Privacy Policy

Boney Floyd (boneyfloyd.com)

Last updated: 15 October 2026


1. Who we are

This website, boneyfloyd.com, is run by Panos Pomonis, who creates and releases music under the name Boney Floyd. In this policy, “I”, “me” and “my” mean Panos Pomonis, and “the website” means boneyfloyd.com.

I am based between in London, United Kingdom.  For any question about your personal data, you can contact me at:

I am the controller of the personal data collected through this website, which means I decide how and why it is used.


2. What personal data I collect

I only collect the data needed to run the website and to stay in touch with people who want to hear from me.

Information you give me directly

  • Contact messages. If you use a contact form or email me, I receive your name, email address and the content of your message.

Information collected automatically

  • Technical data. When you visit, my web host and WordPress record standard information such as your IP address, browser type, device type, pages visited, and the date and time of your visit. This is used to keep the website secure and working properly.

  • Cookies and similar technologies. See section 5 below.

I do not knowingly collect sensitive categories of personal data, and I do not sell your personal data.


3. How I use your data and why

Purpose

Data used

Legal basis

Replying to your messages and requests

Name, email, message

Legitimate interests (answering people who contact me)

Sending news about releases, shows and projects

Email, name

Your consent, which you can withdraw at any time

Keeping the website secure and preventing abuse

Technical data, IP address

Legitimate interests (protecting the website)

Understanding how the website is used and improving it

Anonymous or aggregated usage data

Your consent where required, otherwise legitimate interests

Meeting legal obligations

As required by law

Legal obligation

4. Who I share your data with

I do not sell or rent your data. I only share it with service providers who help me run the website, and only as far as needed:

  • Hosting and infrastructure providers that store the website and its data.

  • Email service providers used to send newsletters or handle messages. 

  • Analytics providers that measure website traffic. Google Analytics

  • Embedded music and video services. The website may embed or link to players and content from Bandcamp, Spotify, SoundCloud, YouTube and similar platforms. When you load or play embedded content, the platform may collect data about you according to its own privacy policy and may set its own cookies.

I may also disclose data if the law requires it, or to protect my rights or the security of the website.


5. Cookies

Cookies are small files stored on your device. This website may use:

  • Essential cookies, which are needed for the website to function and for security.

  • Analytics cookies, which help me understand which pages are visited. These are only used with your consent where the law requires it.

  • Third party cookies, set by embedded services such as YouTube, Spotify, SoundCloud or Bandcamp when you interact with their content.

You can accept or reject non essential cookies using the cookie banner where one is shown, and you can delete or block cookies at any time in your browser settings. Blocking some cookies may affect how parts of the website work.


6. Links to other websites

The website links to external sites, including streaming platforms, online stores and social media. I am not responsible for the privacy practices of those sites, and I encourage you to read their policies.


7. International transfers

Some of the service providers I use may process data outside the United Kingdom and the European Economic Area. Where this happens, I rely on appropriate safeguards, such as adequacy decisions or standard contractual clauses, to protect your data.


8. How long I keep your data

  • Contact messages: kept for as long as needed to deal with your request, and normally deleted within 24 months after the conversation ends.

  • Mailing list data: kept until you unsubscribe or ask me to delete it.

  • Technical and security logs: kept for a short period, normally no longer than 12 months.

I may keep data longer if the law requires it.


9. Your rights

Under the UK GDPR and the EU GDPR, you have the right to:

  • Access the personal data I hold about you.

  • Have inaccurate data corrected.

  • Have your data deleted.

  • Restrict or object to the use of your data.

  • Receive your data in a portable format.

  • Withdraw your consent at any time, where I rely on consent. This does not affect anything done before you withdrew it.

To use any of these rights, email me at . I will respond within one month.

You also have the right to complain to a data protection authority. In the United Kingdom this is the Information Commissioner’s Office (ico.org.uk). In Greece it is the Hellenic Data Protection Authority (dpa.gr). I would appreciate the chance to resolve your concern first, so please contact me before you complain.


10. Children

The website is not aimed at children under 16, and I do not knowingly collect personal data from them. If you believe a child has given me personal data, please contact me and I will delete it.


11. Security

I take reasonable technical and organisational steps to protect your data, including keeping WordPress, its theme and its plugins up to date. No online service can be completely secure, so I cannot guarantee absolute security.


12. Changes to this policy

I may update this policy from time to time. The date at the top shows when it was last changed. If I make a significant change, I will highlight it on the website.


13. Contact

Panos Pomonis (Boney Floyd) Email:  Website: boneyfloyd.com