Privacy policy

Last updated 13 August 2026

This policy explains what personal data Test Press handles, why, and what rights you have over it. It covers two different situations, and it is worth knowing which one you are in.

When we deal with you as a client, we decide how your data is used, so we are the controller. When your visitors send a demo or a booking enquiry through a site we host for you, you decide how that data is used, so you are the controller and we act as your processor.

1. Who we are

Test Press operates the platform described in our subscription agreement. For privacy questions, including any request about your data, reach us through the contact form at thetestpress.com/contact.

2. What we collect

Account data: your name, email address, and the sites you administer.
Billing data: your billing address, tax identifiers, and the last four digits and brand of your card. Full card numbers go directly to Stripe and never reach our systems.
Content you publish: releases, artists, events, images and text you upload.
Enquiries sent to your site: names, email addresses, messages, links and audio files submitted through demo or contact forms.
Technical data: IP addresses, browser type and timestamps in server and security logs.
Correspondence: emails you send us.

3. Why we use it, and our legal basis

We do not sell personal data. We do not use it to train machine learning models. We do not run advertising or third-party tracking on client sites.

To provide the service and host your site. Basis: performance of a contract.
To take payment and meet tax and accounting obligations. Basis: contract, and legal obligation.
To keep the platform secure and investigate abuse. Basis: our legitimate interest in a service that is not abused.
To contact you about your account, including failed payments and suspension. Basis: contract.
To show your site in our portfolio. Basis: our legitimate interest in demonstrating our work. Tell us and we will remove it.

4. Cookies and analytics

There are two different websites here. The sites we host for our clients, and Test Press's own marketing site at our domain.

The client sites we host set no cookies of their own and carry no analytics. If you embed a third-party player such as Spotify, SoundCloud, Beatport or YouTube, that provider may set its own cookies when a visitor interacts with it, under its own policy.

Our own marketing site currently carries no analytics either. If that changes, this section will say so before it happens.

The administration panel sets a small number of strictly necessary cookies to keep you signed in and to remember which site you are editing. There is no advertising cookie anywhere on the platform.

5. Who else processes data

We use a small number of providers. We will give notice before adding another.

Supabase: database, authentication and file storage.
Vercel: application hosting and content delivery.
Stripe: payment processing, billing and tax calculation.
Our email provider, for account and transactional email.

6. International transfers

We are based in the United States and our infrastructure providers operate globally, so personal data from the European Economic Area or the United Kingdom is transferred outside those areas.

Where that happens we rely on the European Commission’s Standard Contractual Clauses, and the UK Addendum where relevant, together with the safeguards our providers apply. You may ask us for details of the mechanism used for any specific transfer.

7. How long we keep it

Account and site content: for as long as your subscription is active.
After cancellation: at least 30 days, so you can request an export, after which we may delete it.
Billing records: for as long as tax and accounting law requires, typically seven years.
Security logs: a short period, normally measured in weeks.
Demo submissions: controlled by you, and deleted when you delete them.

8. Your rights

Subject to local law, you may ask for a copy of your data, correction of it, deletion of it, a portable export, restriction of processing, or you may object to processing we base on legitimate interests. Where we rely on consent, you may withdraw it at any time.

Reach us through the contact form at thetestpress.com/contact. We will respond within one month. If you are in the EEA or the UK you may also complain to your local supervisory authority, and if you are in California you have rights under the CCPA, including the right not to be discriminated against for exercising them.

If a request concerns data held on a client’s site rather than our own records, we will pass it to that client, who is the controller, and help them respond.

9. Children

The service is not directed at children under 16, and we do not knowingly collect their personal data. If you believe we have, tell us and we will delete it.

10. Changes

We will post any change here and update the date at the top. Where a change materially affects you, we will tell you by email.