Last updated: April 2025
This Privacy Notice for Tiny Monkey Studios (‘we‘, ‘us‘, or ‘our‘), describes how and why we might access, collect, store, use, and/or share (‘process‘) your personal
We take your privacy seriously and are committed to protecting the privacy of your personal data. We put great effort into making sure that the personal data we process is safe and used properly.
Personal Data is information that, alone or in combination with other information, could be used to identify you. Your name, address or photograph, video or voice can all be considered personal data.
This Privacy Policy explains our data practices, choices available to you regarding use of, access to, or how to update and correct your personal data and other information in connection with your use of our website steveallsworth.com and our services (referred to in this policy as services).
We are not responsible for the privacy policies or privacy practices of clients or other third parties, including YouTube or other social media platforms.
By using our services, you consent to policies and practices described in this Privacy Policy. If you disagree with any of the practices described in this Privacy Policy, you should not use our services. If you still have any questions or concerns, please contact us at info@steveallsworth.com.
Personal Data That You Voluntarily Provide to Us
We mainly collect personal data directly from you when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. For example, you voluntarily provide us with personal data when you complete a web form, email us directly, request a free trial of our Services or engage in any of our workshops or courses.
The types of personal data that we collect vary based on the services we offer, but generally include your full name, email address, address and phone number, and other information that you voluntarily give to us.
When you purchase any of our services through our website, we will collect the information that you elect to upload to your account, which may include additional personal information, such as your image, voice or video. Not all of that information will necessarily be personal information.
Information Received from Other Sources
We may also collect information that is provided, posted or uploaded by users to the Steve Allsworth Instagram page, Steve Allsworth Facebook Group, or the Steve Allsworth YouTube Channel which may include personal information. We do not control the content that users post to our user group. You should carefully consider whether you wish to submit personal data and whether you wish to make your profile available to other users, and you should tailor any content you submit appropriately. You should also review any additional terms and conditions that may govern your use of those services.
We may receive information about you from publicly available and third-party databases or services that provide information about business, people or companies, and combine this data with information we already have about you. This may help us in our delivery of services to you, or help us to update, expand and analyse our records, identify new customers, and provide services that may be of interest to you. We use Google Workspace, which means that your social media linked profiles and other Google information may be linked to other information we hold about you.
Where you are not an existing customer or client and we have collected your information from a third party instead of directly from you, we will obtain your consent before contacting you, if required by the law of the country in which you are located.
Automatically Collected Data
As you interact on our website, we may collect information about your computer or device and visits to one or more other websites (automatically collected data) through cookies, web beacons and other technologies, Internet Protocol address (IP address) tracking/URL tracking, and other tools (collectively, tracking technologies). The types of automatically collected data collected on our website using tracking technologies include the search terms you used, new or returning user information, browser information, computer or device type, operating system, internet service provider, website usage, referring/exit pages, platform type, date/time stamp, number of clicks, and ads viewed. Please see the Tracking Technologies section below.
We use the personal data we collect from you (unless otherwise restricted by law) to:
Marketing
We also use your contact details to deliver information that we think may be of interest to you. If you do not wish to receive marketing materials, or emails from Steve Allsworth you can tell us your preferences by contacting us using our details provided to you below. You may also submit a contact form through the website or unsubscribe from our marketing communications by clicking on the ‘unsubscribe’ link located on the bottom of each email we send to you.
Where required by the applicable law (for example, if you are an EU Data Subject), we will send you marketing information or notifications only with your consent, which was given at the time you provided us with the personal data. If you do not provide us with your consent to the processing of your Personal Data for this purpose, we will not send you this information, (please refer to the EU Data Subjects section below for information on your rights). For California residents, please consult the United States – California residents section below.
With your permission, we may also use the information you provide to us as a testimonial in any of our promotional materials.
Communications
If you communicate with us via email, using our web forms, or any other form of communication, we may keep the communication and the information it contains. We may use the information for business purposes, including responding to your inquiry, and other marketing purposes (please read the Marketing section above for more information on our marketing practices and how to opt out or unsubscribe).
URL and IP Address
We collect information about your IP addresses and your utilisation of our website, to help us improve our website to better suit your needs. We may use information about your IP address to help diagnose problems with our server, administer our website, analyse trends, track visitor movements, and gather information that assists us in identifying your preferences, as well as other visitor preferences. We also may use your IP address to enhance our security and investigate an actual or potential security incident.
For EU Data Subjects, the way we use your information is necessary for our legitimate interests in understanding how our website and our services are being used by you, to improve your experience and ensure network and information security. For more information about what we mean by legitimate interests, and when we may process personal data for our legitimate interests, please see the EU Data Subjects section below.
