How we handle your information.
This notice explains what Sonair collects when you use sonair.io, why we collect it, who else sees it and what you can ask us to do about it. It is written to be read, not filed.
- Last updated
- 18 August 2026
- Applies to
- sonair.io and our contact channels
- Questions to
- he***@****ir.io
Sonair Ltd, Liverpool.
We provide managed in-store radio and cloud digital signage to retail and leisure operators. For anything you send us through this website, Sonair Ltd is the data controller — the organisation responsible for deciding what happens to it.
- Company — Sonair Ltd, registered in England and Wales, company number 13506923
- Registered office — 49 Level One, Basecamp Liverpool, Jamaica Street, Liverpool, England, L1 0AH
- Contact — he***@****ir.io
What this notice covers.
This notice covers information we collect through sonair.io — when you fill in a form, email us, or simply read a page. It also covers the cookies this website sets in your browser.
It does not cover the personal data we handle on behalf of our clients as part of delivering their radio or signage service. That relationship works differently and is described in Data we hold for clients.
Four things, and nothing you did not hand over.
We do not buy contact lists, we do not run advertising pixels, and we do not build profiles of visitors. What follows is the complete list.
| What | Why we have it | Where it comes from |
|---|---|---|
| Contact form entries | To answer your enquiry and, if it goes somewhere, to carry on the conversation about working together. | Whatever you type into a form on this site — typically your name, email address, company and message. |
| Email correspondence | To reply to you, and to keep a record of what was agreed. | Emails you send us, and our replies. |
| Website analytics | To see which pages are read and which are ignored, so we can write better ones. | Google Analytics 4, and only if you accept analytics cookies. |
| Server logs | Keeping the site up and spotting attacks. Standard for any web server. | Automatically recorded by our hosting: IP address, browser type, page requested, time. |
No advertising or social media tracking pixels run on this site. We do not collect payment details through the website, and we have no reason to hold special category data such as health or ethnicity — please do not send it to us.
Why we are allowed to hold it.
UK data protection law requires a stated reason for every use of personal data. Ours are:
- Consent — analytics cookies. You choose in the banner, and you can change your mind at any time.
- Legitimate interests — replying to enquiries, keeping records of business conversations, and keeping the website secure. We think you would expect all three from a company you have contacted.
- Contract — where you become a client, handling the information needed to run your account.
- Legal obligation — where we have to keep records for tax or accounting.
Small files, plainly described.
A cookie is a small file a website stores in your browser so it can recognise the same browser on a later page or visit. Ours fall into three groups. Only the first is set without asking you.
| Group | What it does | Set without asking? |
|---|---|---|
| Essential | Remembers your cookie choice so the banner does not reappear on every page, and keeps you signed in if you are a Sonair administrator. | Yes — the site cannot work without them, and recording your choice is itself a requirement. |
| Analytics | Google Analytics 4 sets _ga and a related identifier to count visitors and see which pages are read. It tells us patterns, not who you are. |
No. Only if you accept. |
| Embedded video | Some pages embed YouTube videos. YouTube may set its own cookies when a video loads or plays. Those are Google's, not ours, and are governed by Google's privacy policy. | No — video embeds load only after you accept |
Who else handles it.
We do not sell data and we do not share it for marketing. A small number of suppliers process it on our behalf, under contract, and only on our instructions.
| Supplier | What they do for us | What they see |
|---|---|---|
| Microsoft | Email and business software | Anything you email us, and form submissions delivered to our inbox |
| OVHcloud | Server hosting for this website and our platform | Server logs, and form submissions in transit |
| Microsoft Azure | File and media storage | Stored audio and media files |
| Analytics, and video hosting through YouTube | Anonymised usage data, and video playback data if you accept |
We may also disclose information where the law requires it, or to professional advisers such as accountants and solicitors where necessary.
Where your data goes.
Our servers are located in the United Kingdom and the European Union, and we work with clients in the UK, Germany and the Netherlands.
Some of our suppliers are US-headquartered and may process data outside the UK. Where that happens, the transfer is covered by the safeguards UK law requires — the UK Extension to the EU–US Data Privacy Framework, or the International Data Transfer Addendum to the standard contractual clauses. You can ask us for details of the safeguards that apply to a particular supplier.
How long we keep it.
We keep information for as long as there is a reason to, and no longer.
| What | How long |
|---|---|
| Enquiries that go nowhere | 24 months from the last message |
| Correspondence with clients | For the life of the relationship, then six years for contractual and tax purposes |
| Analytics data | 14 months, set in Google Analytics |
| Server logs | 120 days |
What you can ask us to do.
Under UK GDPR you can ask us to:
- Show you what we hold about you, and give you a copy
- Correct anything that is wrong
- Delete it, where we have no continuing reason to keep it
- Restrict what we do with it while a question is being resolved
- Hand it over to you or another provider in a portable format
- Stop using it, where we are relying on legitimate interests
- Withdraw consent for analytics, at any time, without affecting anything that happened before
Email he***@****ir.io and we will respond within one month. There is no charge. We may need to confirm who you are first.
If we get it wrong.
Tell us first — most things are quicker to fix directly. Email he***@****ir.io and we will look into it.
You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113. You do not have to come to us first.
Data we hold on behalf of clients.
When we run in-store radio or digital signage for a business, we act as a processor rather than a controller — we handle limited data on that client's instructions, and they decide what happens to it. This is set out in the contract and data processing terms we agree with them, not in this notice.
In practice this is a small amount of operational information: named contacts at each site, login details for the platform, and technical records of what played where and when. It does not include information about members of the public visiting those venues.
We list customer Bluetooth tracking among our capabilities. No client currently uses it and we hold no data collected through it. If that changes, this notice will be updated before any collection begins.
Changes to this notice.
We update this page when what we do changes — a new supplier, a new service, a different way of handling something. The date at the top of the page always shows the current version. Where a change materially affects you, we will tell you directly rather than relying on you to notice.
Ask us anything about this.
If something here is unclear, or you want to know exactly what we hold about you, one email is all it takes.
