1. Who we are

MaestroMeet ("we", "us", "our") is operated by John McNicholas under a Professional licence (Sole Establishment) issued by the Department of Economy and Tourism, Dubai, United Arab Emirates. We are the data controller for the personal data we collect through the MaestroMeet website.

You can contact us about anything in this policy, or to exercise any of your rights, at privacy@maestromeet.com. For general questions you can also use hello@maestromeet.com. Both reach the operator directly.

1.2 Our representatives in the EU and the UK

We are established in the United Arab Emirates and have no office in the European Union or the United Kingdom. Where a business outside those regions offers a service to people inside them, data-protection law can require it to appoint a local representative as a point of contact for individuals and for the supervisory authorities.

During the waitlist period we collect only a name, an email address and any optional answers you give us, we do not take payment, and we do not track you. We are taking advice on whether an appointment is required at this stage, and we will appoint a representative in the European Union and a separate representative in the United Kingdom, and name them here, before we open paid membership to people in those regions. In the meantime you can reach us directly at privacy@maestromeet.com, and you can complain to your own supervisory authority at any time (Section 8).

2. What this policy covers right now

MaestroMeet is in its pre-launch period. At this stage the website does one thing: it lets you join a waitlist so we can tell you when the platform opens. We are not yet taking payments, creating member accounts, or delivering the music platform. This policy describes the limited data we handle during the waitlist period.

When the full platform launches, this policy will be expanded to cover member accounts, subscriptions and payments, and we will publish the updated version before any of that begins.

3. The data we collect

3.1 Information you give us when you join the waitlist

Our waitlist sign-up is a form hosted by Brevo, our email platform. When you complete it, you give us your name, your email address, and your answers to the optional questions the form asks — for example which instruments you play, your playing level, and the kind of music you enjoy. Your responses are stored in your contact record in Brevo, which we access only through our own Brevo account. Brevo holds it as our processor, under its data-processing agreement, and does not use it for its own purposes.

We use double opt-in: after you submit the form we email you a confirmation link, and your details enter our waitlist only when you click it.

3.2 Messages you send us

If you email us, we keep your message and our reply so we can deal with your query.

3.3 Information collected automatically when you visit the site

• Technical and log data — such as your IP address, browser type, device type and the pages you view, collected by our hosting provider for security and to keep the site running.
• Cookies and similar technologies — see Section 10 and our separate Cookie Policy. The cookies this site sets are essential ones only, and we do not currently use any analytics tool.
• Embedded videos — our landing page includes teaser videos hosted on YouTube (Google). They are shown as still images with a play button, and nothing is loaded from YouTube when the page opens. Only if you press play is the player fetched from YouTube (its youtube-nocookie.com domain); at that point YouTube receives your IP address and details of the video you watched, and may then set cookies or similar storage on your device; that is governed by Google's own privacy and cookie policies. YouTube may itself place an advertisement inside a teaser video after you press play. That advertisement is chosen and served by Google under its own policies, we earn nothing from it, and it is the one form of advertising on this site that is not within our control. You can avoid all of this by not playing the videos.
• Analytics — we do not currently use any analytics or visitor-measurement tool on this website. If we introduce one during the waitlist period it will be a privacy-friendly, cookieless tool that does not identify or profile you, and we will name it here before it goes live.
• Advertising — we do not use an advertising pixel (such as the Meta/Facebook Pixel) on this website, and we do not share your activity on this site with advertisers. We may promote the waitlist on Facebook or elsewhere, but any such advertising runs entirely on those platforms and places no tracking code here. If that changes at launch, we will update this notice first and any such tracker will run only with your consent.

3.4 What we do not collect during the waitlist period

• Payment or card details (we are not taking payment yet).
• Special-category data (health, biometric, religious, political and similar), other than anything you might choose to put into an email to us.
• Any data about your playing — the platform is not yet live.

4. Why we collect it (lawful bases)

For people in the United Kingdom, the European Economic Area, and other regions with similar data-protection law, our lawful bases are:

• Consent — for adding you to the waitlist and emailing you about the launch. You give this consent by submitting the waitlist form and then clicking the confirmation link we email you (double opt-in), and you can withdraw it at any time (see Section 8).
• Legitimate interests — for keeping the website secure and working (technical and log data), for dealing with messages you send us, and for understanding how the site is used, should we introduce privacy-friendly analytics that does not identify you. We balance this against your rights and use the minimum data needed.
• Legal obligation — where we are required by law to keep certain records.

