Privacy Notice

Who is responsible for your information

Richard Bowie, operating Calmness Studio, is the data controller for the personal information used to provide this website and the Calmness Music service. This notice explains the purposes of that processing and how to raise a privacy request.

Information and why we use it

• Account information: email address, account identifiers and login credentials used for secure login, account recovery and access to the service. The basis is performance of our agreement with you.
• Membership records: subscription identifiers, membership status, paid period, cancellation status and issued album code records, used to manage access, prevent misuse and handle account questions. The bases are contract performance and legitimate interests in operating the service and preventing fraud.
• Storefront information: shopping bag contents and identifiers used to maintain your bag and send you to Shopify checkout. Shopify processes the customer and order information you supply there to fulfill purchases. The bases for our use are contract performance and applicable legal obligations.
• Support messages: information you choose to provide when contacting us, used to respond and resolve issues. The bases are contract performance or legitimate interests in answering inquiries.
• Technical and usage information: IP addresses, device and browser information, requests and error information that may be processed in delivering the website, diagnosing faults and preventing abuse. The basis is legitimate interests in maintaining a working and secure service.
• Mailing list information: email address and signup information you voluntarily provide through the linked signup service, used to send studio news with your consent. You can withdraw consent using the unsubscribe option in those messages.

The member account does not require a public profile, avatar or personal preferences.

Who may receive information

Service providers supporting hosting, account access, storage, diagnostics and support may process information needed to provide those services. Shopify processes storefront shopping and order information. Paddle receives information needed for the sale of Calmness Music, subscription management, payments, tax compliance and invoicing, and acts as Merchant of Record for those transactions. Its own privacy notice applies to its processing.

Information may also be shared with professional advisers, such as legal or accounting advisers, when needed, or with authorities when required by law. Information you send through Instagram is also processed by that platform under its own privacy terms.

Retention

We retain account and membership information for as long as needed to provide access, manage subscriptions and address account issues. Order and transaction records may need to be kept for legal, tax or accounting obligations. Support and technical records are kept only as needed for their purpose, including resolving disputes and preventing abuse. Information will be deleted or anonymised when it is no longer needed, subject to those obligations.

Security and international processing

We are committed to appropriate technical and organisational measures to protect personal information, including restricting access to those who need it to operate the service. No online service can guarantee absolute security.

Our service providers may process information outside your country. Where applicable law requires safeguards for international transfers, we will use legally recognised safeguards, such as adequacy decisions or standard contractual clauses as appropriate. You can contact us for information about processing relevant to your account.

Cookies and browser storage

The website uses essential browser storage for sign-in and shopping bag continuity. Linked Shopify checkout and Paddle checkout may use their own essential cookies and storage; their notices explain those uses. This notice does not authorize optional analytics or marketing cookies without any consent required by law.

You can manage or clear cookies and site storage through your browser settings. Blocking essential storage may prevent login or shopping bag features from working. Manage preferences on any linked service using that service's controls.

Your rights and contact

Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw consent for consent-based processing without affecting earlier lawful processing. You may also complain to your local data protection authority. Where UK or EEA data protection law applies, these include the corresponding GDPR rights and a response within one month, subject to lawful extensions.

To exercise your rights or ask a privacy question, contact Richard Bowie through Calmness Studio's Instagram account. Say that your message is a privacy request. We may need to verify your identity before acting. Do not send passwords, payment card details or sensitive documents in your initial message.