This policy explains what personal information this site collects, why, and what rights you have over it.

Who I am

Richard F. Jackson, composer and musician, Cardiff, Wales. I am the data controller for this site. You can reach me through the contact page.

What I collect and why

Contact form: your name, email address and message, used to reply to you. Lawful basis: legitimate interests (answering enquiries), or steps towards a contract if you are asking about work.
Mailing list: your email address, and your name if you give it, used to send news about my music. Lawful basis: consent, which you can withdraw at any time using the unsubscribe link in every email.
Musicians' accounts: your name, email address and a securely stored password, used to share rehearsal material with musicians I work with. Lawful basis: legitimate interests.
Server logs: your IP address and browser details, recorded by the host to keep the site running and secure. Lawful basis: legitimate interests.

I do not use analytics or advertising tracking.

Cookies

The site sets only the cookies it needs to work, such as security cookies on forms and sign-in cookies for musicians' accounts. Embedded content from other services, such as videos and music players, may set cookies of its own.

Who else handles it

I do not sell your information or share it for marketing. Service providers handle it on my behalf for website hosting, email delivery, the mailing list and spam protection. Some are based outside the UK. Where information leaves the UK, it is protected by safeguards recognised under UK law, such as the International Data Transfer Agreement.

How long I keep it

Contact messages: up to two years after we last spoke.
Mailing list: until you unsubscribe.
Musicians' accounts: while we are working together.
Server logs: the host's standard short period.

Your rights

You can ask to see, correct or delete your information, to receive it in a portable format, and to object to or restrict how I use it. Contact me through the contact page and I will reply within one month. You can also complain to the Information Commissioner's Office.