Arbutus Music privacy policy
Arbutus Music is committed to protecting your personal data and will use any personal or sensitive data we collect from you in line with the General Data Protection Regulations (GDPR).
Arbutus Music is a Data Controller under the GDPR; we can be contacted at workshops@arbutusmusic.net.
Information that we collect from you on enrolment
As all our events require enrolment, we need to collect data on the person booking (name address, phone number and email) in order to allow access to the event, to send confirmation of booking and further essential information and provide assistance and advice.
This data will only be used for administering your access to the event/s for which you have booked and will not be used to send you marketing/promotional messages from Arbutus Music unless you provide your consent to receive these (see below).
Online payments for enrolment are made via Paypal. We do not receive any personal financial information from this process. We only receive notification from Paypal that your payment has been made, together with the contact information we need to process your application. Paypal commits to keep your financial information secure and is GDPR compliant.
Our website may issue cookies to your computer. You may disable the use of cookies in your internet browser, but this may limit your access to the payment system.
Photos
We sometimes take photos and videos at our events. Consent is sought from attendees before including their image in our marketing publications.
Mailing list
We offer anybody the opportunity to sign up (consent) to receive marketing and promotional information on the group’s activities (e.g. emails about forthcoming events).
When you sign-up to our online marketing mailing list we will ask for your name and email address and will use this data to send you information about our events.
We will only send you information that is related to the activities of Arbutus Music (e.g. we will not use your data to send you marketing messages from 3rd parties).
Anything we send you will include a clear option to withdraw your consent (e.g. to ‘opt out’ of future emails) and you can also do so at any time by contacting the Data Protection Officer – workshops@arbutusmusic.net.
Updating or deleting your records
You can contact us at any time at workshops@arbutusmusic.net. to update, correct or delete the data we hold on you.
Arbutus Music’s data retention policy is to review all data held on individuals at least every two years and remove data where we no longer have a legitimate reason to keep it.
Where you have withdrawn your consent for us to use your data for a particular purpose (e.g. unsubscribed from a mailing list) we may retain some of your data for up to two years in order to preserve a record of your consent having been withdrawn.
Disclosure of your personal information
We would only disclose your personal information to appropriate third parties if required to do so by law or to investigate any actual or potential breach of any law.
Data uploaded in the enrolment section of the website is kept confidential.
We do not host advertising and will not pass personal information onto third party advertisers.
What rights do you have?
Under the GDPR, you have the following rights over your data and its use:
The right to be informed about what data we are collecting on you and how we will use it
The right of access – you can ask to see the data we hold on you
The right to rectification – you can ask that we update or correct your data
The right to object – you can ask that we stop using your data for a particular purpose
The right to erasure – you can ask us to delete the data we hold on you
The right to restrict processing – you can ask that we temporarily stop using your data while the reason for its use or its accuracy are investigated
Though unlikely to apply to the data we hold and process on you, you also have rights related to portability and automated decision making (including profiling)
All requests related to your rights should be made to the Data Protection Officer at workshops@arbutusmusic.net. We will respond within one month.
You can find out more about your rights on the Information Commission’s Office website
What will we do if anything changes?
If we make changes to our privacy statements or processes we will post the changes here. Where the changes are significant, we may also choose to email individuals affected with the new details. Where required by law, will we ask for your consent to continue processing your data after these changes are made.