Privacy Policy of Harbour Sound Studios Ltd
Effective date: 16 July 2026
1. Introduction and company information
This Privacy Policy explains how Harbour Sound Studios Ltd ("we", "us", "our") collects, uses, discloses, stores, and protects personal data when you interact with us, including when you visit our website, contact us, make an enquiry, book studio services, attend sessions, subscribe to communications, or otherwise engage with our music-related services.
Data controller: Harbour Sound Studios Ltd
Registered / business address: Harbour Sound, 12 Leeman Road, York, YO26 4XJ, UK
Email: [email protected]
Phone: +44 1904 628 473
We are a music business providing studio, production, recording, rehearsal, and related creative services. This Privacy Policy is intended to be comprehensive and should be read together with any other privacy notices or terms we provide to you in specific contexts.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity and contact details: name, email address, phone number, postal address, organisation or band name, role, and preferred contact method.
- Booking and transaction information: session bookings, enquiries, invoices, payment status, purchase history, and service preferences.
- Communication data: correspondence with us by email, telephone, forms, social media, or other channels.
- Technical data: IP address, browser type, device identifiers, operating system, access times, pages viewed, and referring website.
- Usage data: information about how you use our website, services, and communications.
- Content and creative materials: recordings, session notes, uploads, files, metadata, creative briefs, and related project materials submitted by you or created during our services.
- Marketing preferences: consent choices, subscription status, and communication preferences.
- Special category data: we do not generally seek to collect special category personal data. However, such data may be provided incidentally in communications or project content, for example if included in lyrics, notes, or correspondence. Where this occurs, we will process it only where permitted by law and with appropriate safeguards.
We collect personal data directly from you, from your use of our website and services, and occasionally from third parties such as collaborators, booking platforms, payment providers, or publicly available sources where appropriate.
3. Purpose of data processing
We use personal data for the following purposes:
- to respond to enquiries and provide quotations;
- to manage bookings, sessions, studio access, and client accounts;
- to deliver recording, production, rehearsal, and related services;
- to communicate about projects, schedules, invoices, support, and operational matters;
- to process payments, issue invoices, and maintain financial records;
- to administer our website and improve user experience;
- to send service updates, marketing communications, or newsletters where permitted;
- to protect our business, premises, equipment, staff, and clients;
- to comply with legal and regulatory obligations;
- to establish, exercise, or defend legal claims;
- to analyse service performance, customer demand, and operational efficiency.
Where relevant, we may use data for administrative, archival, or quality assurance purposes connected with music production and studio services.
4. Legal basis for processing
We process personal data only where we have a lawful basis to do so. Depending on the context, our legal bases may include:
- Consent: where you have given clear consent, for example for certain marketing communications or optional cookies.
- Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
- Legal obligation: where processing is necessary to comply with applicable law, tax rules, accounting requirements, or lawful requests from authorities.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided these are not overridden by your rights and interests. This may include managing bookings, improving services, securing systems, preventing fraud, and maintaining business records.
For special category data, where applicable, we will rely on a valid condition under applicable law, such as your explicit consent or another permitted basis, and we will apply heightened protection measures.
5. Data sharing and third parties
We do not sell personal data. We may share personal data with third parties only where necessary for the purposes described in this Privacy Policy and subject to appropriate safeguards.
Third-party recipients may include:
- payment processors and banking providers;
- accountants, auditors, legal advisers, and professional consultants;
- IT, hosting, cloud storage, analytics, website maintenance, and cybersecurity providers;
- email marketing and customer relationship management providers;
- booking, scheduling, and project management platforms;
- equipment suppliers, contractors, and service engineers where necessary for operations;
- public authorities, regulators, law enforcement bodies, courts, or other parties where required by law or to protect legal rights.
We require third parties to process personal data only on our instructions where they act as processors, or otherwise to act as independent controllers where appropriate. We seek to ensure that any data sharing is limited, proportionate, and secure.
6. Data transfer to third countries
Where personal data is transferred outside the UK or, where applicable, outside the EEA, we will take appropriate measures to ensure the data remains protected. These may include relying on adequacy regulations, approved contractual safeguards, transfer impact assessments, and supplementary technical and organisational measures where necessary.
Some of our service providers may store or access data in countries outside the UK. In such cases, we will take reasonable steps to ensure that transfers comply with applicable data protection requirements.
7. Storage duration
We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, contractual, and operational requirements.
- Enquiry data: retained for a reasonable period after the enquiry closes, unless further retention is needed for follow-up or legal reasons.
- Client and booking data: retained for the duration of the business relationship and thereafter as required for record-keeping and legal compliance.
- Financial records: retained for the period required by law and standard accounting practice.
- Marketing data: retained until you unsubscribe, withdraw consent, or object where applicable.
- Project materials and creative content: retained according to the relevant contract, project instructions, storage arrangements, and legal or business requirements.
- Technical and website data: retained for security, analytics, and operational purposes for limited periods appropriate to the purpose.
When personal data is no longer needed, we will delete, anonymise, or securely archive it as appropriate.
8. User rights
Subject to applicable law, you may have the following rights regarding your personal data:
- Access: to request confirmation of whether we process your personal data and to receive a copy of that data.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data where there is a lawful basis to do so.
- Restriction: to request that we limit processing in certain circumstances.
- Data portability: to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller.
- Objection: to object to processing based on legitimate interests and, where applicable, to direct marketing.
To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.
If you withdraw consent, we may still process your personal data where we have another lawful basis, such as a contract or legal obligation.
If you wish to withdraw consent to marketing emails, you can use the unsubscribe link in the communication or contact us directly.
10. Right to complain
If you are concerned about how we handle your personal data, please contact us first so that we can try to resolve the matter.
You also have the right to lodge a complaint with the relevant data protection supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO). We encourage you to contact us first, but you are entitled to raise a complaint with the ICO at any time.
11. Data security
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include access controls, password protection, secure storage, staff confidentiality obligations, encryption where appropriate, regular backups, and security monitoring.
While we work to protect your data, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security. However, we will take reasonable steps to prevent and address security incidents in line with applicable law.
12. Contact information
If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
Harbour Sound Studios Ltd
Harbour Sound, 12 Leeman Road, York, YO26 4XJ, UK
Email: [email protected]
Phone: +44 1904 628 473
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal obligations, or operational requirements. When we make material changes, we will take reasonable steps to notify you, such as by posting the updated policy on our website or by other suitable communication methods.
The revised policy will take effect from the date stated at the top of the document. We encourage you to review this Privacy Policy periodically to stay informed about how Harbour Sound Studios Ltd handles personal data.