MPL Communications Limited (we, us, our) is a company incorporated in England & Wales. Where we decide the purpose or means for the processing of the personal data that you provide when using our Website, we are the “controller” for the purposes of the UK General Data Protection Regulation (GDPR). This policy should be read together with our Terms & Conditions of the Website.
This privacy policy explains how we process your personal data when:
• You use our website, PaulMcCartney.com (Website) – including Paul McCartney’s online community forum “Maccaboard”
• You access Paul McCartney’s page or channel on social media platforms (such as Facebook and Instagram), digital streaming platforms (such as Spotify or Apple Music) and fan engagement platforms (such as Openstage)
• You access Paul McCartney’s store on e-commerce platforms (such as Shopify)
• We (or third parties) collect your information to enable us to market to you via email, SMS or WhatsApp
• You consent to receiving marketing communications from us via third parties (including third party ticketing and ecommerce partners)
And collectively we shall refer to the above as “the services”.
If you’d like to complain about how we process your personal data, please write to us at webmaster@paulmccartney.com. And you can use the same email address for other correspondence relating to how we process your personal data – including questions, requests and general enquiries. When submitting a complaint, please ensure that you provide us with as much information as possible, so that we can take appropriate steps to respond to the complaint. Once we have reviewed and responded to your complaint, we will endeavour to inform you of its outcome.
Our Website may contain hyperlinks to third party websites. These websites operate fully independently from us, and we cannot accept any responsibility or liability for the privacy practices of such third parties nor the availability of these external sites or resources. The appearance of such links on our Website is not an endorsement. Should you use any of these websites, such use is at your own risk and we would recommend that you review their respective privacy policies.
This policy may be updated from time to time. We will notify you of any changes by posting the new policy here and, where feasible, by letting you know by email.
a) Mailing List
If you ask us, or our third party ecommerce partners, to be added to our mailing list we will keep you updated with information on news, releases, tour dates, merchandise and pre-sales by email, SMS or WhatsApp, unless you would like to be removed from that list (in which case please let us know by clicking unsubscribe at the bottom of any communication that you receive, or by contacting us directly).
In order to send you the most relevant communications, we may collect the following information from you:
• Date of birth – to ensure our communications are age-appropriate and to tailor content to you;
• Location – to provide information relevant to your country or region (for example, local tour dates); and
• Survey responses – from time to time, we may ask you questions via surveys to better understand your preferences and tailor our communications accordingly.
We will send you these communications either on the basis of your consent, or where we are permitted to do so without consent, on the basis of our legitimate interests – which include our commercial interest in promoting Paul McCartney and our services, and your genuine interest in receiving communications that are relevant to you.
Where we are required to obtain your consent before sending you a communication, we will ask for this at the relevant time. You can withdraw your consent or opt out of any communications at any time by clicking unsubscribe at the bottom of any message you receive, or by contacting us directly.
b) Your Enquiries
When you contact us – whether via a form on our Website or by email – you may provide us with personal data such as your name, your email address, your organisation's name and address and the details of your enquiry.
We use this information to respond to your enquiry and provide you with information about our services. We do so on the basis of our legitimate interests – which include our commercial interest in promoting Paul McCartney and our services, and responding to those who reach out to us.
You are under no obligation to provide us with your personal data. However, if you do not provide us with the relevant information, we may not be able to respond to or assist with your enquiry.
c) Maccaboard
If you create an account for our Maccaboard, we will ask you to provide the following information:
• Your Username (mandatory);
• Your password (mandatory);
• Your email address.
and / or such other information as we may request (as indicated on the Maccaboard) or you voluntarily submit to the Maccaboard (including your date of birth, location (country), occupation, avatar).
We may process this information so you are able to use the Maccaboard, in accordance with the terms of use agreed between us. We do so because it is necessary for the performance of a contract to which we are both a party to (i.e. the Maccaboard terms of use). We also do so on the basis of our legitimate interests – which include our commercial interest in promoting Paul McCartney and our services.