5. Who we share data with

We do not sell your personal data, and we do not share it with third parties for their own marketing. During the waitlist period we use a small number of service providers:

• Brevo (brevo.com) — our email platform. It hosts the waitlist form, stores your waitlist details, sends you the launch updates you asked for, and manages your unsubscribe.
• Kinsta — our website hosting provider, which processes technical and log data on our behalf.
• Google — provides the email service we use (Google Workspace), so any message you send us is stored there.
• Professional advisers (for example, a legal or accountancy adviser) — on a need-to-know basis and under confidentiality.

We do not currently use an analytics provider, so no information about your visit is sent to a third party for that purpose.

We may also disclose personal data where we are legally required to, or to establish, exercise or defend legal claims.

6. International transfers

We are based in Dubai, UAE, so when you join the waitlist your details come to us there directly. European and UK data-protection law still applies to us in full when we handle them, because it follows you rather than the business, and this policy and your rights in Section 8 are how we meet it.

Brevo is established in France and processes your waitlist details within the European Union. Some of our other providers (such as Google) operate from the United States and elsewhere, so data such as your email correspondence with us may also be processed in those countries. Google is certified under the EU-US Data Privacy Framework and its UK extension, which is the safeguard for that transfer. Where data is otherwise transferred to a country without an "adequacy" decision from the relevant authority, we rely on appropriate safeguards permitted under data-protection law, principally the Standard Contractual Clauses (for EU data) or the UK's International Data Transfer Agreement and Addendum (for UK data), built into our agreements with those providers. For more detail on a specific transfer, contact privacy@maestromeet.com.

7. How long we keep your data

• Waitlist details — until the platform launches and you have had the chance to join, or until you ask us to remove you, whichever comes first. If you do not become a member by the end of the launch campaign, we delete your waitlist details unless you have asked us to keep you informed of future news.
• Messages you send us — typically up to two years after your query is resolved.
• Technical and log data — for a short period for security and troubleshooting, then deleted or anonymised.

8. Your rights

Depending on where you live, you have some or all of the following rights over your personal data:

• Access — a copy of the data we hold about you.
• Rectification — correction of inaccurate or incomplete data.
• Erasure — deletion of your data (subject to any records we must keep by law).
• Restriction — to pause certain processing while a question is resolved.
• Portability — to receive your data in a common, machine-readable format.
• Objection — to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent — for the waitlist and launch emails, at any time, without affecting processing done before you withdrew.
• Complain — to your data-protection authority. In the UK this is the Information Commissioner's Office (ICO); in the EU it is your national authority; in the UAE it is the relevant authority under Federal Decree-Law No. 45 of 2021.

To exercise any right, email privacy@maestromeet.com. We will acknowledge promptly and respond within one month, as required by the UK GDPR, the EU GDPR and equivalent laws. There is no charge unless a request is clearly unfounded or excessive. We may need to confirm your identity first. California residents have additional rights under the CCPA/CPRA (which we apply voluntarily, as our size means the Act does not require it of us), including the right to know, to delete, and to opt out of the "sale" or "sharing" of personal information — we do not sell your data, and you can exercise these rights at the same address.

9. Security

We take reasonable technical and organisational steps to protect your data, including secure hosting, HTTPS/TLS encryption of data in transit, and access to your data limited to the operator and to the providers named in Section 5, each acting only on our instructions. No system is perfectly secure, but if a breach occurs that is likely to put your rights at risk, we will notify you without undue delay and the relevant authority within 72 hours where the law requires it.

10. Cookies

The cookies this website sets are essential ones only, needed for the site to work; the Cookie Policy lists the ones we know of and how we check for others. The teaser videos load nothing from YouTube until you choose to press play (see Section 3.3). We do not currently use any analytics tool, so no cookie-consent banner is used. We do not use advertising or cross-site tracking cookies. Full details are in our separate Cookie Policy.

11. Children's privacy

The MaestroMeet waitlist is for people aged 18 or over, and our advertising is set not to reach people under 18. When the platform opens, a person under 18 will be able to use it through a parent or guardian’s account, and the account holder will be the guardian. We do not knowingly collect the personal data of a child through the waitlist. If you believe a child has provided us with their details, contact privacy@maestromeet.com and we will delete them.

12. Changes to this policy

We may update this policy as the project develops — in particular, we will publish an expanded version before the full platform, member accounts and payments go live. The version and date at the top show the current version.

13. Contact

For any privacy question or to exercise a right, contact privacy@maestromeet.com. For general questions, hello@maestromeet.com. You may also complain to your data-protection authority (see Section 8).