Privacy notice

This site (the9075.com) is operated by The 9075. References to “we”, “us” or “our” below mean The 9075. If you have any questions about this notice or about how we handle your data, contact us at info@the9075.com.

We only collect personal data when you actively give it to us:

• Contact form submissions — when you send us a message via the contact form on the home page, we collect the name, email address, and message you provide.
• Server logs — when you visit any page or submit the form, our server records the IP address you connected from and the browser user-agent string. This is used for abuse prevention and rate limiting only.

We do not use third-party analytics, advertising trackers, or any other behavioural tracking on this site. There are no third-party cookies.

We don't set any cookies on the public side of this site. No analytics cookies, no advertising cookies, no third-party cookies. You won't see a cookie banner because there's nothing to consent to.

The site does set a small number of functional cookies in the back-office area (/admin) for authenticated staff — they're used to keep the sign-in active and remember interface preferences. As a regular visitor, you'll never receive these.

• Contact form data — to read and respond to the message you sent us. Lawful basis: our legitimate interest in being able to reply to people who get in touch.
• Server logs — to detect and block automated abuse of the site (e.g. spam submissions, brute-force login attempts on the admin area). Lawful basis: legitimate interest in keeping the site secure.

Only the band's authorised admins (a small fixed list of email addresses) can read contact-form submissions through the back-office. We do not sell, share, or rent your data to anyone.

To run this site we rely on a small number of infrastructure providers, who process data on our instructions only:

• Vercel — hosting
• Google Firebase — data storage (EU region)
• Upstash — rate limiting
• Resend — email delivery when we reply to you

All are bound by GDPR-compliant data processing agreements and don't use the data for their own purposes.

We keep contact-form submissions until an admin manually deletes them or until the data is no longer needed for the purpose it was collected. There is no automatic expiry.

Server logs (IP, user agent) are kept for the lifetime of any given submission they relate to. Older request logs handled at the platform level (Vercel, Upstash) follow each provider's own retention schedule.

Under UK GDPR you have the right to:

• Ask for a copy of the personal data we hold about you.
• Ask us to correct or delete it.
• Object to our use of it where we're relying on legitimate interest.
• Withdraw consent (where consent is the lawful basis).
• Lodge a complaint with the Information Commissioner's Office (ICO) if you think we've mishandled your data.

To exercise any of these rights, email us at info@the9075.com.

If we change this notice we'll update the “Last updated” date at the top. Material changes (e.g. new types of data collected) will be flagged more prominently.