If you send us objectionable content or otherwise behave in a disruptive manner when using the Maccaboard:
• We may process personal data included in your messages to respond to and stop such behaviour; and where we reasonably believe you are or may be in breach of the law (for instance, because content you send amounts to harassment or is defamatory), we may use your personal data to inform relevant third parties such as your email / internet provider or law enforcement agencies about the content.
• We will process this personal data: (i) on the basis of our legitimate interests – which include our interests in ensuring that use of the Maccaboard is lawful, does not disrupt our systems, does not harass our staff or other individuals; and (ii) to enforce our legal rights and to comply with our legal obligations.
d) How We use our Website (Analytics)
Our Website uses cookies and other mechanisms, such as third party pixels and Google Tag manager, to collect analytical information, such as your:
• Internet protocol (IP) address (and geolocation estimates).
• Device information (such as device type, operating system, browser type and version)
• Technical performance data (such as load times, errors encountered, interaction with scripts/pixels)
• Cookie identifiers or unique analytics IDs
• Usage, interaction and session information (such as pages viewed, time spent on each page, click paths, scroll depth, navigation patterns, session duration, session count, returning vs. new visitors)
We use this information to:
• Understand how visitors use our Website and to compile statistical reports regarding that activity (for example, your IP address is used to approximate the country from which you access our Website, and we aggregate this information together so we know that, for example, that visitors to our Website come from a specific territory). This information is not used by us to develop a personal profile of you.
• Suggest and deliver content which we believe may interest you.
In some cases, we are able to use this information because you have given your consent to us doing so. In other cases, we are able to use this information because it is necessary for our legitimate interest – which include our commercial interest in promoting Paul McCartney and our services.
You can always choose to enable or disable Cookies in your internet browser. By default, most internet browsers accept Cookies but this can be changed. For further details, please consult the help menu in your internet browser. For further information about cookies, please see:
www.allaboutcookies.org, and how to adjust your browser settings here: www.allaboutcookies.org/managecookies
e) Purchases
We do not offer any direct sales via our Website. Any purchases you make on the websites listed below are operated by third parties (including uDiscover and Shopify) and subject to their terms and conditions and privacy policy. We recommend that you review these.
When you purchase products or services related to Paul McCartney, the above commercial partners may, following your consent, provide your information to us, so that you can be added to our mailing list (see relevant section above).
And in line with the legitimate interest we have in promoting our business and your legitimate interest in receiving communications which are relevant to you, we may use information relating to your products and services purchases, related to Paul McCartney, to tailor our communications so that you receive updates that match your interests.
f) Social media platforms and fan engagement
We maintain Paul McCartney’s official pages and channels on social media platforms, including Facebook and Instagram (operated by Meta Platforms, Inc.), and fan engagement platforms such as Openstage, Community SMS.
When you interact with any of these pages or channels – for example by liking, commenting, sharing, or messaging – the relevant platform will process your personal data in accordance with its own privacy policy. We recommend that you review the privacy policies of any platform you use.
We may receive engagement data from these platforms – such as information about how users interact with our content, the reach of our posts, and audience demographics – which we use to understand how our online content is performing and to gauge interest in Paul McCartney and our services. We process this information on the basis of our legitimate interests in understanding our audience, developing our content strategy, and promoting Paul McCartney's music, projects and activities effectively.
We keep your information confidential, but may disclose it to our personnel, suppliers or subcontractors insofar as it is reasonably necessary for the purposes set out in this privacy policy, provided that they do not make independent use of the information, including:
• Analytics and tracking technology service providers (such as Google) – to analyse how you use the Website (including the Maccaboard), measure campaign performance, identify returning fans, manage pre-sale access and retarget you in connection with Paul McCartney projects. If you would like to opt out of us using Google Analytics for these purposes, please visit: https://tools.google.com/dlpage/gaoptout/
• Social media and Streaming platforms (such as Google, Facebook and Spotify) – to enable us to engage with you, suggest and deliver content which we believe may interest you, and enable social media plugins on our Website. For more information on how these social media platforms use your personal data, please read their privacy policies. For a list of our official social media accounts and streaming platforms, see Official Paul McCartney social media accounts HERE!