Anonymised & Aggregated Data
We may also compile, anonymise and/or aggregate your personal data and other information collected about you, as described in this Privacy Policy. We may also use such anonymised and/or aggregated data for our business purposes. This includes disclosing such data to our partners, service providers, advertisers and/or other third parties for marketing or promotional purposes. This aggregate information does not identify you and we may keep this information indefinitely.
For EU Data Subjects, this use of anonymised and/or aggregated data is necessary for our legitimate interests in understanding how to improve the services we offer.
Service Data
Our contract with you governs our relationship with you, so any information we receive about you during this process, will only be used for the purposes of performing the services you agreed with us.
In Short: We may share information in specific situations described in this section and/or with the following third parties.
We only disclose personal data that we collect in accordance with the terms in this section.
We share your personal data with third parties who provide services to us. We expressly authorise these third parties to process your personal data on our behalf, for the purpose of providing these services to us. We share your personal data with the following service providers:
Providers helping us fulfil subscription services (eg. Active Campaign)
Providers of research and analytics services, including Google Analytics
Providers of cloud computing infrastructure services (eg. Google Cloud Platform)
We may also disclose personal data to third parties in the following circumstances:
if you request or authorise it
when required by law – we will inform you who is requesting your data, their purpose, and if time permits, obtain your consent
the information is provided:
(a) to comply with the law
(b) to enforce an agreement we have with you
(c) to protect our rights, property or safety, or the rights, property or safety of our employees or others
(d) to investigate fraud or
(e) to respond to a government request or to lawful requests by public authorities, including to meet national security or law enforcement requirements
to address emergencies or acts of God
to address disputes, claims, or to persons holding a legal or beneficial interest
if we are involved in a merger, acquisition, financing due diligence, reorganisation, bankruptcy, receivership, sale of company assets, or transition of service to another provider, in which case your personal data and other information may be transferred to a successor or assignee.
We collect, store and process the information from our website
We store your information in the cloud and use third party providers, such as Active Campaign and Google Cloud Platform (GCP). We do not designate the country for storage of our data and your data may be stored outside your country.
The applicable data privacy and data protection laws may offer less protection than the laws in your country. By using our services, the website, or sending us your personal data, you agree to the transfer of your personal data as described in this Privacy Policy. If you do not agree to such cross-border transfers of your personal data, please do not submit it through our website.
We aim to only work with respected third-party providers who promote their intention to protect personal information and will provide a reasonable level of data protection, even if we are unable to verify that it is compliant with the EU General Data Protection Regulation for the transfer of Personal Data collected in the European Economic Area and Switzerland.
We use interfaces with social media websites or platforms that are owned and/or controlled by third parties, such as YouTube, Facebook, Instagram, LinkedIn and others (Social Media Sites). If you are a member and choose to “like” or share information through any social media sites, the interfaces on our website may allow the social media site to connect your website visit to your personal data. Any information you share with the social media sites will be governed by the specific privacy policies and terms of service of the social media sites and not by this Privacy Policy. Before you interact with our pages on a social media site, you should review the privacy policies of that social media site.
Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.
Google Analytics
We may share your information with Google Analytics to track and analyse the use of the Services. The Google Analytics Advertising Features that we may use include: Google Analytics Demographics and Interests Reporting. To opt out of being tracked by Google Analytics across the Services, visit
https://tools.google.com/dlpage/gaop
You can opt out of Google Analytics Advertising Features through Ads Settings and Ad Settings for mobile apps. Other opt out means include:
http://optout.networkadvertising.org/
For more information on the privacy practices of Google, please visit the Google Privacy & Terms page.
API data
We connect software to your YouTube Channels and use API collected data for analysis. API collected data does not contain personal information. That data may reference a ‘point in time’ on a video displayed on your YouTube Channel and extract a snippet of that video. That ‘point in time’ of the video may contain incidental personal information not intentionally collected, which is necessary for the purpose of completing an analysis of the performance of your YouTube Channel and delivering the services to you.
We acknowledge that you have the right to access your personal data and we will allow you to access, correct, amend, or delete any inaccurate data. If you make a request to us in writing to remove data, we will respond within a reasonable timeframe. You cannot request that your data be identified or extracted from anonymised and/or aggregated data.
Upon request, we will advise you if we hold any of your personal data. You may access, update or correct your personal data or remove it from our system by contacting us in writing as indicated under the Contact Us section below. Requests typically receive a response within thirty (30) days. If access cannot be provided within that period, we will provide you with an estimated date. If we deny access, we will explain our reasons to you at the time.
If you are an EU Data Subject, please see the EU Data Subject section below for information on your rights in relation to the Personal Data we hold about you.
In Short: We keep your information for as long as necessary to fulfil the purposes outlined in this Privacy Notice unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.
Children
We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at info@steveallsworth.com.
