Here is a complete, GDPR-compliant privacy policy for Matthew Hayter Music, tailored to a site that includes only a basic contact form and Cloudflare integration.

Privacy Policy

Last updated: May 18, 2025

At Matthew Hayter Music (“we”, “us”, or “our”), we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect when you visit our website, how we use it, and your rights under the General Data Protection Regulation (GDPR).

This policy applies only to this website, matthewhaytermusic.com, and its direct interactions with you.

What Data We Collect

When you use the contact form on our website, we may collect the following personal data:

Your name (if provided)
Your email address
The contents of your message

We do not collect sensitive personal data, and we do not use any cookies, tracking scripts, or analytics software on this site.

Why We Collect Your Data

We collect personal data only for the purpose of:

Responding to your inquiries or messages submitted through the contact form

We do not use your information for marketing, profiling, or automated decision-making. Your data is never added to a mailing list or shared with advertisers.

Legal Basis for Processing

Our legal basis for processing your data is:

Consent – You voluntarily provide your information by submitting the contact form. We process this data only to respond to your message.
Legitimate Interest – We may retain limited correspondence to manage communication history and ensure appropriate follow-up.

You may withdraw your consent at any time by contacting us (see Contact section).

How We Store and Protect Your Data

Messages sent via the contact form are stored securely in our website infrastructure and may be accessed by the site owner.
We use SSL encryption (HTTPS) to protect data transmission.
Access to stored data is restricted to authorized personnel only.

We retain your message only as long as necessary to respond, and for no more than 12 months.

Third-Party Services

This website uses Cloudflare, a trusted content delivery and security provider, to:

Ensure reliable site performance
Protect the site from malicious traffic

Cloudflare may temporarily process technical data (e.g., IP addresses, browser information) strictly for security purposes. No personally identifying or marketing-related tracking is performed.

Cloudflare is fully compliant with GDPR and has implemented EU-approved data transfer mechanisms, including Standard Contractual Clauses and participation in the EU-U.S. Data Privacy Framework.

We do not use any analytics services (e.g., Google Analytics), advertising cookies, or embedded third-party media.

Your GDPR Rights

If you are an EU resident, you have the right to:

Access the personal data we hold about you
Rectify inaccurate or incomplete data
Request deletion of your data (“right to be forgotten”)
Restrict or object to processing
Withdraw consent at any time
Complain to your national data protection authority if you believe your rights have been violated

To exercise any of these rights, please contact us directly (see below).

Cookies and Tracking

This website does not use cookies, analytics, or tracking technologies beyond what is strictly necessary for security.

Cloudflare may set minimal essential cookies to detect bots or enhance security. These do not track your behavior and do not require opt-in consent under GDPR.

Contact

For privacy-related questions, data requests, or to withdraw consent, contact us via the website contact form.

https://matthewhaytermusic.com/contact/

We are committed to resolving your concerns promptly and in accordance with applicable data protection laws.