• Marketing communications providers (such as Community and WhatsApp) – to enable us to send you marketing communications by email and text message.
• Fan engagement platforms (such as Openstage) – to enable us to capture, monitor and use engagement data relating to you.
• Digital streaming platforms (such as Spotify or Apple Music) – to deliver new release notifications and pre-save functionality, so that upcoming releases are automatically saved to your streaming library when they go live (where you have an account on a fan engagement platform, and choose to connect it to your account on a digital streaming platform, we may share your personal data with those platforms). Linking your accounts in this way is optional and you can disconnect them at any time through your fan engagement platform account settings.
All our third party service providers are required to take appropriate security measures to protect your personal data in line with our policies.
We may also disclose your personal data to the extent that we are required to do so by law (which may include to government bodies and law enforcement agencies). Our legal basis for this processing is compliance with a legal obligation.
In connection with any legal proceedings or prospective legal proceedings, and to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention), we may also disclose your personal data to relevant third parties. Our legal basis for this processing is our legitimate interests, which include our interests in:
(i) obtaining legal advice in relation to legal and similar proceedings; (ii) communicating with relevant third parties in relation to such proceedings; and (iii) protecting and defending ourselves from legal and similar proceedings.
If we are involved in a merger, acquisition, or sale of all or a portion of our business or assets, your personal data may be transferred as part of that transaction. Where this is the case, we will notify you. Our legal basis for this processing is our legitimate interests, which include our interest (and that of our shareholders) in negotiating and completing the relevant transaction, and our interest (and that of our users) in securing the continued financing, development, and operation of our products and services.
Except as provided above, we will not provide your information to third parties.
Under data protection law, you have the right to:
• ask us for a copy of data we are processing about you and have inaccuracies corrected;
• ask us to restrict, stop processing, or to delete your personal data;
• ask us for a machine readable copy of your personal data, which you can use with another service provider. Where it is technically feasible, you can ask us to send this information directly to another provider if you prefer; and
• make a complaint to a data protection regulator.
Please send your requests to webmaster@paulmccartney.com
We do not use the Website to knowingly solicit data from or market to children under the age of 13. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us at webmaster@paulmccartney.com We will delete such information within a reasonable time.
We will take all reasonable technical and organisational precautions to prevent the loss misuse or alteration of your personal data.
Some information we hold may be stored on servers that may be located outside of the UK. With certain service providers, we may use specific contracts approved by the Information Commissioner’s Office which give personal data the same protection it has in the UK (if legally required). If you would like to find out more about these safeguards, please let us know by writing to webmaster@paulmccartney.com
In determining how long to retain your personal data, we take into account a number of factors, including:
• Nature and sensitivity of the data: Where we process more sensitive categories of personal data, we will apply shorter retention periods or review the need to retain that data more frequently.
• Purpose of processing: We will retain your personal data for as long as it is necessary to fulfil the purpose for which it was collected.
• Inactivity: Where you have not engaged with our marketing communications (for example, by opening emails, clicking links or otherwise interacting with content we send you) for an extended period, we may treat your data as inactive and take steps to remove you from our active marketing lists, or contact you to confirm whether you wish to continue receiving communications. If we do not hear from you, we may delete or anonymise your data.
• Legal and regulatory obligations: In certain circumstances, we are required to retain personal data for a minimum period by law – for example, for tax, accounting or regulatory compliance purposes. Where a legal obligation requires us to retain data for a specified minimum period, we will do so regardless of other factors.
• Legal claims and proceedings: We may retain personal data for longer where we reasonably consider it may be necessary to establish, exercise or defend a legal claim.
• Consent and objection: Where our processing is based on your consent, we will cease processing upon withdrawal of that consent, unless another lawful basis applies. Where you have objected to processing based on our legitimate interests, we will review your objection and, if upheld, cease that processing and delete the relevant data unless we have compelling legitimate grounds to continue.
Last updated: July 2026