Last updated: June 2025
Crystal Spotlight Ltd (company number 16716408), registered at 9 Southington, Overton, Basingstoke, Hampshire, RG25 3DA, United Kingdom, operates this platform (“CS Flow”) on behalf of the artists whose release pages are hosted here. Crystal Spotlight acts as the data controller for all personal data collected through these pages.
If you have any questions or wish to exercise your data rights, please contact us at team@crystalspotlight.com.
When you voluntarily enter your email address and tick the consent checkbox on an artist release page, we collect your email address along with the date and time of sign-up and the country your request originated from.
We use this to send you news and updates about that artist — such as new releases, announcements, and events — on their behalf. We will not use your email address for any other purpose, and we will never sell or share it with third parties outside of Crystal Spotlight and the artist you signed up to hear from.
The legal basis for this processing is your freely given, unambiguous consent (GDPR Article 6(1)(a)). You can withdraw your consent at any time by unsubscribing via the link in any email we send, or by contacting us directly.
When you click a link on an artist release page, we log an anonymised event containing: the destination platform (e.g. Spotify, Apple Music), your approximate country (derived from your IP address — the IP itself is not stored), your device type and operating system, and the page or service that referred you to the release page.
This data is used solely to provide Crystal Spotlight and the artist with aggregate analytics — for example, which platforms are most popular in which countries. No individual user is identified or tracked across sessions.
The legal basis for this processing is our legitimate interest in understanding how release pages are used in order to improve them (GDPR Article 6(1)(f)).
Email sign-up data is retained until you unsubscribe or request deletion. Anonymised click analytics are retained indefinitely as they cannot be linked back to any individual.
Personal data is stored securely with reputable cloud infrastructure providers based in the European Economic Area or covered by appropriate data transfer safeguards. We take reasonable technical and organisational measures to protect your data against unauthorised access or disclosure.
Under UK and EU GDPR you have the right to:
To exercise any of these rights, contact us at team@crystalspotlight.com.
We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of our pages after an update constitutes acceptance of the revised policy.