Privacy policy
Last Updated: May 2026
1. Introduction
At Laced, we respect your right to data protection and privacy. This Privacy Notice ("Notice") sets out the basis on which we (and/or third parties on our behalf) collect, use, store, disclose or otherwise process any personal information about you (‘’Personal Data’’). We will process your Personal Data when:
- You access, engage with and browse our website [and online stores], lacedrecords.com, lacedrecords.co and its sub-domains;
- You access, engage with and browse the websites that we operate on behalf of our clients;
- You, or the organisation with which you are connected, are a customer (or a potential customer) of our products or services;
- You join and interact with one of our online community channels (including, but not limited to X, Facebook, and Instagram);
- You engage with, receive or subscribe to, our newsletters or other marketing communications or initiatives.
The controller of your Personal Data is Laced. Depending on our relationship with you, references to Laced in this Notice mean:
- For UK, Europe, and all other international stores: The controller is Laced Music Ltd of 4th Floor, 110 High Holborn, London, England, WC1V 6JS;
- For US and Canada: The controller is Keywords International, Inc. of 3830 Monte Villa Parkway, Suite 200, Bothell, WA 98021; and
- Any other entities in the Laced group of companies from time to time (together, ‘’Laced’’, ‘’we’’, ‘’us’’, or ‘’our’’).
Laced is a subsidiary of Keywords Studios Limited. In this Notice, references to the "Keywords Studios Group" mean Keywords Studios Limited and its subsidiaries and affiliates from time to time.
We are required to provide you with the information in this Notice which explains how your Personal Data will be processed by Laced and your data protection rights under: (1) the General Data Protection Regulation (‘’GDPR’’); (2) the GDPR as amended and incorporated into the UK’s and the EU (withdrawal) Act 2018 and the UK Data Protection Act 2018 (‘’UK GDPR’’); (3) the California Consumer Privacy Act (‘’CCPA’’); and (4) other applicable laws (together, ‘’Applicable Data Protection Laws’’).
Please be aware that some rights and protections under the Applicable Data Protection Laws may only apply to individuals resident in Europe (i.e. the European Union, European Economic Area and the United Kingdom) or California.
If you have any questions about how we use your Personal Data or to exercise your data protection rights contact us.
2. What Personal Data We Process
We collect Personal Data either directly from you when you provide it to us and or indirectly when we generate it from engaging with you (e.g. Technical & Usage Data). The Personal Data we will process about you is as follows:
- Identifier Data: Name, alias, unique personal identifier, online identifier, IP address, email address, postal address, phone number and account name.
- Contact and Query Data: When you contact us via our website and/ or submit queries to us by email, we will collect Personal Data relating to: your name, email address, postal address, phone number, title, company/employer details and other details (which may or may not include Personal Data, depending on the nature of your communication to us).
- Commercial Data: Records of products purchased, obtained, or considered, and other purchasing or consuming histories or tendencies.
- Financial Data: Payment details. All payments are processed via third-party processors (e.g., Shopify Payments, Stripe, PayPal). We do not store full credit card numbers on our servers.
- Technical & Usage Data: Browser type, time zone settings, operating system, and information about how you use our website. [Most of this Personal Data is collected indirectly from you using cookies on our website. Please see our Cookies Policy for more information about how our website uses cookies.]
- Marketing Data: When we carry out marketing activities or you engage with such activities, we process the following Personal Data about you: your preferences in receiving marketing from us and our third-party IP partners, name, email address, phone number, company name and job title.
