Privacy Policy

Last updated: 14 October 2026

1. About this policy

This Privacy Policy explains what personal information we collect when you visit PianoIrani.com, contact us, or purchase downloadable PDF music books, why we use that information, who we may share it with, how long we keep it, and your rights under applicable UK data-protection law.

For the purposes of UK data-protection law, Bahar Barkhordar trading as PianoIrani is the data controller for personal information processed through this website, except where a payment provider or other third party acts as an independent controller under its own privacy notice.

2. Information we collect

We collect only information reasonably necessary to operate the website, process orders, provide downloads, respond to enquiries, protect the website, and comply with legal obligations. Depending on how you use the site, this may include:

• Order and billing information: your name, billing address, country, email address, telephone number if provided or required, products purchased, order value, currency, order number, date and payment status.
• Technical and security information: IP address, browser/device information, server logs, language preference and information used to protect the website against fraud, abuse or unauthorised access.
• Contact information: information you provide when you send us an email or use our contact form, including your name, email address, subject and message.
• Payment-related information: payment status, transaction identifiers and limited information returned by the payment provider. Full card numbers and card security codes are submitted directly to the payment provider and are not stored on our website server.

Customer account registration is not currently offered. Orders are placed using guest checkout. We do not currently provide public commenting on the site.

3. How and why we use personal information

We process personal information only where we have an appropriate lawful basis. Our main purposes and lawful bases are:

• Performance of a contract: to process your order, take or confirm payment, provide download access, send order confirmations, respond to order-related enquiries and provide customer support.
• Legal obligations: to keep appropriate business and tax records, respond to lawful requests from authorities, and meet applicable legal or regulatory requirements.
• Legitimate interests: to secure and maintain the website, prevent fraud and abuse, diagnose technical problems, protect our intellectual property, administer the store and respond to general enquiries, provided those interests are not overridden by your rights.
• Consent: where consent is legally required, for example before setting non-essential cookies or using optional marketing technologies. You may withdraw consent at any time where processing is based on consent.

4. Payments

Payments are processed by third-party payment service providers made available at checkout. When you choose a payment method, information necessary to process the transaction — such as the payment amount, billing information and transaction details — may be sent to that provider.

We do not store your full payment-card number or card security code. Payment providers process payment information under their own privacy notices and security standards. The payment methods available may change from time to time.

5. Restricted jurisdictions, fraud and compliance checks

PianoIrani.com is a UK-based international store and does not offer sales, payments or digital delivery to customers located in Iran or in any other country, territory or situation where providing the service would be prohibited by applicable law, sanctions requirements or the rules of our payment providers.

For fraud prevention, security and compliance purposes, we may use information such as billing country, IP address, transaction information and payment-provider responses to determine whether an order can lawfully and safely be accepted. Payment providers may carry out their own fraud, sanctions and identity screening under their own policies.

6. Cookies and similar technologies

The website may use strictly necessary cookies and similar technologies required for functions such as the shopping basket, checkout, language selection, security and website performance. These technologies are necessary for the website to operate.

If we introduce analytics, advertising or other non-essential cookies, we will provide appropriate information and obtain consent where required before using them. You can also control cookies through your browser settings, although disabling essential cookies may prevent the basket or checkout from working correctly.

7. Who we share information with

We do not sell personal information. We may disclose only the information necessary to:

• payment service providers used to process transactions;
• our website hosting, security, email and technical service providers;
• professional advisers such as accountants or tax advisers where reasonably necessary;
• public authorities, regulators, courts or law-enforcement bodies where disclosure is required by law or is necessary to establish, exercise or defend legal rights.

8. International transfers

Some service providers may process personal information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we expect the relevant provider to use an approved transfer mechanism or another lawful safeguard, such as an adequacy arrangement or appropriate contractual protections.

9. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, tax, security and dispute-resolution requirements.

• Order and transaction records: retained for the period required for applicable UK tax and business-record obligations.
• Customer-support and contact messages: retained for as long as reasonably necessary to answer the enquiry, maintain an appropriate business record and deal with any related issue.
• Security and technical logs: retained for a limited period appropriate to security, troubleshooting and abuse prevention.

Where information is no longer required, we will delete or anonymise it where reasonably practicable.

10. Your data-protection rights

Depending on the circumstances, you may have rights to request access to your personal information, correction of inaccurate information, erasure, restriction of processing, data portability, and to object to certain processing. Where we rely on consent, you may withdraw that consent at any time.

These rights are subject to legal conditions and exemptions. For example, we may need to retain transaction records where the law requires us to do so even if you request deletion.

To exercise a privacy right, contact info@pianoirani.com. We may need to verify your identity before acting on a request.

11. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration or disclosure. No internet service can guarantee absolute security, but we aim to use safeguards appropriate to the nature of the information we process.

12. Children

This website is not directed at children for the purpose of making purchases. Purchases should be made by an adult or by a person otherwise legally able to enter into the transaction.

13. Complaints

If you have a concern about how we use your personal information, please contact us first at info@pianoirani.com so that we can try to resolve it. You also have the right to complain to the UK Information Commissioner’s Office (ICO).

14. Changes to this policy

We may update this Privacy Policy when our website, payment methods, service providers or legal obligations change. The current version will be published on this page with its latest revision date.