Privacy Policy

Last updated: 17th December 2025

SONG (Shaky’s Official News Group), (“we”, “us”, “our”), is operated by HEC Limited, registered in the United Kingdom. We are committed to protecting personal data and respecting the privacy of our members and customers.

This Privacy Policy explains how personal data is collected, used, stored, and protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

HEC Limited t/a SONG (Shaky’s Official News Group)
PO Box 298
Wallasey
CH27 9FZ
United Kingdom

Email: info@shakysofficialnewsgroup.net

For the purposes of data protection legislation, SONG is the data controller.

2. Personal Information We Collect

We collect and process personal data only where necessary for the operation of the fan club, the administration of memberships, and the fulfilment of merchandise orders.

2.1 Fan Club Memberships

When you apply for, renew, or hold a membership, we may collect:

  • Name
  • Email address
  • Postal address
  • Country of residence
  • Payment method used
  • Membership status and renewal date
2.2 Merchandise Orders

When placing an order for merchandise, we may collect:

  • Payment confirmation and order details
  • Name
  • Postal address
  • Email address
  • Telephone number (if provided)
  • Items purchased
    2.3 Email Communications

    When joining the fan club, your name and email address may be added to our email distribution list, which is managed using Mailchimp. You may unsubscribe at any time using the link included in our emails.

    2.4 Payments

    We do not store payment card details.

    Payments are processed securely by third-party providers, including:

    • Stripe (card payments)
    • Wise (bank transfer payments, where applicable)
    • Cheque or Postal Order (processed manually for UK members)

    These providers may collect additional personal data in accordance with their own privacy policies and legal obligations.

    3. How We Use Personal Data

    We use personal data for the following purposes:

    • Processing and administering fan club memberships
    • Delivering membership packs and merchandise
    • Communicating fan club information, updates, and newsletters
    • Processing payments and maintaining financial records
    • Responding to enquiries and providing customer support
    • Preparing shipping labels and dispatching items via Royal Mail

    We do not sell, rent, or trade personal data to third parties for marketing purposes.

    4. Legal Basis for Using Your Data

    We process personal data under one or more of the following lawful bases as defined by the UK GDPR:

    • Contract – to administer memberships and fulfil merchandise orders
    • Consent – where you have opted to receive email communications
    • Legal obligation – to comply with accounting, tax, and postal requirements
    • Legitimate interests – to operate and manage the fan club effectively, provided such interests are not overridden by your rights
    5. Data Retention

    We retain personal data only for as long as necessary for the purposes for which it was collected.

    • Membership records: up to 3 years after membership expiry
    • Order and payment records: typically 6 years for accounting and tax compliance
    • Email subscription data: until you unsubscribe

    Data is securely deleted or anonymised once retention periods expire.

    6. Sharing Personal Data

    We share personal data only where necessary and only with trusted service providers, including:

    • Mailchimp – email communications
    • Stripe – payment processing
    • Wise – bank transfer payments
    • Royal Mail / Click & Drop – postage and delivery
    • Hostinger – website and server hosting

    All service providers are required to handle personal data in a manner consistent with applicable data protection laws.

    7. International Data Transfers

    Some service providers may process personal data outside the United Kingdom. Where this occurs, appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses, to ensure data is protected to UK GDPR standards.

    8. Your Rights Under UK GDPR

    You have the right to:

    • Request access to your personal data
    • Request correction of inaccurate or incomplete data
    • Request erasure of personal data (where applicable)
    • Object to or restrict certain processing
    • Withdraw consent for email communications
    • Request a copy of your personal data

    We may require reasonable verification of identity before responding to data protection requests.

    To exercise these rights, contact us at info@shakysofficialnewsgroup.net

    9. Cookies and Website Functionality

    This website uses cookies and similar technologies that are necessary for its operation and for the administration of fan club memberships and merchandise orders.

    These include cookies used by:

    • WordPress (core website functionality)
    • WooCommerce (shopping cart, checkout, and session management)
    • Member login and authentication
    • Security and fraud prevention

    Some cookies may store technical information such as session identifiers, login status, or display preferences. These cookies do not store payment details.

    Temporary cookies may be used to determine whether a visitor’s browser accepts cookies. These cookies contain no personal data and are discarded when the browser is closed.

    Because these cookies are essential to the operation of the website and fan club services, they cannot be disabled.

    10. Technical and Security Data

    When you access or interact with the website, certain technical data may be processed automatically. This may include:

    • IP address
    • Browser type and user agent
    • Date and time of access
    • Login and authentication events

    This information is used solely for purposes such as website security, fraud prevention, system administration, and diagnosing technical issues.

    If you request a password reset, your IP address may be included in the reset email as part of standard security procedures.

    11. WooCommerce and Online Store Data

    When you place an order or hold a fan club membership, WooCommerce processes certain personal and technical data in order to operate the online store and membership system.

    This may include:

    • Products viewed and purchased
    • Cart contents and session data
    • Billing and shipping details
    • Location data used to calculate taxes, postage, or available payment options

    This information is used only for legitimate operational purposes such as fulfilling orders, processing payments, customer support, and compliance with legal obligations.

    12. Security Measures

    We take appropriate technical and organisational measures to protect personal data, including:

    • Encrypted website connections (HTTPS)
    • Secure, PCI-compliant payment processing via Stripe
    • Restricted administrative access to membership and order records

    No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

    13. Geolocation Data

    Geolocation data is used solely to determine a visitor’s country for the purposes of presenting appropriate products, pricing, and payment options. No personally identifiable information is stored as part of this process.

    This website uses GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

    14. Changes to This Policy

    We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated “Last updated” date.

    Contact Us

    If you have any questions about this Privacy Policy or how your personal data is handled, please contact: info@shakysofficialnewsgroup.net