Privacy Policy for Paul Andrews Music

Last updated: 11/07/2026

  1. Introduction

Welcome to Paul Andrews Music. I am committed to protecting your privacy and ensuring that your personal data is handled safely and lawfully . This Privacy Policy explains how I collect, use, and protect your information when you visit my website, in compliance with the EU General Data Protection Regulation (GDPR) .

  1. Who I Am and How to Contact Me

For the purposes of the GDPR, I am the Data Controller of your personal data .

– Website: www.paulandrewsmusic.com

– Email: paul@paulandrewsmusic.com

If you have any questions about this policy or how I handle your data, please contact me using the details above. You also have the right to lodge a complaint with your national Data Protection Authority .

  1. What Data I Collect and Why

I may collect and process the following types of personal data:

– Data You Provide Voluntarily: This includes information you give me when you contact me via email or fill in a form on my website (e.g., name, email address, and the content of your message). This data is used solely to respond to your inquiries .

– Data Collected Automatically: When you visit my website, I automatically collect certain technical data, such as your IP address, browser type, and information about your visit (e.g., pages viewed, time spent on the site). This helps me understand how visitors interact with my site and allows me to improve the user experience .

– Cookies and Tracking: My website may use cookies. Cookies are small text files placed on your device that help the website function effectively and provide usage information. For more details, please see the Cookies section below .

  1. Legal Basis for Processing Your Data

Under the GDPR, I must have a legal basis to process your personal data. I rely on the following:

– Consent: When you contact me via email or fill out a form, you are giving me your consent to process your data for the purpose of responding to you. You can withdraw this consent at any time .

– Legitimate Interests: I process data for analytics and website improvement based on my legitimate interest in understanding how my site is used and ensuring it functions correctly. I have assessed this interest and balanced it against your privacy rights, ensuring it does not override them .

– Legal Obligation: I may be required to process data to comply with legal or regulatory obligations.

  1. Data Sharing and Transfers

I do not sell your personal data to third parties. I may share your data with trusted third-party service providers who assist me in operating my website and conducting my business, such as my web hosting provider. These providers are contractually obligated to keep your data secure and only process it in accordance with my instructions . I do not transfer your personal data outside the European Economic Area (EEA) unless I have ensured appropriate safeguards are in place.

  1. Data Retention and Security

I will only retain your personal data for as long as necessary to fulfill the purposes it was collected for, including for the purposes of satisfying any legal, accounting, or reporting requirements .

I have implemented appropriate technical and organizational security measures to protect your personal data against accidental loss, unauthorized access, or alteration .

  1. Your Data Protection Rights

Under the GDPR, you have the following rights concerning your personal data :

– Right of Access: You have the right to request a copy of the personal data I hold about you.

– Right to Rectification: You have the right to have any inaccurate or incomplete data corrected.

– Right to Erasure (Right to be Forgotten): You have the right to ask me to delete your personal data in certain circumstances.

– Right to Restrict Processing: You can request that I limit the processing of your personal data.

– Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format.

– Right to Object: You have the right to object to the processing of your personal data based on legitimate interests.

– Rights Related to Automated Decision-Making: I do not use automated decision-making or profiling.

To exercise any of these rights, please contact me using the details in Section 2. I will respond to your request within one month.

  1. Cookies

My website uses cookies to enhance your browsing experience and to collect analytics data . I use analytical/performance cookies (like Google Analytics) to help me understand how visitors use my website, so I can improve its content and functionality .

Under the GDPR, I am required to obtain your consent before placing any non-essential cookies on your device . When you first visit my site, you will see a cookie banner informing you of my use of cookies and asking for your consent. You can choose to accept or decline non-essential cookies. You can also change your cookie preferences at any time through the cookie settings on my website .

  1. Changes to This Policy

I may update this Privacy Policy from time to time. Any changes will be posted on this page, and the “Last updated” date will be revised . I encourage you to review this page periodically to stay informed about how I protect your data.

Scroll to Top