Privacy Policy

Last updated: 6th September 2026

SONG (Shaky’s Official News Group), (“we”, “us”, “our”), is operated by HEC Limited, registered in the United Kingdom. We are committed to protecting personal data and respecting the privacy of our members and customers.

This Privacy Policy explains how personal data is collected, used, stored, and protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

HEC Limited t/a SONG (Shaky’s Official News Group)
PO Box 298
Wallasey
CH27 9FZ
United Kingdom

Email: info@shakysofficialnewsgroup.net

For the purposes of data protection legislation, SONG is the data controller.

2. Personal Information We Collect

We collect and process personal data only where necessary for the operation of the fan club, the administration of memberships, and the fulfilment of merchandise orders.

2.1 Fan Club Memberships

When you apply for, renew, or hold a membership, we may collect and retain:

  • Name
  • Email address
  • Postal address
  • Country associated with your membership
  • Payment method used
  • Membership type, including whether an overseas membership includes a physical membership pack
  • Membership status, expiry date and renewal history
  • Administrative information required to manage your membership

Your membership country may be retained separately from ordinary checkout address details so that the correct membership, postage and customs rules can be applied consistently.

2.2 Merchandise Orders

When you place an order for merchandise, we may collect and retain:

  • Name
  • Email address
  • Postal address and destination country
  • Telephone number, if provided
  • Items purchased and quantities
  • Payment confirmation and payment method
  • Postage and delivery service information
  • Customs declaration information where required for international delivery
  • Customs duty, import tax and postal handling information calculated or recorded in connection with an overseas order

For international shipments, customs-related information may include product descriptions, declared values, tariff classifications, countries of origin and whether import charges are paid by SONG through the postal service or are payable by the recipient.

2.3 Email Communications

We use Mailchimp to manage fan club email communications and membership renewal reminders.

Where necessary for these purposes, we may provide Mailchimp with:

  • Your name
  • Your email address
  • Limited membership information, such as membership status, expiry or renewal information

Where email communications rely on your consent, you may unsubscribe at any time using the link included in our emails.

Unsubscribing from general fan club or marketing emails does not prevent SONG from sending individual service messages where necessary to administer your membership, process an order, respond to an enquiry, or provide other information relating directly to a transaction or service you have requested.

2.4 Payments

We do not store payment card details.

Payments are processed securely by third-party providers, including:

  • Stripe (card payments)
  • Wise (bank transfer payments, where applicable)
  • Cheque or Postal Order (processed manually for UK members)

These providers may collect additional personal data in accordance with their own privacy policies and legal obligations.

3. How We Use Personal Data

We use personal data for the following purposes:

  • Processing and administering fan club memberships
  • Maintaining membership status, expiry dates, renewal records and the country associated with a membership
  • Delivering membership packs and merchandise
  • Calculating postage, customs duties, import taxes and postal handling charges where applicable
  • Preparing customs declarations and other information required for international shipments
  • Preparing shipping labels and dispatching items via Royal Mail and Click & Drop
  • Communicating fan club information, updates and newsletters
  • Sending membership renewal reminders
  • Processing payments and maintaining financial and accounting records
  • Responding to enquiries and providing customer support
  • Maintaining the security, integrity and correct operation of the website, membership system and online store

We do not sell, rent or trade personal data to third parties for marketing purposes.

4. Legal Basis for Using Your Data

We process personal data under one or more of the following lawful bases under the UK GDPR:

  • Contract – where processing is necessary to provide or administer your membership, process and fulfil an order, arrange delivery, calculate applicable postage or import charges, or provide other services you have requested.
  • Consent – where you have chosen to receive marketing or other optional email communications. You may withdraw this consent at any time.
  • Legal obligation – where processing is necessary to comply with accounting, tax, customs, postal or other legal requirements.
  • Legitimate interests – where necessary to operate and manage SONG effectively, maintain accurate membership and order records, prevent fraud or misuse, protect the website and its systems, and provide appropriate customer support, provided those interests are not overridden by your rights and freedoms.

Necessary membership, order, payment, delivery and customer-service communications may be sent where required to perform our contract with you or for our legitimate interests and do not depend on consent to receive marketing emails.

5. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

  • Membership records: up to 3 years after membership expiry
  • Order and payment records: typically 6 years for accounting and tax compliance
  • Email subscription data: until you unsubscribe

Data is securely deleted or anonymised once retention periods expire.

6. Sharing Personal Data

We share personal data only where necessary to provide our services, fulfil orders, meet legal obligations, or operate the website securely.

This may include sharing relevant information with:

  • Mailchimp – email communications and membership renewal administration
  • Stripe – card payment processing
  • Wise – bank transfer payments, where applicable
  • Royal Mail and Click & Drop – postage, shipping labels, customs declarations and delivery
  • Overseas postal or delivery operators – where necessary to complete international delivery
  • Customs, tax or other competent authorities – where information is required for customs clearance, import processing or compliance with applicable law
  • Hostinger – website and server hosting

Only the information reasonably necessary for the relevant purpose is shared.

Third-party service providers and other recipients are required to process personal data in accordance with applicable data protection laws and their own legal obligations.

7. International Data Transfers

Some service providers may process personal data outside the United Kingdom. Where this occurs, appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses, to ensure data is protected to UK GDPR standards.

8. Your Rights Under UK GDPR

You have the right to:

  • Request access to your personal data
  • Request correction of inaccurate or incomplete data
  • Request erasure of personal data (where applicable)
  • Object to or restrict certain processing
  • Withdraw consent for email communications
  • Request a copy of your personal data

We may require reasonable verification of identity before responding to data protection requests.

To exercise these rights, contact us at info@shakysofficialnewsgroup.net

9. Cookies and Website Functionality

This website uses cookies and similar technologies that are necessary for its operation and for the administration of fan club memberships and merchandise orders.

These include cookies used by:

  • WordPress (core website functionality)
  • WooCommerce (shopping cart, checkout, and session management)
  • Member login and authentication
  • Security and fraud prevention

Some cookies may store technical information such as session identifiers, login status, or display preferences. These cookies do not store payment details.

Temporary cookies may be used to determine whether a visitor’s browser accepts cookies. These cookies contain no personal data and are discarded when the browser is closed.

Because these cookies are essential to the operation of the website and fan club services, they cannot be disabled.

10. Technical and Security Data

When you access or interact with the website, certain technical data may be processed automatically. This may include:

  • IP address
  • Browser type and user agent
  • Date and time of access
  • Login and authentication events

This information is used solely for purposes such as website security, fraud prevention, system administration, and diagnosing technical issues.

If you request a password reset, your IP address may be included in the reset email as part of standard security procedures.

11. WooCommerce and Online Store Data

When you place an order or hold a fan club membership, WooCommerce processes certain personal, order and technical data in order to operate the online store and membership system.

This may include:

  • Products viewed and purchased
  • Cart contents and session data
  • Billing and shipping details
  • Country and location information used to determine available products, postage, customs treatment or payment options
  • Membership type and membership-related order information
  • Postage, delivery service and parcel information
  • Customs and import-charge information associated with international orders, including calculated or estimated duty, tax and handling amounts
  • Technical order records used to verify how postage and customs charges were calculated at the time an order was placed

This information is used only for legitimate operational purposes such as fulfilling orders, administering memberships, processing payments, preparing international shipments, customer support, maintaining accurate transaction records and complying with legal obligations.

12. Security Measures

We take appropriate technical and organisational measures to protect personal data, including:

  • Encrypted website connections (HTTPS)
  • Secure, PCI-compliant payment processing via Stripe
  • Restricted administrative access to membership and order records

No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

13. Geolocation Data and Country Information

This website may use geolocation services, including GeoLite2 data created by MaxMind, to identify a visitor’s country from their IP address.

This country information may be used to determine which membership products, postage options, customs treatment or payment methods are appropriate.

The geolocation process is used to determine country-level information only and is not used by SONG to track a visitor’s precise physical location.

Where a person becomes or remains a SONG member, the country associated with that membership may be stored separately in the membership record so that the correct membership, postage, customs and checkout rules can continue to be applied.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated “Last updated” date.

Contact Us

If you have any questions about this Privacy Policy or how your personal data is handled, please contact: info@shakysofficialnewsgroup.net