Privacy Policy

PART A — RECRUITMENT AND CONSULTING SERVICES

1. Information We Collect About Candidates and Professionals

In the course of our recruitment and talent consulting services, we may collect:

• Contact Information: Name, email address, phone number, and LinkedIn profile URL.
• Professional Information: Job title, current employer, work history, skills, and qualifications.
• Publicly Available Data: Information from professional networking platforms (e.g., LinkedIn) and other publicly accessible sources.
• Third-Party Sourcing Tools: We use recruitment sourcing tools, including Kaspr, to obtain professional contact details (such as business email addresses and phone numbers) from publicly available sources and professional directories.
• Communications: Records of emails, calls, and messages exchanged with us.
• Client-Provided Data: Information provided to us by our clients for the purposes of fulfilling recruitment briefs.

2. Lawful Basis for Processing

We process personal data in connection with our recruitment services under the following lawful bases:

• Legitimate Interest (Article 6(1)(f) UK GDPR): To identify, contact, and engage with candidates for recruitment opportunities. We have carried out a legitimate interest assessment and concluded that our processing is necessary and does not override individuals' rights.
• Consent (Article 6(1)(a)): Where we rely on your consent, for example when you opt in to receive job opportunities or marketing communications.
• Contract (Article 6(1)(b)): Where processing is necessary to fulfil a contract with you or to take pre-contractual steps at your request.
• Legal Obligation (Article 6(1)(c)): Where we are required to process data to comply with the law.

3. How We Use Recruitment Data

• To identify and contact potential candidates for job opportunities.
• To match candidates with suitable roles on behalf of our clients.
• To manage our client relationships and fulfil recruitment briefs.
• To maintain our candidate database for future opportunities.
• To comply with legal and regulatory obligations.

4. Data Sharing — Recruitment

We may share your personal data with:

• Clients: Your professional details will be shared with prospective employers only with your knowledge and, where appropriate, your consent before submission.
• Sourcing Tools and Platforms: We use third-party tools (including Kaspr) that process professional contact data. These tools act as independent controllers or processors as applicable.
• Service Providers: CRM systems, email platforms, and cloud storage providers who process data on our behalf under data processing agreements.
• Legal and Regulatory Bodies: Where required by law.

We do not sell personal data to third parties.

5. Recruitment Data Retention

• Active candidates: Data is retained for 2 years from last contact. We will reach out periodically to confirm you wish to remain on our database.
• Placed candidates: Data is retained for 6 years to comply with legal and contractual obligations.
• Opted-out individuals: Contact details are retained on a suppression list to ensure we do not contact you again.

6. Your Rights — Recruitment

If we have contacted you using data obtained through sourcing tools and you do not wish to hear from us:

• Reply to any communication with "unsubscribe" or "remove me."
• Email info@rockstars.ai with the subject line "Opt Out."

We will remove you from active outreach within 7 working days and add you to our suppression list.

PART B — WEBSITE (rockstars.ai)

7. Website Data Collection

When you visit our website, we may collect:

• Contact Form Submissions: Name, email address, and any information you choose to provide.
• Technical Data: IP address, browser type, device type, and pages visited.
• Cookies: We use essential cookies for site functionality. See our Cookie Notice for details.

PART C — POINT BLANK RADIO APPLICATION

8. App Data Collection

The Point Blank Radio app is a live radio streaming application. It does not require registration, login, or any personal details to use.

We collect:

• Listener Name (Optional): You may provide a display name for messaging. If none is provided, you appear as "Anonymous." This is not verified or linked to any account.
• Technical Data: IP address, device type, device model, operating system, OS version, and network connection type (WiFi or cellular), collected automatically for security, analytics, and streaming quality.
• Approximate Location: We use your IP address to determine your approximate location (country and city level only). We do not use GPS or request location permissions.
• Usage Data: Listening session data (start time, duration, activity status) and interaction with features.
• Messages and Reactions: If you message DJs through the app, we store the content, type, and session information. These are visible to on-air DJs and station staff.

9. What the App Does NOT Collect

• No email addresses, phone numbers, or account registration
• No precise GPS location
• No microphone or camera access
• No contacts, photos, or files from your device
• No advertising identifiers or cross-app tracking

10. Audio Streaming

The app streams live audio and supports background playback. We do not record audio from your device or access your microphone.

11. Third-Party Services — App

• Supabase: Cloud database for listener session data and messages.
• Sanity CMS: Schedule and DJ profile content.
• Instagram API: Displays our social media posts in the app.
• ipapi.co: IP-based geolocation for approximate listener location.

These providers have their own privacy policies.

PART D — GENERAL PROVISIONS

12. Data Security

We implement appropriate technical and organisational measures to protect personal data, including encryption, access controls, and secure data transmission (HTTPS).

13. International Transfers

Some of our third-party providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

14. Your Rights Under UK GDPR

Regardless of how we obtained your data, you have the right to:

• Access your personal data.
• Rectification of inaccurate data.
• Erasure ("right to be forgotten").
• Restrict processing.
• Data portability — receive your data in a portable format.
• Object to processing based on legitimate interest.
• Withdraw consent at any time where consent is the basis for processing.
• Lodge a complaint with the relevant supervisory authority.

15. Data Deletion

You may request deletion of all personal data we hold about you by emailing info@rockstars.ai with the subject line "Data Deletion Request."

Upon receiving a verified request, we will:

• Delete all personal data from our active systems within 30 days.
• For app users: delete all session records, messages, and reactions associated with your IP address.
• For recruitment contacts: remove your data from our candidate database and add you to our suppression list so we do not contact you again.

Anonymised, aggregated data that cannot identify you may be retained.

Backup copies will be permanently deleted within 90 days.

16. Children's Privacy

Our services are not directed at children under 13. We do not knowingly collect personal data from children under 13.

17. Changes to This Policy

We may update this policy from time to time. Changes will be posted on our website with an updated "Last Updated" date.

18. Contact Us