

All third-party service providers with whom we share personal data are required to maintain appropriate technical and organisational security measures and to process personal data only on our documented instructions.

​

5. International Transfers of Personal Data

Publika Amorale Ltd is based in the United Kingdom. Some of our third-party service providers may process your data outside the UK or EEA. Where such transfers occur, we ensure that appropriate safeguards are in place, such as:

  • Adequacy decisions: transfers to countries that the UK or EU has determined provide an adequate level of data protection;

  • Standard Contractual Clauses (SCCs): approved contractual clauses that require the recipient to protect personal data to the same standard required within the UK and EEA;

  • Other approved transfer mechanisms as recognised under applicable data protection law.

  • You may request further information about the specific safeguards in place for any international transfer by contacting us using the details in Section 11.

​

6. How Long We Keep Your Data

We retain personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy or as required by law. The following indicative retention periods apply.

 

  • Order and transaction records: retained for 7 years from the date of the transaction, to meet UK tax and accounting obligations.

  • Account data: retained for the life of your account plus 2 years after closure, to support dispute resolution and potential re-activation requests.

  • Marketing consent and communication history: retained until consent is withdrawn plus 2 years thereafter, as evidence of consent and regulatory compliance.

  • Customer service correspondence: retained for 3 years from the date of last contact, to support dispute handling.

  • Technical and usage data (logs, analytics): retained for up to 26 months, to support security monitoring and analytics.

  • Cookie data: retained in accordance with the periods set out in Section 8, which vary by cookie type.

 

When personal data is no longer required, we securely delete or anonymise it. In some circumstances, we may anonymise data for research or statistical purposes, in which case the anonymised data may be retained indefinitely.

 

7. Your Rights

Under UK and EU data protection law, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us as set out in Section 11. We will respond to verified requests within one calendar month, or up to three months for complex or high-volume requests, in which case we will notify you.

 

  • Right of Access: you may request a copy of the personal data we hold about you, commonly known as a Subject Access Request.

  • Right to Rectification: you may ask us to correct any inaccurate or incomplete personal data we hold about you.

  • Right to Erasure: you may ask us to delete your personal data where there is no compelling reason for us to continue processing it. This right is not absolute and may be subject to legal obligations.

  • Right to Restrict Processing: you may ask us to pause the processing of your data in certain circumstances, for example while we verify the accuracy of disputed data.

  • Right to Data Portability: where processing is based on your consent or a contract, you may ask us to transfer your data to you or to another provider in a structured, machine-readable format.

  • Right to Object: you may object to processing based on legitimate interests or for direct marketing purposes. We must stop processing for marketing purposes immediately; for other purposes, we will cease unless we can demonstrate compelling legitimate grounds.

  • Right to Withdraw Consent: where we process your data based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

  • Rights regarding Automated Decisions: you have the right not to be subject to decisions based solely on automated processing that produce significant legal or similar effects on you.

 

We will not charge a fee for handling your request unless it is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee or decline the request.

​

7.1 Right to Lodge a Complaint

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the relevant supervisory authority. For UK residents, this is the Information Commissioner's Office (ICO) at www.ico.org.uk, telephone 0303 123 1113. For EU residents, this is your national data protection authority — for Latvia, the Datu valsts inspekcija (Data State Inspectorate) at www.dvi.gov.lv.

We would appreciate the opportunity to address your concerns before you contact a supervisory authority, so please contact us first.

 

8. Cookie Policy

Our Website uses cookies and similar tracking technologies to improve your experience, analyse traffic, and support our marketing. A cookie is a small text file placed on your device when you visit a website, allowing it to recognise your device on subsequent visits.

 

8.1 Types of Cookies We Use

  • Strictly Necessary cookies are essential for the Website to function correctly. They include session management, shopping cart functionality, and security cookies. These cookies cannot be disabled and do not require your consent. They are typically retained for the duration of your session or up to 1 year.

  • Functional cookies remember your preferences — such as language or currency settings — to enhance your browsing experience. These are retained for up to 1 year.

  • Analytics and Performance cookies collect anonymised or pseudonymised data about how visitors use the Website, helping us improve site performance and content. Examples include tools such as Google Analytics. These are retained for up to 26 months.

  • Marketing and Targeting cookies track your activity across websites to deliver relevant advertising and measure the effectiveness of our campaigns. These are only placed with your explicit consent and are retained for up to 2 years.

 

8.2 Your Cookie Choices

When you first visit the Website, you will be presented with a cookie consent banner that allows you to accept, reject, or customise non-essential cookies. You can change your preferences at any time via the cookie settings link in our website footer.

You may also control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Website. For more information about managing cookies, visit www.allaboutcookies.org.

 

9. Children's Privacy

The Website is not directed at children under the age of 18 and we do not knowingly collect personal data from children. If you believe that a child under 18 has provided us with personal data, please contact us immediately and we will take steps to delete that data without undue delay.

 

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

  • Encrypted transmission of data via HTTPS/TLS;

  • Access controls limiting who within our organisation can access personal data;

  • Use of PCI-DSS compliant payment processors for all payment transactions;

  • Regular review of our security practices and those of our service providers.

 

No method of electronic transmission or storage is 100% secure. While we use commercially reasonable means to protect your data, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by applicable law.

 

11. Contact Us and Data Requests

For any questions about this Privacy Policy, to exercise your data rights, or to make a complaint, please contact us:

Data Controller: Publika Amorale Ltd (trading as Sirdsapes)

Registered address: 20 Wenlock Road, London, N1 7GU, England

Website: www.sirdsapes.com

Email: book@sirdsapes.com

​

We aim to respond to all data rights requests and enquiries within 30 calendar days. For complex requests we may extend this by a further two months, in which case we will inform you of the extension and the reasons for it within the initial 30-day period.

 

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, regulatory guidance, or our data processing practices. We will post the updated Privacy Policy on the Website with a revised "Last updated" date. Where changes are material, we will notify you by email if you have an account, or by a prominent notice on the Website. We encourage you to review this Privacy Policy periodically.

 

13. Third-Party Links

The Website may contain links to third-party websites, social media platforms, or streaming services. This Privacy Policy applies only to our Website. We are not responsible for the privacy practices of any third-party site and encourage you to read their privacy policies before providing any personal data to them.

​

​

bottom of page