1BURO

Legal / Privacy notice, United Kingdom

Privacy notice, United Kingdom

Last updated 2026-07-14

This notice supplements the Privacy Policy for users in the United Kingdom, under the UK GDPR and the Data Protection Act 2018.

Controller

The operator of 1BURO (contact: hello@1buro.app) is the controller. Where an artist uses 1BURO to run their own newsletter or store their own contacts, the artist is the controller of that data and 1BURO is their processor.

The same bases as in the EU notice, under the UK GDPR: contract for account data and your content, legitimate interests for security and error logs, and consent for newsletter subscriptions (withdrawable at any time via the unsubscribe path in every mailing). We do not carry out automated decision-making or profiling.

Your rights

Under the UK GDPR you have the rights of access, rectification, erasure, restriction, data portability, and objection. The app covers most of these directly, edit anything, export your complete account as a portable archive, delete your account. For anything else, write to hello@1buro.app; we respond within one month.

You can complain to the Information Commissioner's Office (ICO): ico.org.uk, or by phone on 0303 123 1113. We'd appreciate the chance to resolve your concern first, but you can go to the ICO at any time.

International transfers

Our hosting and AI providers (Render, Anthropic, Cloudflare) process data in the United States. Transfers rely on the safeguards recognised under UK law: the UK Extension to the EU–US Data Privacy Framework (the "UK–US Data Bridge") where the provider holds the certification, and the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses otherwise. Copies of the relevant safeguards can be requested at hello@1buro.app. If the account owner configures off-site backup, data also flows to the destination they chose.

Retention

As described in the Privacy Policy: for the life of the account, plus the backup cycle; statutory retention duties, where they apply, are honoured and then the data is erased.