Privacy Policy
Last updated: [DATE OF PUBLICATION] (draft of 7 October 2026)
Stream & Rise is a coaching programme for independent musicians run by two independent professionals who work together. This policy explains what personal information we collect through streamandrise.com, why, how long we keep it, who we share it with, and the rights you have. If anything is unclear, write to hello@streamandrise.com.
1. Who is responsible for your information
Stream & Rise is not a company. It is run by two independent providers, each of whom contracts directly with you for their own session:
- Provider 1: [LEGAL NAME: Byron Baron / BtheMusic!], [ADDRESS], Canada.
- Provider 2: [LEGAL NAME: Camille Jamet], [ADDRESS], France.
For the information you send through the application, lead-magnet and quick-question forms, both providers decide together why and how it is used. Under the GDPR they act as joint controllers (Article 26). Their arrangement sets out who answers your requests: you can contact either of them, or both at hello@streamandrise.com, and the request will be handled. [LEGAL REVIEW: written joint-controller arrangement between the two providers to be signed.]
Once you book and pay for a session, each provider is the sole controller for the information needed to deliver and invoice their own session.
Person in charge of the protection of personal information (Quebec Law 25): Byron Baron, reachable at hello@streamandrise.com.
2. What we collect
Information you give us
- Application form: your name, email, artist or project name, a link to your music or main profile, country, preferred session language, your current website, YouTube, Instagram and TikTok audience ranges, how often you release and post, your main obstacle, the stage you think you are at, an optional free-text answer, your budget readiness, and your consent choices.
- Free audit form: your first name, email and marketing consent.
- Quick-question form: your name, email, your message and your consent.
- Emails and calls: whatever you choose to tell us when we write to each other or speak on the 15-minute call.
Information collected automatically
- Form context: the page language, the result of the stage quiz if you used it, and campaign tags (utm_source, utm_medium, utm_campaign) if the link you followed contained them.
- Technical data: IP address, browser type and request logs kept by our host for security and to keep the site running.
- Cookies: see our Cookie Policy. Only strictly necessary cookies load before you consent.
We do not ask for, and ask you not to send, sensitive information (health, political opinions, and so on). The site is not meant for people under 16.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Read your application, decide whether the programme fits, reply to you and arrange the call | Steps taken at your request before entering a contract (Art. 6(1)(b)) |
| Deliver and invoice your sessions | Performance of the contract (Art. 6(1)(b)); legal obligations for accounting (Art. 6(1)(c)) |
| Send the free audit and occasional practical emails | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Answer a quick question | Steps taken at your request (Art. 6(1)(b)) |
| Keep the site secure and prevent spam | Our legitimate interest in a working, secure site (Art. 6(1)(f)) |
In Canada, we rely on your consent, given when you submit a form, for the purposes stated at the time of collection (PIPEDA and the Quebec Act respecting the protection of personal information in the private sector). Marketing emails are only sent with your express consent, as required by Canada’s Anti-Spam Legislation (CASL).
4. How long we keep it
- Applications that do not lead to a booking: 12 months after our last exchange, then deleted. [CONFIRM]
- Clients: for the duration of our working relationship, then for the periods required by accounting and tax law in each provider’s country (in general, up to 6 years in Quebec and 10 years for accounting records in France). [LEGAL REVIEW: confirm periods.]
- Marketing list: until you unsubscribe, or after 3 years without any interaction from you. [CONFIRM]
- Quick questions: 12 months after our answer. [CONFIRM]
5. Who we share it with
We never sell your information. We share it only with:
- The other provider (Byron or Camille), so both can assess your application.
- Hostinger, which hosts the site and its database. [VERIFY: Hostinger data-centre location chosen for this site.]
- SureForms and SureMail, WordPress plugins that run on our own hosting. Form entries are stored in our WordPress database; emails are sent through the mail provider for hello@streamandrise.com: [CONFIRM: email provider name and country].
- Calendly, only if we send you a booking link and you use it. Calendly’s own privacy policy then applies.
- YouTube (Google), only if you click to play the intro video. We use YouTube’s privacy-enhanced mode; nothing loads from YouTube before you click.
- Authorities, when the law requires it.
6. Transfers between Canada and the European Union
Because one provider is in Canada and the other in France, your information moves between the two. The European Commission has recognised Canada as offering an adequate level of protection for organisations subject to PIPEDA, so transfers from the EU to Canada rely on that adequacy decision. [VERIFY current status of the EU adequacy decision for Canada before publishing.] Before transferring information out of Quebec, Byron assesses the protection it will receive, as Quebec law requires. [LEGAL REVIEW: Law 25 transfer impact assessment.]
7. Your rights
Depending on where you live, you have the right to:
- access the information we hold about you and receive a copy;
- have it corrected if it is wrong or incomplete;
- have it deleted, or have its dissemination stopped or a link de-indexed where Quebec law allows;
- receive it in a structured, commonly used format (portability);
- object to, or ask us to limit, some uses;
- withdraw your consent at any time, without affecting what was done before. Every marketing email has an unsubscribe link.
To use any of these rights, write to hello@streamandrise.com. We answer within 30 days. We may ask you to confirm your identity first.
You can also complain to a supervisory authority:
- France: Commission nationale de l’informatique et des libertés (CNIL)
- Quebec: Commission d’accès à l’information du Québec
- Canada: Office of the Privacy Commissioner of Canada
8. Security and confidentiality incidents
The site runs over HTTPS, admin access is limited to the two providers and protected by strong passwords and two-factor authentication [CONFIRM], and we keep WordPress and its plugins up to date. If a confidentiality incident creates a risk of serious injury (Quebec) or a risk to your rights and freedoms (GDPR), we record it, notify the competent authority (the Commission d’accès à l’information and/or the CNIL, within 72 hours where the GDPR requires it), and tell you without undue delay.
9. Changes
If we change this policy, we update the date at the top. If the change is significant, we tell the people on our list by email.