Privacy Policy

Last Updated: 13th August 2025

Midlands Session Recordings (MSR) ("we," "us," "our") is committed to protecting your privacy and ensuring the protection of your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). This Privacy Policy explains how we collect, use, disclose, and protect your

personal information when you engage with our recording services for orchestras and musicians.

By using our services or providing us with your personal data, you consent to the practices described in this Privacy Policy.

1. Information We Collect

We may collect the following personal data from you when you engage with our services:

• Personal Identification Information: Name, email address, phone number, billing address, and payment information.

• Musical Content: Audio recordings, compositions, sheet music, and other musical content you provide or create during our recording sessions.

• Technical Data: Information such as IP address, browser type, device type, operating system, and usage data (e.g., page views, time spent on site) collected

automatically through cookies or other tracking technologies.

2. How We Use Your Information

We use your personal data for the following purposes:

• Providing Services: To schedule, deliver, and manage recording sessions, mixing, mastering, and related services.

• Communication: To communicate with you regarding our services, bookings, and any updates related to your projects.

• Billing and Payment: To process payments, manage billing details, and handle financial transactions.

• Service Improvement: To analyse usage patterns and improve the quality, efficiency, and performance of our services and website.

• Marketing (With Consent): We may send you promotional emails or updates about our services. You can withdraw consent for marketing communications at any time by following the unsubscribe link in emails or contacting us directly.

3. Legal Basis for Processing Personal Data (UK GDPR)

We process your personal data based on the following legal grounds under the UK GDPR:

• Performance of a Contract: Processing is necessary for the performance of a contract, such as providing recording services, fulfilling booking requests, and

managing payments.

• Legitimate Interests: We may process your data based on our legitimate interests, such as improving our services, preventing fraud, and ensuring the security of our website and services.

• Consent: Where required, we will obtain your consent for certain activities, such as sending marketing materials. You may withdraw consent at any time.

• Legal Obligation: We may need to process your personal data to comply with applicable laws, such as tax regulations or legal disputes.

4. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy. This includes retaining data to comply with legal obligations (e.g., tax

or accounting laws), resolve disputes, and enforce agreements. If you wish to have your personal data deleted, please contact us, and we will comply where possible, subject to

legal requirements.

5. Your Rights Under the UK GDPR

As a data subject, you have the following rights regarding your personal data under the UK GDPR:

• Right to Access: You can request access to the personal data we hold about you.

• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data we hold.

• Right to Erasure (Right to be Forgotten): You can request that we delete your personal data, subject to certain exceptions (e.g., legal obligations).

• Right to Restrict Processing: You can request that we restrict the processing of your personal data in certain circumstances (e.g., if you contest the accuracy of

the data).

• Right to Data Portability: You can request that we provide your personal data in a structured, commonly used, and machine-readable format for transfer to

another service provider.

• Right to Object: You can object to the processing of your personal data, especially in cases where we are processing it based on legitimate interests.

• Right to Withdraw Consent: If you have given us consent for processing your personal data (e.g., for marketing), you may withdraw that consent at any time.

To exercise any of these rights, please contact us at midlandsrecordings@gmail.com.

We will respond to your request in accordance with applicable UK GDPR timelines.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorized access, alteration, or destruction. These measures

include encryption, secure storage, and access control. However, no data transmission over the internet is fully secure, and we cannot guarantee the absolute security of your

data.

7. Sharing of Information

We do not sell, trade, or rent your personal information to third parties. However, we may share your data with trusted third-party service providers who help us operate our

business and provide our services (e.g., payment processors, hosting services). These third parties are required to protect your personal data in accordance with this Privacy

Policy and applicable data protection laws.

We may also disclose your data to comply with legal obligations or to protect our rights, property, or safety, as permitted by law.

8. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing them with your personal information.

9. International Data Transfers

If you are located outside the United Kingdom or European Economic Area (EEA), your personal data may be transferred to and stored in a country that does not have the same

level of data protection laws as your home country. In such cases, we ensure that appropriate safeguards are in place to protect your personal data, including the use of

standard contractual clauses or other legal mechanisms under UK GDPR.

10. Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal data from children. If we learn that we have inadvertently collected

personal data from a child under the age of 16, we will take steps to delete such data as soon as possible.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any updates will be posted on this

page with an updated "Last Updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, or if you wish to exercise your rights under the UK GDPR, please contact us at:

midlandsrecordings@gmail.com

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK's supervisory authority for data protection. You can contact the ICO

at:

Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, UK

Website: www.ico.org.uk

Phone: 0303 123 1113