Privacy Policy

Last updated: 21 September 2026

1. Introduction

Mark Midwinter Drums is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how I collect, use, store and protect personal information when you visit my website, contact me or use my services.

My services include session drumming, remote drum recording, live performance and drum tuition.

This policy applies to www.markmidwinterdrums.com and personal information collected in connection with these services.

Data controller: Mark Midwinter, trading as Mark Midwinter Drums.

Email: mark@markmidwinterdrums.com

Location: Reading, Berkshire, United Kingdom.

2. Information I collect

Depending on how you interact with me, I may collect the following information:

Recording project information, including client contact details, project requirements, audio recordings and associated files.
Live performance booking information, including client contact details, event information, venue details and performance requirements.
Drum tuition information, including student names, lesson bookings and parent or guardian contact details where applicable.
Your name, email address and telephone number.
Information provided through website contact forms, emails or other enquiries.
Billing and payment information needed to issue invoices and maintain business records.
Technical information about website visits, such as device type and website usage, through cookies or analytics tools.

I only collect information relevant to providing my services or running my business.

3. How I use your information

I use personal information to:

Arrange, manage and deliver session drumming and remote recording projects, including communication with clients and the delivery of recording files.
Arrange and manage live performances, including bookings, scheduling, quotations and communication with clients, venues and event organisers.
Arrange and manage drum lessons, including student bookings, scheduling and communication with students or their parents and guardians.
Respond to general enquiries and provide quotations.
Issue invoices and maintain financial records.
Maintain relevant records of previous bookings, projects, lessons and professional correspondence.
Maintain the functionality and security of my website.
Understand and improve my website and services.

I will not automatically add you to a marketing mailing list simply because you have contacted me.

If I send marketing communications, I will only do so where permitted by applicable law and will provide a way to opt out.

4. Legal basis for processing information

Under UK data protection law, I must have a lawful reason for using your personal information.

The legal bases relevant to my business are:

Contract: To take steps towards entering into a contract with you or to provide services you have booked, including recording projects, live performances and drum lessons.

Legal obligation: To maintain financial and accounting records where required by law.

Legitimate interests: To respond to general business enquiries, maintain relevant business communications and records, protect my website and improve my services, where these interests are not overridden by your rights.

Consent: Where required, such as for certain website cookies or marketing communications.

Where consent is the legal basis, you may withdraw it at any time.

5. Children's information

I provide drum tuition to students of different ages.

Where a student is under 18, I may collect their name and information relevant to their lessons, together with the contact details of a parent or guardian where appropriate.

This information is used for lesson administration, communication and the delivery of tuition.

I take particular care when handling children's information and do not use it for unrelated purposes.

6. Sharing your information

I do not sell personal information.

I may share information with trusted service providers where necessary to operate my business. These may include:

Cloud storage and file-transfer providers used to manage and deliver recording projects.
Musicians, venues and event organisers where sharing relevant information is necessary to arrange or fulfil a performance booking.
Online meeting providers used for remote drum lessons.
Wix, which provides website hosting and related services.
Email providers.
Payment processors and accounting providers.

I share only the information reasonably necessary for the relevant purpose.

7. How your information is stored and protected

I take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

Information may be stored in secure email accounts, business records and third-party systems used to deliver my services.

Access to personal information is limited to those who need it for legitimate business purposes.

8. How long I keep information

I retain personal information for as long as reasonably necessary for the purposes for which it was collected, taking account of my ongoing business needs and any applicable legal obligations.

This may include retaining previous client and student contact details, email correspondence, recording project information, performance bookings and lesson records where there is a continuing legitimate business reason.

Such reasons may include managing an ongoing professional relationship, handling follow-up enquiries, maintaining relevant records of previous services or responding to questions about past bookings and projects.

I do not automatically delete correspondence or contact details immediately after recording projects, performances or lessons have ended.

Retention is determined by the nature of the information, its continued relevance to my business, any legal requirements and whether it may reasonably be needed in connection with previous services or potential disputes.

Financial and accounting records are retained for the period required by applicable UK tax law.

I periodically consider whether retained information is still necessary, including when circumstances change or an individual requests its removal.

Information that is no longer required will be securely deleted or anonymised where appropriate.

Requests for deletion will be considered in accordance with applicable data protection law, recognising that certain information may need to be retained to meet legal obligations or establish, exercise or defend legal claims.

9. Cookies and website analytics

My website is hosted on Wix and uses cookies and similar technologies.

Essential cookies may be necessary for website functionality, security and remembering privacy preferences.

Depending on the services enabled on the website, additional technologies may be used for analytics, embedded media or other features.

Where consent is legally required for these technologies, you will be asked for permission before they are activated.

Where an exemption is used instead, the required information and objection options will be provided.

You can manage your preferences through the website's cookie settings, where available, or through your browser.

10. Third-party websites and embedded content

My website may contain links to external websites, social media platforms and video services.

These services may collect information when you visit their websites or interact with embedded content.

Their handling of personal information is governed by their own privacy policies.

I recommend reviewing the relevant privacy policies before providing personal information to those services.

11. International data transfers

To provide my services, I use third-party providers including Dropbox, email services, Wix and others.

These services may store or process personal information outside the United Kingdom, including in the United States and other countries.

Where personal information is transferred internationally, I use providers that offer appropriate data protection arrangements, such as recognised international data transfer agreements or other lawful safeguards.

For further information about how these providers handle and protect personal information, please refer to their privacy policies or contact me at mark@markmidwinterdrums.com.

12. Your data protection rights

Under UK data protection law, you may have the right to:

Request access to the personal information I hold about you.
Ask for inaccurate information to be corrected.
Request deletion of your information in certain circumstances.
Request that processing of your information be restricted.
Request a portable copy of certain information.
Withdraw consent where processing relies on consent.

Your right to object: You may object to processing based on legitimate interests. You also have the right to object to the use of your personal information for direct marketing at any time.

These rights are subject to the conditions and exceptions set out in data protection law.

To exercise your rights, please contact me at:

mark@markmidwinterdrums.com

13. Complaints

If you have concerns about how your personal information is handled, please contact me first so that I can investigate.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Website: https://ico.org.uk

14. Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to my services, website or legal requirements.

Any updates will be published on this page, with the date of the latest revision shown at the top.

15. Contact

If you have any questions about this Privacy Policy or how your personal information is handled, please contact:

Mark Midwinter

Trading as Mark Midwinter Drums

Email: mark@markmidwinterdrums.com

Website: www.markmidwinterdrums.com