This privacy policy is intended to show you how and what personal data I collect and process as Thea Gilmore including data you may provide when signing up either physically or electronically to my mailing list, purchasing music or merchandise through Bandcamp or downloading music through the Noisetrade platform.

This website is not intended for children and I do not knowingly collect data relating to children.

Please make sure you read this privacy policy on a regular basis so that you remain fully aware of how and why your data is used.


Third party Links:

I do not use third party links on this website and therefore, no data is available for collection by a third party.



Identity data: This includes first name and last name if you choose to provide it.

Contact data: This means email address. I do not collect or store any other form of contact data.

Geographical data: This means geographical location (country) and/or address.

Transaction data: this means when and where you signed up to my mailing list.

Marketing and communication data: This means your preference in email formatting and any other communication preferences you may have expressed.

I, as Thea Gilmore operating the Thea Gilmore mailing list, collect and hold no other data from any other source.



Your name and email address will have been collected via online sign up forms, physical sign up forms at gigs and concerts and through music platforms such as Bandcamp and Tunecore.

Bandcamp: Only when a purchase of my music has been made.

Tunecore: As per the Tunecore user agreement, when a download has been performed in which the sharing of email address has been officially consented to.



I will never share your data with any third party under any circumstances unless required to by law.



I will only use your personal data when the law allows me to. Most commonly:

Marketing: To contact you about upcoming releases and events pertaining to Thea Gilmore.

Order fulfilment: To fulfil the contract entered into when you order a physical merchandising product.

When I need to comply with a legal or regulatory obligation.


You have the right to withdraw consent at any time by clicking the unsubscribe link at the bottom of any email you receive from me. Your data will then be permanently removed from my database.



I do not profile my mailing list subscribers and do not, at this time, target subscribers geographically.

I will only send electronic marketing emails to list subscribers or those who have bought/downloaded content from me.



You can ask me to stop sending you marketing messages at any time by using the opt out links at the bottom of any marketing email.


Where you opt out of receiving these marketing messages, this will not apply to personal data provided to me as a result of a product/service purchase on Bandcamp or any future music buying/sharing platform, or related correspondence, and I will continue to process such data in accordance with this Privacy Policy and only ever as permitted by law.



You have rights under UK data protection laws in relation to your personal data.

You have the right to:

Request access to your personal data (commonly known as a “data subject access request”): This enables you to receive a copy of the personal data I hold about you and to check that I am lawfully processing it.

Request correction of the personal data that I hold about you: This enables you to have any incomplete or inaccurate data I hold about you corrected, though I may need to verify the accuracy of the new data you provide to us.

Request erasure of your personal data: This enables you to ask me to delete or remove personal data where there is no good reason for me continuing to process it for example where you consider that I do not need it any longer for the purposes for which I originally collected it as explained to you in this Privacy Policy, where you have withdrawn your consent to my using it and I had relied on that consent according to this Policy, where you consider that I cannot show a ‘legitimate interest’ in continuing to process it and I have relied on that legitimate interest to process it as explained to you in this Policy . 

You also have the right to ask me to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where I may have processed your information unlawfully or where I am required to erase your personal data to comply with local law. Note, however, that I may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Object to processing of your personal data where I am relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where I am processing your personal data for direct marketing purposes.

Request restriction of processing of your personal data. This enables you to ask me to suspend the processing of your personal data in the following scenarios: (a) if you want me to establish the data’s accuracy; (b) where my use of the data is unlawful but you do not want me to erase it or (c) where you need me to hold the data even if I no longer require it as you need it to establish, exercise or defend legal claims.

Request the transfer of your personal data to you or to a third party. I will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for me to use or where I used the information to perform a contract with you.

Withdraw consent at any time where I am relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

If you wish to exercise any of these rights, please CONTACT ME.


You will not have to pay a fee to access your personal data (or to exercise any of the other rights). 


I may need to request specific information from you to help me confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. I may also contact you to ask you for further information in relation to your request to speed up my response.


Legitimate Interest means the interest of my business in conducting and managing my business to enable me to give you the best service/product and the best and most secure experience. 

I make sure I consider and balance any potential impact on you (both positive and negative) and your rights before I process your personal data for my legitimate interests. I do not use your personal data for activities where my interests are overridden by the impact on you (unless I have your consent or am otherwise required or permitted to by law).