3. How and Why We Use Your Personal Data
The following table details the key context for which (‘’Legal Basis’’) and the reasons why (‘’Purposes’’) we obtain and otherwise process your Personal Data:
| Legal Basis | Purposes | Personal Data |
|---|---|---|
|
Perform our contract with you It is necessary to process your Personal Data in order to enter into and perform our contract with you. IMPORTANT: It is a contractual requirement for us to collect your Personal Data for these purposes and, in the event that you do not provide us with your Personal Data, we will not be able to enter into or perform our contract with you or provide you with the requested services. |
To process and deliver your orders, manage payments, and provide customer support. Fulfil our obligations to you in line with our Terms and Conditions. |
Identifier Data, Commercial Data, Financial Data, Contact and Query Data Identifier Data, Contact and Query Data, Commercial Data |
|
Legitimate Interests Depending on our business needs, it is necessary for the purposes of our legitimate interest to obtain, collect and otherwise process your Personal Data. IMPORTANT: When we process your Personal Data based on our legitimate interests, we make sure to consider and balance any potential impact on you and your data protection rights. We will not use your Personal Data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted by law). You have a right to object at any time to the processing of your Personal Data on the legal basis of pursuing our legitimate interests. For more information on exercising this right, please see section 10 of this Notice. |
To provide you with use of our website and to allow you to optimally browse our website. To process and respond to queries (or requests) you submit to us when you email. To send you newsletters, updates and other information. To support business management and planning, including accounting and auditing and to prepare financial and performance reports for clients. To prevent fraud, maintain the security of our stores, and conduct internal analytics to improve our product offerings. |
Technical & Usage Data
Identifier Data, Contact and Query Data
Identifier Data, Marketing Data Identifier Data, Commercial Data, Financial Data Identifier Data, Commercial Data, Financial Data, Technical & Usage Data |
|
Consent We can process your Personal Data if you provide us with consent to do so. If you give consent, you agree to the processing of your Personal Data for the specific purposes outlined. IMPORTANT: Your consent is voluntary, and you have a right to withdraw it at any time. If you choose not to provide your consent or withdraw it, we will not be able to process your Personal Data for the purposes specified. |
To send you marketing communications or place non-essential cookies on your device (Please see our Cookie Notice for more details). You may withdraw consent at any time. | Identifier Data, Technical & Usage Data, Marketing Data |
|
Compliance with Legal Obligations We may process your Personal Data where it is necessary to comply with legal obligations to which we are subject. |
We will process your Personal Data to comply with applicable laws and regulations to which we are subject. | Identifier Data, Contact and Query Data, Commercial Data, Financial Data, Technical & Usage Data |
We will only use your Personal Data for the purposes for which we collect it (as outlined in this section 3), unless we reasonably consider that we need to use it for another reason and that reason is incompatible with the original purpose. If we need to use your Personal Data for an unrelated purpose, we will notify you and explain the Legal Basis which allows us to do so.
4. Data Sharing and Disclosure
Depending on our reasons for processing your Personal Data, we will share it with all or some of the following recipients (‘’Recipients’’):
| Recipient Category | Details |
|---|---|
| Keywords Studios Group |
|
| Third Party Service Providers | Service providers who provide services to the operation of our business or require your Personal Data to perform the services requested by us (e.g., warehouses and logistics/fulfillment partners, payment processors (such as Shopify Payments and PayPal), newsletter and marketing platforms (such as Klaviyo), tax reporting and compliance platforms (such as Avalara), and cloud hosting providers, event organisers and IT platforms). |
| Partners |
|
| Third Party Advisors / Professionals | External advisors e.g tax or legal advisors, insurers, consultants, accountants and auditors (as necessary to protect our legitimate and legal interests). |
| Legal / Regulatory Bodies | Regulatory authorities and law enforcement agencies (where we are under a duty to disclose or share your Personal Data in order to comply with any legal or regulatory obligation or request) such as government authorities and bodies, law enforcement, courts and out-of-court administrative bodies. |
5. International Data Transfers
To facilitate the global nature of our business, our operations will be carried out within Europe and outside Europe (e.g. in the USA, Canada and other countries). If you are resident in Europe, we may share, transfer or store your Personal Data outside your country of residence to certain Recipients (mainly our external service providers and partners). The laws and practices in these countries may not have equivalent data protection and privacy rules to those that apply under Applicable Data Protection Laws.
Where these transfers occur, we ensure that a transfer mechanism is in place along with appropriate safeguards to protect your Personal Data.
- For transfers (including, onwards transfers) of your Personal Data to Recipients within Laced and/or Keywords Studios group, we rely on the EU Standard Contractual Clauses (‘’SCCs’’) (e.g. USA).
- For transfers (including, onwards transfers) of your Personal Data to other Recipients, we rely on the SCCs, adequacy decisions of the European Commission (e.g. for transfers to Canada and the UK) or other mechanisms under Applicable Data Protection Laws.
If you would like to find out about the transfer of your Personal Data, you can contact us via email.
6. Security
We implement and maintain appropriate technical and organizational measures to protect your Personal Data against unauthorized access, loss, or disclosure. We adhere to industry-standard security protocols and regularly review our practices to ensure your information remains secure.
7. Third Party Sites
This Notice, together with our Terms and Conditions, applies to your use of our website. We are not responsible for the content or privacy practices of other websites.
Our website may contain links to other websites and resources (‘’Linked Website(s)’’) provided by third parties for your information and convenience only. Laced is not responsible for the privacy/data protection notices or practices of any Linked Website and does not accept liability in connection with any Linked Website. This Notice only governs the Personal Data collected by Laced on our website and not Linked Websites. When accessing Linked Websites, you should read the privacy/ data protection notice published on the relevant Linked Website. We have no control over the Linked Websites and accept no responsibility for them or any loss or damage that may arise from your use of Linked Websites.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements (typically 6-7 years for financial records). When we no longer have a legitimate business need to process your personal information, we will either securely delete or anonymize it.
