Privacy policy

Last updated: 7 October 2026.

I use your data to run Unglued Academy, coaching, plugins and the store, and to measure marketing as explained below. I never sell your personal data.

Who is responsible

I'm Joshua Peter Brown, trading as Unglued, the controller responsible for your personal data. Questions and privacy requests can go to josh@unglued.co.uk.

What gets collected

• Your email address and, if supplied, your name
• Your login sessions and which lessons you mark as complete
• Marketing consent, including when and where you gave or withdrew it
• Stripe customer details, subscription status and payment references. Card details go directly to Stripe and never touch this site
• Store order details, including your name, email, items, total, delivery address and any phone number supplied at checkout. Stripe collects the delivery details and I receive them to fulfil your order
• Your Discord account details if you choose to connect the community
• Coaching session recordings, transcripts, summaries, next steps and the account each session belongs to when you use recorded coaching, plus booking and onboarding information you provide
• Reviews you submit, including the name, rating and text displayed publicly if the review is approved
• For plugin activation, a one-way computer identifier, the computer name, operating system, plugin version and activation history
• If you accept analytics, basic usage and advertising attribution from Google Analytics and Meta Pixel on public marketing, Academy and signup pages. The signed-in lesson area has neither service
• Campaign and source tags on visits and purchases, and email delivery, bounce, complaint, open and click events where email tracking is enabled
• Technical request information, such as IP address, browser details and error logs, used by the site and its providers for security and operation

Why it is used

• To provide your account, lessons, progress, billing, orders and community and plugin access under the contract with you
• To deliver coaching sessions and keep your private session archive available after coaching ends, under the contract with you
• To send production tips, plugin news and offers, and Academy news when you consent. Every marketing email has an unsubscribe option
• To secure and maintain the site, prevent abuse, handle support and publish genuine customer reviews, based on my legitimate interests in running a safe, reliable business
• To measure public-page usage and advertising with Google Analytics and Meta when you consent. This is separate from the data needed to fulfil your purchase
• To keep aggregate campaign counts and relate supplied campaign tags to purchases, based on my legitimate interests in understanding how people find my products. Email delivery reports help me detect failures and respect opt-outs. Optional open and click tracking is described below
• To keep financial records required by law

Who else touches it

Render hosts the site and database. Stripe handles payments and collects order delivery details. Resend delivers email and provides delivery and campaign reports. Bunny streams video and serves protected downloads. Google provides sign-in and public-page analytics. Meta provides advertising measurement on public pages. Discord provides the optional member community. Google also provides coaching booking and onboarding tools where linked. Zoom records and transcribes coaching sessions and creates its AI summaries. Bunny stores the private playback copy. Each gets only what it needs for its part of the service.

For merch, the printing and delivery providers receive the contact, delivery and order details needed to make and deliver it. Professional advisers or authorities may receive records where required for accounting, a legal obligation or a dispute. Provider privacy policies also explain any processing they carry out for their own purposes.

Some providers may process data outside the UK. Where that happens, the transfer relies on the safeguards described in that provider's privacy terms, such as an adequacy decision or approved contractual protections. Contact josh@unglued.co.uk to ask which countries and safeguards apply to a service you use, or for a copy of the relevant transfer safeguards.

How long it is kept

• Ordinary login links expire after 15 minutes. A purchase or onboarding link may have a longer expiry, stated in its email
• Login sessions expire after 90 days
• Account, progress and community-link data stays while the account exists, then is deleted when an account deletion completes
• Coaching recordings, transcripts, summaries and next steps stay on your account after coaching ends, so you retain the sessions you paid for. Completed account deletion removes the account archive and its Bunny playback copies. Zoom's original recordings and other provider copies follow their own retention and deletion settings; contact me if you want those checked as part of a deletion request
• Plugin activation records stay while the account and licence exist, and are deleted with the account. Deactivating a computer stops its access but does not immediately erase its activation history
• Marketing consent records stay while needed to prove and respect your choice
• Financial records are normally kept for six years for UK tax and accounting, or longer where a legal obligation or live dispute requires it. Account deletion removes the name and replaces the email in this site's merch order records. Payment providers may retain transaction and invoice details they are legally required to keep
• Public analytics data follows the retention settings in the Google Analytics and Meta properties
• Campaign totals remain as historical aggregate reports. Email event records retain provider message references, event types, dates and reduced links, rather than recipient email addresses, IP addresses or browser details. Provider-side records may still identify recipients
• Approved reviews may remain public after account deletion with the display name changed to Former customer. Ask me to remove review text that still identifies you

Campaign reporting and email tracking

The site counts plugin-page loads by campaign and source, including direct visits. Those count records contain the campaign, a source category and time, without an account, email address, browser identifier, IP address or full referrer. This first-party count runs separately from the optional Google Analytics and Meta scripts. Campaign tags supplied with a purchase can also be stored with that purchase.

Where enabled, Resend uses tracking pixels and tracked links to report opens and clicks. Its reports can associate those events with a message and recipient. An open does not reliably prove that someone read an email. The website imports reduced event records for reporting, without recipient addresses, IP addresses or browser details. You can unsubscribe from marketing at any time; contact me about tracking or your right to object. Accepting website analytics and subscribing to marketing are separate choices.

DJ Edit Machine and referrals

DJ Edit Machine processes your audio locally on your computer. Audio is not uploaded to the billing service. I record subscription, activation, referral and payment references to provide access, prevent fraud and calculate agreed referral commission. This supports my contract with you and legitimate interests in accurate referral accounting.

A referral recorded on your account can continue across renewals and returning subscriptions. Referrers receive amounts, dates and reporting references, not your name, email, audio or card details. Financial referral records follow the accounting retention policy above. The selected plan and code may be kept in your browser session so signing in does not discard your checkout choices; this does not enable advertising cookies or subscribe you to marketing emails.

Your rights

You can ask for a copy of your data, correct it, delete it, restrict how it is used, object to certain uses, or ask for portable account data where that right applies. You can object to processing based on legitimate interests, and object to direct marketing at any time. You can withdraw marketing or analytics consent at any time without affecting anything that happened before withdrawal. Email josh@unglued.co.uk or use the account and unsubscribe controls.

If you are unhappy with how a request is handled, you can complain to the UK Information Commissioner's Office at ico.org.uk.

Account, billing and relevant delivery information are needed to supply the product or service you request. Marketing, public analytics and optional community connections are your choice.

Cookies and browser storage

The signed-in area uses a secure login cookie so you stay logged in, with a 90 day expiry. A separate cookie remembers your analytics choice for up to a year across Unglued subdomains. Necessary checkout choices and some event-duplication flags may also use session storage. Google Analytics and Meta Pixel are optional and only load after you choose Accept analytics on the public-site banner. Meta may then set its _fbp and _fbc attribution cookies. Declining does not change the site, account or free lessons. You can change the choice below at any time.