This policy explains how we collect, use, and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR) and applicable Swedish data protection law.
Hellström Trading i Göteborg AB
Registered in Sweden
Platform: IWEYmusic.com
Contact: support@iweymusic.com
We are the data controller for all personal data processed through IWEYmusic.com. For data-related requests, contact us at the email above. We will respond within 30 days.
When you register an account, we collect:
Creators (users who upload music) additionally provide:
Payment card details are processed directly by Stripe and are never stored on our servers. We retain records of transaction amounts, dates, and references for accounting and dispute resolution.
We automatically collect:
If you contact us, we retain records of that correspondence including email content and attachments.
| Processing Activity | Legal Basis (GDPR) |
|---|---|
| Creating and managing your account | Article 6(1)(b) — Contract performance |
| Processing payments | Article 6(1)(b) — Contract performance |
| Sending transactional emails | Article 6(1)(b) — Contract performance |
| Platform analytics and improvement | Article 6(1)(f) — Legitimate interest |
| Marketing emails (opt-in) | Article 6(1)(a) — Consent |
| Legal compliance and fraud prevention | Article 6(1)(c) — Legal obligation |
| Creator tax records | Article 6(1)(c) — Legal obligation (Swedish tax law) |
| Data Category | Retention Period |
|---|---|
| Account data | Duration of account + 90 days after deletion |
| Transaction / payment records | 7 years (Swedish Bookkeeping Act) |
| Creator tax records | 7 years (Swedish tax law) |
| Content uploads (music, artwork) | Until deleted by creator or account closure |
| Support correspondence | 2 years from resolution |
| IP logs / access logs | 90 days |
| Consent records | Until consent withdrawn + 3 years |
We do not sell your personal data. We share data only with:
Stripe, Inc. processes all payment transactions under their own Privacy Policy. Stripe acts as an independent data controller for payment processing and as our data processor for payouts.
Amazon Cognito handles user authentication. Account credentials are managed by AWS Cognito within EU data centres.
Our platform runs on Amazon Web Services (AWS). Data is stored in EU data centres (eu-north-1, eu-west-1). AWS processes data under Standard Contractual Clauses.
Audio files and images are delivered via Amazon CloudFront (CDN). Access logs may contain IP addresses and are retained for 90 days.
We may disclose data to Swedish authorities (Skatteverket, Polismyndigheten) when legally required, or in response to valid court orders.
Our infrastructure is hosted within the EU. Some third-party providers (notably Stripe) may process data outside the European Economic Area. We ensure all international transfers comply with GDPR Chapter V through:
As a data subject within the EU/EEA, you have the following rights:
| Right | What it means |
|---|---|
| Access (Art. 15) | Request a copy of all personal data we hold about you |
| Rectification (Art. 16) | Request correction of inaccurate or incomplete data |
| Erasure (Art. 17) | Request deletion of your data ("right to be forgotten") |
| Restriction (Art. 18) | Request that we limit processing of your data |
| Portability (Art. 20) | Receive your data in a structured, machine-readable format |
| Object (Art. 21) | Object to processing based on legitimate interest |
| Withdraw Consent | Withdraw consent at any time where processing is consent-based |
To exercise any right, email us at support@iweymusic.com. We will respond within 30 days. In complex cases, we may extend by an additional 60 days with prior notice.
You have the right to lodge a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten, IMY) at www.imy.se.
We implement appropriate technical and organisational measures to protect your data, including:
IWEYmusic is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided data without parental consent, contact us immediately at support@iweymusic.com.
We may update this Privacy Policy from time to time. Material changes will be communicated by email (to registered users) and via a notice on the platform at least 14 days before taking effect. The "Last updated" date at the top of this document reflects the most recent revision.
For all privacy-related enquiries:
Hellström Trading i Göteborg AB
Email: support@iweymusic.com
Platform: www.iweymusic.com