Please note that in certain circumstances, we may hold your Personal Data for a longer period. For example, if we are processing an ongoing claim or believe in good faith that the law or a relevant regulator may reasonably in our view expect or require us to preserve your Personal Data.
If you would like to find out about the retention of your Personal Data, you can contact us via email.
9. Personal Data of Children
We do not knowingly collect or solicit Personal Data about children under 16 years of age without specifically notifying such data subjects and their guardians that such Personal Data may be collected and processed in a specific instance. In such instances, details regarding the legal basis for such processing and any potential uses of such Personal Data will be provided.
If you are a child under the age of 16, please do not attempt to register for or otherwise use our website, the services or send us any Personal Data. If we learn that we have incidentally collected Personal Data from a child under 16 years of age, other than for a specific purpose where they have been informed of the purpose and legal basis for collection, we will delete that information as quickly as possible. If you believe that a child under 16 years of age may have provided Personal Data to us, please contact us at hello@lacedmusic.com.
10. Your Privacy Rights
Depending on the Applicable Data Protection Laws and your country of residence, you may have a number of rights in relation to your Personal Data, which are set out in the table below. In particular, these rights include the right to object to processing of Personal Data where that processing is carried out for our legitimate interests. Note that these rights are not absolute. You can exercise any of these rights by emailing us:
| Right | Details |
|---|---|
| Right to Information | You have a right to be provided with clear, transparent and easily understandable information about how we process your Personal Data. We give effect to this right by making this Notice available to you. |
| Right to Object | You have a right to object to our processing of your Personal Data where we rely on our legitimate business interests to process such data. You can request that we stop processing your Personal Data, and we will do so, unless we can demonstrate compelling legitimate grounds to continue processing your Personal Data or if we need your Personal Data in connection with any legal claims. |
| Right to Withdraw Consent | You have a right to withdraw your consent to our processing of your Personal Data at any time. |
| Right to opt-out / unsubscribe | You have the right to opt-out of marketing communications we send you at any time. If you no longer wish to receive our newsletter and similar communications, you may opt-out of receiving them by clicking on the "unsubscribe" or "opt-out" link in the communications we send you. Please note, however, that it may not be possible to opt-out of certain service-related communications which are necessary to send you. You can contact us to exercise this right at any time. |
| Right of Access | You have the right to access the Personal Data we process about you. If you exercise this right, you will receive confirmation about whether we process your Personal Data and, if so, a copy/copies of your Personal Data. |
| Right to Rectification | You have the right to correct the Personal Data we process about you if the Personal Data we hold about you is inaccurate or incomplete. |
| Right to Erasure | You have a right to request, in certain circumstances, the deletion of your Personal Data - for example if you exercise the right to object and we do not have an overriding reason to continue processing your Personal Data or if we no longer need to process your Personal Data. |
| Right to Restriction | You have a right to request, in certain circumstances, to restrict our processing of your Personal Data - for example, if you contest the accuracy of the Personal Data we hold about you or you object to us processing your Personal Data. |
| Right to Lodge a Complaint | You have a right to lodge a complaint with the Information Commissioner with regard to our processing of your Personal Data. See: https://ico.org.uk/make-a-complaint/. We encourage you to contact us before you raise a concern with the Information Commission to see if we can resolve any concerns you have about us processing your Personal Data. |
| Right to Data Portability | You can ask for a copy of your personal data in a machine-readable format. You can also request that we transmit the data to another controller where technically feasible. |
We will provide you with information on any action taken upon your request in relation to any of these rights without undue delay and at the latest within one month of receiving your request. We may extend this up to two months if necessary, however we will inform you if this need arises.
Additional Disclosures for US Residents (including California): If you are a resident of California or another US state with applicable privacy laws (such as Virginia or Colorado), you have additional specific rights:
- Right to Know / Access: You have the right to request the specific pieces and categories of personal information we have collected about you.
- Right to Opt-Out of "Sale" or "Sharing": While we do not "sell" your personal information for monetary value, we may use third-party analytics and advertising cookies that constitute "sharing" under the California Consumer Privacy Act (CCPA). You can opt out of this sharing by adjusting your cookie preferences on our Site.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
11. Changes to this Notice
We reserve the right to amend this Notice, in whole or in part, at any time as necessary. Any changes will be posted on the website.
If at any time we decide to use your Personal Data for a purpose significantly different from that stated in this Notice, or otherwise disclosed to you at the time it was collected, we will notify you, and you will have a choice as to whether or not we use your Personal Data for such a new purpose.
12. Contact Information
For any questions regarding this Notice or to exercise your rights, please contact:
Email: privacy@keywordsstudios.com