Privacy Policy

 Privacy Policy – Once Upon a Song

Once Upon a Song is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and stored when you visit this website or engage our services, including live performances.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and reflects the standard functionality provided by GoDaddy websites.

1. Who We Are

Once Upon a Song is a personalised songwriting and live performance business offering bespoke music services, based in the United Kingdom.

For the purposes of data protection law, Once Upon a Song is the data controller of any personal data you provide.

If you have any questions about this policy, you can contact us at:

Email: jess@onceuponasong.co.uk

2. Information We Collect

We collect personal information when you:

• Complete a contact or enquiry form
• Contact us via email or phone
• Voluntarily provide details for the creation of a personalised song
• Book a live performance for an event or special occasion

This information includes:

• Your name
• Email address
• Phone number
• Event details, including date, time, venue, and performance requirements
• Any personal details you choose to share relating to your enquiry, commission, or event

3. How Your Information Is Used

Your personal data is used only to:

• Respond to enquiries
• Communicate with you about your request, commission, or event booking
• Create and deliver your personalised song
• Provide and manage live performances
• Provide customer support
• Provide you with marketing information where you have agreed to receive it

3A. Lawful Basis for Processing

Under UK GDPR, we process your personal data based on the following lawful grounds:

• Consent – For marketing purposes only
• Contract – where processing is necessary to fulfil commissioned services or performance bookings
• Legitimate Interests – to operate our business effectively and respond to enquiries

4. Website Hosting & Third-Party Services

This website is built and hosted using GoDaddy.

GoDaddy may automatically collect certain technical data, such as IP address, browser type, and device information, for security, performance, and analytics purposes. This data is processed in accordance with GoDaddy’s own Privacy Policy. https://www.godaddy.com/en-uk/legal/agreements/archived-privacy-policy 

5. Cookies & Analytics

This website may use essential cookies and basic analytics tools provided by GoDaddy to:

• Ensure the website functions correctly
• Understand how visitors use the site

These cookies do not collect personally identifiable information and are not used for advertising or tracking purposes.

6. Data Storage & Security

Reasonable technical and organisational measures are taken to protect your personal data. Information is stored securely and accessed only when necessary to provide our services.

Your data is retained for 7 years to fulfil the purpose for which it was collected, including legal, accounting, or reporting requirements.

7. Sharing Your Information

Your personal information will not be sold, rented, or shared with third parties, except where required by law or to comply with legal obligations.

8. Photography, Video & Live Performances

During live performances or events, photographs or short video recordings will occasionally be taken for promotional purposes, such as website content or social media. No identifiable images or recordings will be shared publicly without prior consent from the client or participants.

If you do not wish for any photography or recording to take place, please notify us in advance of your event.

9. Your Rights

Under UK GDPR, you have the right to:

• to access your personal information (by way of a subject access request)
• to have your personal information rectified if it is inaccurate or incomplete
• in certain circumstances, to have your personal information deleted or removed
• in certain circumstances, to restrict the processing of your personal information
• a right of data portability, namely, to obtain and reuse your personal information for your own purposes across different services
• to object to direct marketing
• not to be subject to automated decision making (including profiling), where it produces a legal effect or a similarly significant effect on you
• to claim compensation for damages caused by a breach of the data protection legislation
• if we are processing your personal information with your consent, you have the right to withdraw your consent at any time.
• to complain to us about the processing of your personal information

To exercise these rights, please contact:

jess@onceuponasong.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK data protection regulator.

Website: https://ico.org.uk

10. Changes to This Policy

This Privacy Policy may be updated occasionally. Any changes will be posted on this page.

11. Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Email: jess@onceuponasong.co.uk