Last Updated: 8 June 2026
1. Important notice
This Privacy Policy explains how HTS (Scotland) Ltd trading as Assai Records (“we”, “us”, “our”) collects, uses, stores and protects your personal data.
We are the data controller of your personal data.
We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
We are committed to protecting your privacy and ensuring transparency about how your data is used.
2. Who We Are
Company: HTS (Scotland) Ltd t/a Assai Records
Email: support@assai.co.uk
Website: Assai Records
For any questions about this Privacy Policy or your personal data, please contact us using the details above.
3. Personal Data We Collect
We may collect and process the following categories of personal data:
Identity Data
- Name
- Username (if applicable)
Contact Data
- Email address
- Telephone number
- Billing and delivery address
Transaction Data
- Order history
- Products purchased
- Payment confirmation (processed securely via third-party providers)
Event Data
- Event bookings and ticket information
- Attendance records
- Accessibility requirements (where provided)
Communication Data
- Customer service enquiries
- Emails, messages, and correspondence
- Survey responses and feedback
Technical Data
- IP address
- Browser type and version
- Device information
- Operating system
Usage Data
- Website browsing behaviour
- Pages viewed
- Interaction data
Event Media Data
- Photographs and video recordings taken at events where applicable
4. How We Collect Your Data
We collect personal data when you:
- Place an order or purchase tickets
- Register for or attend an event
- Contact us directly
- Subscribe to marketing communications
- Use our website
- Enter competitions or surveys
We may also receive data from:
- Payment processors
- Delivery providers
- Ticketing and event systems
- Analytics and technology providers
5. How We Use Your Personal Data
We only process your personal data where we have a lawful basis under UK GDPR.
5.1 CONTRACT PERFORMANCE
We use your data to:
- Process orders and payments
- Deliver goods
- Manage ticket sales and event entry
- Provide customer support
- Handle refunds in line with our Terms and Conditions
5.2 LEGITIMATE INTERESTS
We may use your data to:
- Improve our website, services, and customer experience
- Respond to enquiries and complaints
- Maintain internal records
- Prevent fraud and misuse
- Organise and manage events effectively
Where we rely on legitimate interests, we ensure your rights do not override ours.
5.3 LEGAL OBLIGATIONS
We may process your data to:
- Comply with tax and accounting requirements
- Respond to lawful requests from authorities
- Prevent and detect fraud
- Enforce legal rights
5.4 MARKETING COMMUNICATION
We may send you marketing communications where:
- You have given consent, or
- You are an existing customer and we are permitted to contact you about similar products or events (soft opt-in)
All marketing includes a clear opt-out option.
You may withdraw consent or unsubscribe at any time.
We only send marketing relating to similar products, releases, or events, unless you explicitly agree otherwise.
5.5 WEBSITE ANALYTICS AND COOKIES
We use analytics tools and cookies to understand website usage and improve performance.
Non-essential cookies are only used with your consent.
5.6 EVENTS AND EVENT MEDIA
Where you attend or participate in an Assai Records event, we may:
- Process your booking and attendance information
- Use accessibility information to provide appropriate support
- Capture photographs or video recordings at events for promotional and marketing purposes
Where we rely on legitimate interests for event photography or filming, we ensure this does not override your rights. You may object to being included in promotional photography in certain circumstances by contacting us.
5.6 NO AUTOMATED DECISION-MAKING
We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.
6. Cookies
Our website uses cookies and similar technologies.
Cookies are small files stored on your device that help our website function and improve your experience.
6.1 TYPES OF COOKIES WE USE
Strictly Necessary Cookies
- Required for core website functionality (e.g. checkout, login)
- Always active
Analytics Cookies
- Used to understand website usage
- Only enabled with your consent
Functional Cookies
- Remember user preferences
- Used where necessary for site functionality
Marketing Cookies
- Used to measure advertising performance
- Only enabled with your consent
6.2 COOKIE CONSENT
When you first visit our website, you will be given the option to:
- Accept all cookies
- Reject non-essential cookies
- Manage your preferences
Non-essential cookies are not set unless you provide consent.
You may withdraw consent at any time via browser settings or our cookie tool.
7. Sharing Your Personal Data
We may share your data with trusted third parties, including:
- Payment processors
- Delivery and logistics providers
- Ticketing and event systems
- IT hosting and infrastructure providers
- Email and marketing platforms
- Analytics providers
- Professional advisors (legal, accounting, insurance)
We do not sell your personal data.
All third parties are required to process your data securely and only for specified purposes.
8. International Transfers
Some service providers may process your data outside the United Kingdom.
Where this occurs, we ensure appropriate safeguards are in place, including:
- UK adequacy regulations, or
- UK-approved Standard Contractual Clauses, or
- Data processing agreements with suppliers
9. Data Retention
We retain personal data only for as long as necessary:
- Orders and transactions: up to 6 years (legal and tax requirements)
- Customer service records: up to 3 years
- Marketing data: until you withdraw consent or unsubscribe
- Event data: up to 2 years after the event
- Website analytics: according to provider retention policies
We may retain data longer where required for legal claims or obligations.
10. Data Security
We use appropriate technical and organisational measures to protect your data, including:
- Secure servers
- Access controls
- Encryption where appropriate
- Regular security monitoring
No system can be guaranteed 100% secure, but we take reasonable steps to protect your data.
11. Your Rights
You have the following rights under UK data protection law:
- Right of access to your personal data
- Right to correction of inaccurate data
- Right to erasure (in certain circumstances)
- Right to restrict processing
- Right to object to processing
- Right to data portability
- Right to withdraw consent
- Right to complain to the ICO
12. Complaints
If you are unhappy with how we use your personal data, please contact us first so we can resolve the issue.
You also have the right to complain to the:
Information Commissioner’s Office (ICO)
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
13. Refunds and Terms
Refund eligibility, cancellation rules, and ticket conditions are governed by our Terms and Conditions of Sale and Event Terms.
14. Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for their privacy practices. Please review their policies separately.
15. Changes To This Policy
We may update this Privacy Policy from time to time.
Any updates will be posted on this page with a revised “Last Updated” date.