Who I am
I'm Ed Arnold, a self-employed bagpiper trading as Yorkshire Bagpiper. This notice explains how I use personal information through www.yorkshirebagpiper.co.uk, including enquiries about performances and tuition, and the client booking area.
For privacy questions or requests, email info@yorkshirebagpiper.co.uk or call 07846 505260.
Enquiries and bookings
When you contact me, I use the details you provide to answer your questions, prepare a quote and arrange your performance or lessons. These may include your name, email, telephone number, event date and times, venue, playing arrangements, tune requests and messages.
For bookings, I also keep the agreed fee, payments recorded, balance, booking status and any changes you request. The booking portal records payments manually; it does not collect card details or take payments.
I use this information to take steps at your request before entering an agreement and to fulfil our agreement. I keep the financial records required for tax and accounting to meet my legal obligations. Necessary business administration, website security and handling disputes are based on my legitimate interests in running and protecting the business.
Please provide only the personal information needed for the enquiry or booking. If you are arranging an event for someone else, please make them aware of the information you give me. Without the necessary contact and event details, I may be unable to provide a quote or complete the arrangements.
Your booking account
If I create a client account for you, the website stores your account and booking details. You can see the bookings I have assigned and shared with you. A change request does not automatically alter your booking; I review it and confirm any new arrangements separately.
I manage the records as the website administrator. Private administrative notes are not shown in your client area. Please keep your login details secure and contact me if you suspect someone else has accessed your account.
You can request a private email sign-in link instead of using a password. I can also send one from your shared booking. Each link expires after 15 minutes and works once. Anyone with an unused link could open the associated account, so please keep it private and do not forward it. Expired or used links can be replaced by requesting a new one.
The portal does not make automated decisions about whether you can book or what fee you pay.
Who has access and the services I use
I am the only person with routine access to my business email, booking records and Piping Calendar. Providers may process information as needed to operate, secure or support their services, and information may be disclosed where required by law.
Fasthosts provides my website and business email hosting. Manual website backup copies are held in my hosting account for recovery. See the Fasthosts privacy notice.
Google Calendar helps me organise performances. The website sends the booking reference, occasion, dates, times, venue, agreed playing and tunes to my Piping Calendar for confirmed or completed bookings. It does not send client account contact details, fees, payment records, private notes or change-request messages, and it does not invite clients to events. Event details may still identify an occasion.
Only I connect the website to Google. Clients do not need a Google account to use the booking area. The connection can list my calendars and manage events on calendars I own; the selected destination is Piping Calendar. Changes in Google are not imported into your booking. See Google's privacy policy.
Some services, including Google and SoundCloud, operate internationally, so their processing may take place outside the UK. Google describes its use of adequacy decisions, the UK Extension to the EU–US Data Privacy Framework and standard contractual clauses in its data-transfer safeguards. SoundCloud describes its international transfers and contractual safeguards in its privacy policy. These providers' published information explains their arrangements; please contact me if you need help finding the relevant details.
Protecting enquiry forms from spam
I use Cloudflare Turnstile on the enquiry forms to help distinguish genuine visitors from automated spam. It processes technical information, such as your IP address and browser or device information, to perform this security check. Cloudflare states that Turnstile does not access, store or transmit the contents of your enquiry fields. See Cloudflare’s Turnstile Privacy Addendum for details, including its international processing arrangements. If the check prevents you from sending an enquiry, you can contact me by telephone or email instead.
Cookies, fonts and media
The website uses cookies needed for account login and security. WordPress login cookies normally last two days, or two weeks if you select “Remember Me”; logging out removes the login cookies. Browser settings let you manage cookies, although blocking necessary cookies may prevent login from working. Email-link sign-in also uses a 15-minute browser-check cookie. A session opened using an email link lasts up to 12 hours, or ends sooner when you sign out or your browser clears the session cookies.
YouTube, Facebook and SoundCloud: video preview images are served from this website. The external player loads only when you choose its play button. The note below the preview explains that doing this connects to the provider and may involve cookies and data sharing. Other players remain unloaded until you choose them. Your choice is not saved for future page visits; refresh or leave the page to unload the player. This does not itself erase cookies already set by the provider.
Once loaded, the provider may receive your IP address, browser details and information about your use of the player, and may associate activity with an account you hold with it. You can leave the player unloaded and continue using this website. See Google's cookie information , SoundCloud's cookie policy and Facebook's cookie policy.
Google Fonts: the site requests fonts from Google to display its typefaces. These requests disclose technical information, including your IP address and the font requested. See Google Fonts privacy information.
Comments: if you leave a public comment, WordPress records the details you submit, your IP address and browser information to help manage comments and prevent spam. Your comment and chosen display name may become public after approval. If you choose to save your comment details in cookies, those cookies normally last a year. The site can display Gravatar avatars using a hash of the commenter's email address; see Automattic's privacy notice.
Links to my social profiles and other websites take you to services with their own privacy policies.
How long I keep information
Enquiries that do not lead to a booking or lessons are normally deleted within 12 months of the last contact, unless the enquiry remains active or there is another necessary reason to keep the information.
I keep records needed for my self-employed tax returns for at least five years after the relevant 31 January tax-return submission deadline, and longer where a tax requirement or unresolved matter makes this necessary. This does not mean keeping every personal detail for the same period.
I personally review additional notes, messages, inactive portal accounts and published comments annually, removing or anonymising information that is no longer needed. Deletion is manual rather than an automatic portal feature.
I also review manual backup copies during that review and after significant site updates. Obsolete copies are removed when a usable replacement is available and the earlier copy is no longer needed for recovery or an unresolved issue. Deleted information may remain in a backup until that copy is removed. If a backup is restored, relevant deletion requests will be reapplied.
Your rights
Depending on the circumstances, you can ask to access, correct, delete, restrict or receive a portable copy of your personal information. You may also object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. Some rights have exceptions, including information I must retain for legal obligations.
Email info@yorkshirebagpiper.co.uk with your request. I may need to check your identity before disclosing or changing information.
You can also raise a concern with the Information Commissioner's Office, the UK's data-protection regulator.
Tuition and policy updates
This notice covers tuition enquiries made through this website. It does not describe all information used in lesson delivery or the separate Student Portal. Please contact me before enrolling if you need information about those arrangements, including lessons for children.
I will update this notice when the way this website handles personal information changes.