Data Protection & Privacy Policy

1. Data Controller

• Name: Hannah Marshall

• Email: hanfield@fastmail.com

• Website: https://www.hannahmarshall.net

Hannah Marshall (hereafter “we,” “our,” or “us”) operates the website https://www.hannahmarshall.net. We are the Data Controller responsible for your personal data.

2. Personal Data Collected

We may collect the following types of personal data when you interact with our website or services:

• Contact information: name, email address, telephone number (e.g., via contact form or newsletter sign-up)

• Professional details: occupation, organisation, relevant background (e.g., for teaching, performance enquiries)

• Website usage data: IP address, browser type, device information, pages viewed, session duration, cookies

• Communications: messages you send via email or through our site (e.g., enquiry forms)

3. How We Use Your Data

Your personal data may be processed for the following purposes:

• Responding to enquiries about lessons, performances, collaborations or compositions

• Delivering newsletters or updates, based on your consent

• Managing bookings, payments, or scheduling for services

• Improving website functionality, analyzing user behavior, and deploying cookies or analytics for optimization

• Complying with legal obligations under data protection or tax law

Our legal basis for processing includes:

• Contract necessity (e.g., booking a lesson or concert)

• Legitimate interest (e.g., website analytics and improvements)

• Consent (e.g., for newsletters)

• Compliance with legal obligations

4. Data Retention

We retain your personal data only as long as needed for the original purpose, plus:

• Contact and booking records: up to 7 years for tax or legal compliance

• Newsletter consent data: until you withdraw consent or opt out

• Analytics / cookies: typically 1–2 years, as defined in our cookie policy

5. Your Rights

Under data protection law (including GDPR, if you’re in the UK or EU), you have the right to:

1. Access your personal data

2. Correct inaccurate or incomplete data

3. Erase your data (“right to be forgotten”)

4. Restrict or object to processing

5. Data portability

6. Withdraw consent at any time (e.g., unsubscribe from newsletters)

To exercise any of these rights, please contact us at hanfield@fastmail.com. We’ll respond within one month (or two, in complex cases).

6. Sharing Your Data

We do not sell or rent your personal data. We may share it with:

• Service providers: e.g., email, hosting, payment processors—under confidentiality obligations

• Legal authorities: when required by law or a court order

We always take steps to ensure any third parties maintain adequate data protection safeguards.

7. International Transfers

As of this writing, our data processing takes place within the UK. If data is transferred internationally (e.g., through cloud services), we ensure adequate safeguards such as:

• Standard Contractual Clauses (SCCs)

• Data Processing Agreements (DPAs) with our providers

8. Cookies & Tracking

We use cookies and similar technologies to:

• Facilitate website functionality (e.g., remembering your preferences)

• Analyse site usage to improve performance

A separate Cookie Policy or banner informs you of these when you first visit. Most cookies can be disabled in your browser settings.

9. Security Measures

We use appropriate measures to protect your data, including:

• HTTPS encryption for all website pages

• Secure hosting with firewalls and regular backups

• Access control and strong authentication for systems handling personal data

10. Policy Updates

We may update this policy periodically (e.g., due to changes in law or practice). We’ll post the effective date at the top and notify subscribers of substantive updates.

Effective date: 14 July 2025

Contact & Queries
If you have any questions, concerns, or wish to exercise your rights, please email hanfield@fastmail.com.

​

Blog