Privacy Policy

Service Operator

OME Radio is the data controller responsible for your personal information under UK GDPR and the Data Protection Act 2018.

Website Maintained By

The OME Radio website is maintained by Creatix Group. For concerns related specifically to the website, you may contact Mark Davison directly.

Account Information

When you create an account, we collect your username, email address, and password. If you connect via Discord, we receive your Discord user ID, username, and avatar.

Usage Data

We automatically collect certain information when you access our services:

• IP Addresses: We log IP addresses to prevent misuse, detect abuse, enforce bans, and maintain platform security.
• Browser type and version
• Pages visited and time spent
• Listening History & Song Requests: Used for chart generation (Top 40, Most Liked), service analytics, and improving recommendations.
• Timestamps of interactions

Cookies

We use only essential cookies required for authentication and session management. We do not use tracking, advertising, or marketing cookies. Because only strictly necessary cookies are used, no cookie consent banner is required.

Performance of a Contract

Processing your account information, managing your access to the service, and processing song requests are necessary to fulfil our agreement with you as a user.

Legitimate Interests

We process certain data - including IP logs, usage data, and security information - on the basis of legitimate interests, such as maintaining platform security, preventing abuse, and improving our service. We only do so where these interests are not overridden by your rights.

Legal Obligation

We may be required to process or retain certain data to comply with applicable laws or respond to lawful requests from authorities.

Consent

Where we rely on your consent (for example, for optional features), you may withdraw that consent at any time by contacting us at [email protected].

Service Providers

We may share data with trusted third-party services (e.g., hosting providers, analytics) who assist in operating our platform, subject to confidentiality agreements.

Legal Requirements

We may disclose information if required by law or in response to valid legal requests.

Safety

We may share information to protect the rights, safety, and security of our users, staff, or the public.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

• Encryption of data in transit using TLS/HTTPS
• Secure password hashing using industry-standard algorithms
• Access controls limiting staff access to personal data on a need-to-know basis
• Regular review of security practices and system access permissions

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your account and associated personal data.
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format.
• Right to Object: Object to processing carried out on the basis of legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.

Discord

Used for optional OAuth authentication and community features. When you log in via Discord, we receive your Discord user ID, username, and avatar. Discord Inc. processes data in the United States; their own privacy policy governs that processing. We ensure appropriate safeguards are in place for any data transfers.

AzuraCast

Used for radio streaming infrastructure. AzuraCast processes listener connection data (such as IP addresses) to deliver the stream. We self-host AzuraCast and retain control over the data it processes on our behalf.

Stripe (Payment Processing)

We use Stripe to process payments for any paid features or subscriptions. When you make a purchase, Stripe collects and processes your payment information (such as card details and billing address) directly and securely. OME Radio does not store or access your full card number. Stripe may retain transaction records for fraud prevention, compliance, and financial reporting purposes. Stripe processes data in the United States and the European Economic Area; their processing is governed by Stripe's Privacy Policy. We ensure appropriate safeguards are in place for any international data transfers.

Hosting & Infrastructure

Our platform is hosted by third-party infrastructure providers. These providers act as data processors and are contractually bound to protect your data and process it only on our instructions.