PRIVACY POLICY

BrotherStrut Ltd

Last updated: March 2026

1. Who We Are

Brother Strut Ltd (“we”, “us”, “our”) is the data controller responsible for your personal data. We are a music and entertainment company operating under the name Brother Strut.

For any privacy-related enquiries, please contact us at: info@brotherstrut.com

 

2. What This Policy Covers

This policy explains how Brother Strut Ltd collects, uses, stores, and shares your personal data when you:

•      Visit our website at brotherstrut.com

•      Subscribe to our mailing list

•      Interact with us on social media platforms (Facebook, Instagram, TikTok, YouTube)

•      Receive communications from us

 

It also describes our internal use of third-party technology platforms, including AI tools and advertising management software, and how these affect your data.

 

3. Data We Collect and How We Use It

3.1 Website Visitors

When you visit brotherstrut.com, we may collect:

•      Usage data - pages visited, time on site, referring URLs, browser type, and device information

•      IP address - used for security and to determine approximate geographic location

 

Legal basis: Legitimate interests (to understand how our website is used and to improve it).

3.2 Mailing List (Kit)

We use Kit (formerly ConvertKit) to manage our email mailing list. If you subscribe, we collect:

•      Your email address

•      Your first name (if provided)

•      Subscription date and source

•      Email engagement data (opens, clicks)

 

We use this data to send you news, release announcements, tour dates, and other updates about Brother Strut.

 

Legal basis: Consent - you explicitly opt in when subscribing. You can unsubscribe at any time via the link in any email we send, or by contacting us directly.

 

Kit is a US-based processor. Data transfers to the US are covered by appropriate safeguards under the UK International Data Transfer Agreement (IDTA) framework. Kit’s privacy policy is available at kit.com/privacy.

3.3 Contact and Enquiry Forms

If you contact us via a form on our website, we collect:

•      Your name and email address

•      The content of your message

 

Legal basis: Legitimate interests (to respond to your enquiry).

 

4. Social Media

We operate pages and accounts on Facebook, Instagram, TikTok, and YouTube. When you interact with our content on these platforms (comments, likes, direct messages), those platforms collect and process your data in accordance with their own privacy policies. We receive only what those platforms make available to page administrators (e.g., aggregated analytics, comments, and messages sent directly to us.

 

We do not use social media data for profiling or automated decision-making.

 

5. Advertising (Meta Ads)

We run paid advertising campaigns on Facebook and Instagram using Meta Ads Manager. In connection with this, we use a private internal Meta API application to help manage and automate our advertising activity.This application:

•      Is used solely by authorised personnel at Brother Strut Ltd

•      Acts only on our own ad account

•      Does not collect, store, or process data from any external users

•      Is not accessible to the public and has no public-facing login or authorisation flow

 

Any personal data processed by Meta in connection with our advertising (such as ad targeting data) is governed by Meta’s privacy policy, available at facebook.com/privacy.

 

Data deletion: As this is an internal tool with no external users, we do not hold any personal data collected through the app on behalf of third parties. If you have a concern about data processed in connection with our Meta advertising, please contact us at info@brotherstrut.com.

 

6. Artificial Intelligence (AI) Tools

We use AI-powered tools, including Claude (provided byAnthropic), to assist with internal tasks such as content creation, copywriting, campaign planning, social media management, and operational automation.

Direct integrations with data systems

As part of our operational workflow, Claude is connected viaAPI to the following platforms we use to hold your data:

•      Kit - Claude may access subscriber data held inour mailing list, including email addresses, first names, subscription dates, and engagement data (opens, clicks), for the purposes of managing communications, drafting emails, and automating campaign tasks.

•      Shopify - Claude may access customer data held in our Shopify store, including names, email addresses, order history, and delivery addresses, for the purposes of order management and customer communications.

•      Meta Ads Manager - Claude may access our advertising account data, including audience configurations and campaign performance data, to assist with ad management and reporting.

 

This means that personal data held in these systems may be processed by Anthropic’s infrastructure as part of normal AI-assisted operations. We use this capability solely for legitimate business purposes relating to our music and entertainment activities.

 

Legal basis: Legitimate interests - we have assessed that using AI tools to manage our communications and operations is proportionate to the privacy impact and does not override the interests of the individuals whose data is involved, given the limited and controlled nature of the access. Mailing list subscribers who wish to object to their data being processed in this way may unsubscribe at any time or contact us directly (seeSection 14).

Safeguards

•      Claude is accessed via a business (Teams) account subject to Anthropic’s enterprise data handling terms

•      We do not use AI tools to make automated decisions that have a legal or similarly significant effect on any individual

•      Access is limited to authorised personnel at Brother Strut Ltd only

•      Anthropic’s privacy policy is available at anthropic.com/privacy

 

7. Website Hosting and Infrastructure

Our website is hosted and built using Webflow. Webflow may collect standard technical data (such as IP addresses and usage logs) as part of hosting operations. Webflow’s privacy policy is available at webflow.com/legal/privacy.

 

8. Cookies

Our website may use cookies and similar technologies to enable core site functionality and to understand how visitors use the site. Where we use non-essential cookies (such as analytics), we will ask for your consent.

 

You can manage or withdraw your cookie consent at any time via your browser settings.

 

9. Who We Share Your Data With

We do not sell your personal data. We may share data with the following third-party processors who act on our behalf:

 

All processors are required to handle your data securely and only as instructed by us. Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR, including reliance on the UK International Data Transfer Agreement (IDTA) framework where applicable.

 

10. Data Retention

We retain your personal data only for as long as necessary:

Kit - Email marketing and list  management - Email address, name,  engagement data - USA

•      Mailing list data - for as long as you remain subscribed, plus a short period to honour unsubscribe requests

•      Enquiry data - up to 2 years from last contact

•      Website analytics - typically up to 26 months

•      Advertising data - as required by Meta’s retention policies and our own reporting needs

Shopify - Merchandise store and order  processing - Name, email, address, order  history - USA

 

11. Your Rights

Under UK GDPR, you have the right to:

•      Access the personal data we hold about you

Meta Platforms - Advertising  (Facebook/Instagram) - Ad targeting and performance  data - USA

•      Correct any inaccurate or incomplete data

•      Erase your data (“right to be forgotten”) in certain circumstances

•      Restrict how we process your data

•      Object to processing based on legitimate interests

Webflow - Website hosting - IP address, usage data - USA

•      Data portability - receive your data in a structured, machine-readable format

•      Withdraw consent at any time where consent isthe legal basis for processing

 

To exercise any of these rights, please contact us at info@brotherstrut.com. We will respond within one month.

Anthropic - AI-assisted operations (via  API connection to Kit, Shopify, and Meta) - Email addresses, names,  order data, ad account data - USA

 

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

 

12. Data Deletion Requests

If you would like us to delete any personal data we hold about you, please email info@brotherstrut.com with the subject line “Data Deletion Request”. We will confirm receipt and action your request within 30 days, subject to any legal obligations that require us to retain certain records.

 

13. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects when the most recent changes were made. For significant changes, we will make reasonable efforts to notify subscribers.

 

14. Contact Us

Brother Strut Ltd

Email: info@brotherstrut.com

Website: brotherstrut.com

----