OPS Radio
Privacy & Cookies
Who we are
OPS Radio is operated by Oxford Private Studios Ltd (company number 16271033), registered in England and Wales at 20 Wenlock Road, London, England, N1 7GU. Oxford Private Studios is the data controller for personal data processed through this site. This notice covers OPS Radio-specific processing; our group-wide privacy policy at oxfordprivatestudios.com/privacypolicy applies to all our products and takes precedence on anything not addressed here.
What we collect
OPS Radio collects the information you submit through forms (song requests, shoutouts, and contact messages), including the name, message, and any track details you include. While you stream a station we increment per-day play counters against each track (track ID and the duration listened); no user identifier is recorded against these counts. Your IP address is briefly held in server memory for up to 60 minutes only to deduplicate repeat hits, and is never written to long-term storage. When you tap Buy we log the track you considered purchasing for recommendations and chart signals, again without storing a user identifier. If you complete a purchase or donate to an artist, we store the transaction record together with the Stripe session ID. Payments are processed by Stripe, so card details never reach our servers. If you sign in we record your account profile (Firebase UID, email, optional display name) and set an authentication cookie.
Lawful bases for processing
We process personal data under one or more of the following bases under UK GDPR: Contract, to fulfil purchases, donations, and account services you request; Legitimate interests, to operate and secure the service and produce non-identifying chart signals; Consent, for advertising cookies and any optional marketing; and Legal obligation, to comply with tax, accounting, and lawful requests from authorities.
Cookies
Strictly necessary cookies, namely the Firebase Authentication session cookie (__session), are set when you sign in and are required to keep you signed in. We do not currently set preference or first-party analytics cookies. Advertising cookies set by Google AdSense and Google’s Funding Choices consent prompt are only stored after you grant consent through the prompt described below. The authentication cookie persists for up to 14 days, after which you will be asked to sign in again. Advertising cookies follow Google’s stated retention.
Third-party advertisers
OPS Radio uses Google AdSense to show advertisements. Google and its partners may use cookies to serve ads based on your prior visits to this website or other websites. You can opt out of personalised advertising at adssettings.google.com. For more information about how Google uses data when you use our partners’ sites or apps, see Google’s policies.
Manage consent
We use Google’s Funding Choices consent prompt to ask permission before any personalised advertising or analytics cookies are set. You can review or change your decision at any time by clearing this site’s cookies in your browser settings, and the prompt will reappear on your next visit.
Sharing your data
We share personal data only with the processors required to operate the service: Google (Firebase Authentication, Firestore, Cloud Functions, Cloud Storage, Hosting, AdSense, and Funding Choices) for the underlying infrastructure, content delivery, and advertising; and Stripe for processing purchases and donations. We do not sell your personal data. Additional processors used across other Oxford Private Studios products are listed in the group privacy policy linked above.
International transfers
Some of our processors (notably Google and Stripe) operate outside the UK and EEA. Where personal data is transferred internationally, we rely on the Standard Contractual Clauses and the safeguards set out in the group privacy policy.
Retention
We retain personal data only for as long as necessary for the purpose it was collected. Account profiles persist until you ask us to delete them; transaction records are kept for the period required by tax and accounting law; the authentication cookie expires after 14 days; in-memory rate-limit entries are cleared within 60 minutes. Anything not covered here follows the retention rules in the group privacy policy.
Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict processing of, port, and object to processing of your personal data, and to withdraw consent at any time. To exercise any of these rights, email dpo@oxfordprivatestudios.com. If you are unhappy with how we handle your request, you can complain to the UK Information Commissioner’s Office at ico.org.uk.
Contact
For any privacy enquiry, data subject access request, or to exercise the rights above, contact our Data Protection Officer at dpo@oxfordprivatestudios.com. Postal: Oxford Private Studios Ltd, 20 Wenlock Road, London, England, N1 7GU.
