Jean Murray Classical Music Edinburgh
Privacy Policy

Date Policy Last Updated: 04/01/2023

Introduction
I process personal data relating to clients and customers, and to those who are interested in the services I provide.
I am committed to complying with my legal obligations in respect of data protection and privacy.
This statement sets out the principles I apply when processing personal data. This statement describes the types of personal data I may collect about you. This statement also describes what I do with any data I collect about you, how I will keep it secure and the legal bases on which I rely for processing your data. This statement also informs you of your rights and how you can contact me.

The type of personal information I collect
Personal data is information that relates to an identified or identifiable individual. What identifies an individual could be as simple as a name or a number or could include other identifiers such as an IP address or a cookie identifier, or other factors.
I only collect the personal data I need to be able to provide you with the services you have asked me to provide or tell you about.

Personal/contact information: this can include your name, contact address, email addresses, telephone numbers. I require these details in order to contact you about your enquiry.

Digital information: IP addresses, and details of your interaction with my website and social media, should you engage with me through these channels.

How I get the personal information and why I have it
I will collect information about you when you make enquiries about my services, visit my website and engage with me on social media, or by e-mail.
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases I rely on for processing this information are:
• Legitimate interests. When it is necessary for the purposes of my legitimate interests as a business, I will do so in a way which might reasonably be expected from my relationship with you, and which does not impact materially on your fundamental rights, freedom and interests. I will not process your personal data on this basis if I believe your rights override mine. Instead, I may seek your specific consent, and/or another legal basis.
• Consent – I will obtain your explicit consent to process your personal data in a specific way, for example before sharing any personal details with a third party.
If you have any concerns about my data processing, please contact me using the details above. Please also see Your data protection rights below.

How I store your personal information
Your data is securely stored as follows:

Email addresses:
On servers provided by eUKHost. All servers are located in ISO 27001-certified data centres in the UK.
On Gmail: Emails are collected from my website and automatically forwarded to my personal Gmail account.

Contact details are stored on a secure desktop computer used only by me, and/or hard copy e.g. a card index.

I will only keep personal data for as long as is necessary to provide my services, or for as long as I reasonably need to keep the information for the lawful business purposes or to comply with a statutory or other legal requirement.

Electronic personal data will be securely deleted.

Hard copies of personal data will be shredded.

Your data protection rights
Under data protection law, you have rights including:

Your right of access – You have the right to ask me for copies of your personal information.
Your right to rectification – You have the right to ask me to rectify personal information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.
Your right to erasure – You have the right to ask me to erase your personal information in certain circumstances. When responding to such requests, I will tell you how such restrictions or deletions may affect your interests.
Your right to restriction of processing – You have the right to ask me to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that I transfer the personal information you gave me to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you.

Please contact me using the contact information detailed in this document if you wish to make a request.