Conditions of Use
By using our services, you agree to the terms and conditions contained in this Privacy Policy and other terms and conditions published by us through this website or provided directly to you, collectively referred to as ‘terms’. If you do not agree to any of these terms and conditions, you should not use our services. You agree that any dispute over privacy or the terms contained in this Privacy Policy and terms will be governed by the laws of England and Wales. You also agree to arbitrate any such dispute in London, United Kingdom, and to accept any limitation on damages contained in any agreement we may have with you.
Changes to the Privacy Policy
We may update this Privacy Policy from time-to-time. We reserve the right to amend the Privacy Policy at any time, for any reason, and may do so by posting a new version online. Your continued use of our services, and/or continued provision of your personal data will be subject to the terms of the then-current Privacy Policy. We encourage you to periodically review this page for the latest update on our privacy practices. The last updated date of our Privacy Policy is listed under this policy heading for ease of reference.
Scope
This section applies if you are an individual located in the European Union (EU) (EU Data Subject). For these purposes, reference to the EU also includes the European Economic Area countries of Iceland, Liechtenstein and Norway and, where applicable, Switzerland.
Data Controller
Tiny Monkey Studios is the data controller for the processing of your personal data.
Subject to applicable law, you have the following rights in relation to your personal data:
You may exercise your rights by contacting us in writing using the Contact Us section below.
Legitimate Interest
Legitimate interests refer to the way we conduct and manage our interests. For example, we have a legitimate interest in processing your personal data to analyse how our websites and our products and services are being used by you, and to ensure network and information security, as described in this Privacy Policy.
When we process your personal data for our legitimate interests, we make sure to consider and balance any potential impact on you, and your rights under data protection laws. Our legitimate interests do not automatically override your interests. We will consider the impact of our interests upon your interests and your consent regarding your personal data. You have the right to object, in writing, to processing your data that is based on our legitimate interests. For more information on your rights, please see the Your Rights section above.
Data Transfers
Wherever possible, we prioritise partnering with respected third-party providers who choose a higher level of data protection and advise us that they take important steps to protect your personal information. This is even if we are unable to verify that it is compliant with the EU General Data Protection Regulation for the transfer of Personal Data collected in the European Economic Area and Switzerland.
Our Security Measures to Protect Your Personal Data
We are committed to taking reasonable efforts to securing your personal data information. We use a variety of security and procedures to help protect against unauthorised access of personal data. We restrict access to personal data at eBassGuitar. We will treat your personal data with the greatest respect.
We cannot guarantee or warrant the security of any information you transmit to us, or to or from our online products or services. eBassGuitar has no responsibility or liability for the security of information transmitted via the internet. If you have questions about this Privacy Policy or the security of your personal data, please contact us using the Contact Us section below.
We retain your personal data for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes and enforce our agreements.
Inapplicability of Privacy Policies of Any Linked Websites or Other Third Parties
This Privacy Policy only addresses our use and disclosure of your personal data. We encourage you to be aware that when you go to another website you should carefully read their privacy policy.
We are responsible for the processing of personal data received from you, under each Privacy Shield Framework, and subsequently transferred to a third-party acting as an agent on our behalf. eBassGuitar complies with the Privacy Shield Principles for all onward transfers of personal data from the EU and Switzerland, including the onward transfer liability provisions.
Tiny Monkey Studios is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
If you have an unresolved privacy or data use concerns that we have not addressed satisfactorily, please contact our U.K.-based third-party dispute resolution provider (free of charge) at https://www.financial-ombudsman.org.uk/ . Under certain conditions, more fully described on the Privacy Shield website [https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint], you may be entitled to binding arbitration when other dispute resolution procedures have been exhausted.
This section provides additional details about the rights of Californian consumers under the California Consumer Privacy Act (CCPA).
How We Collect, Use, and Disclose your Personal Information
The section, Our Collection of Your Personal Data describes the personal information we may have collected over the last 12 months, including the categories of sources of that information. We collect this information for the purposes described in the How We Use Information section. We share this information as described in the Disclosure of Information section.
Your CCPA Rights and Choices
As a Californian consumer and subject to certain limitations under the CCPA, you have choices regarding our use and disclosure of your personal information:
Exercising the right to know
You may request, up to twice in a 12-month period, the following information about the personal information we have collected about you during the past 12 months:
Exercising the right to delete
You may request in writing that we delete the personal information we have collected from you, subject to certain limitations under applicable law.
Exercising the right to opt-out from a sale
We do not use, share, rent or sell your personal data for interest-based advertising, except for the services you have engaged us to do. Our website and services do not respond to Do Not Track requests.
Non-discrimination
The CCPA provides that you may not be discriminated against for exercising these rights.
If you have questions or comments about this notice, you can email us at info@steveallsworth.com
