Privacy Policy
Last updated: 2026
This Privacy Policy explains how Third Wheel Music ("we," "us," "our") collects, uses, stores, and protects personal information when you contact us, request a quote, or book our services through www.thirdwheelmusic.com (the "Site").
We are committed to handling your personal data responsibly and in compliance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, the EU General Data Protection Regulation (EU GDPR), and applicable US state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).
1. Who We Are
Third Wheel Music is the data controller responsible for your personal information.
Contact details: Email: bookings@thirdwheelmusic.com Address: 28 Longfield Ave, Poulton-Le-Fylde, FY6 7DA
If you have any questions about this policy or how we handle your data, please contact us using the details above.
2. What Information We Collect
When you get in touch through our contact form, request a quote, or book us for an event, we may collect:
Name
Email address
Phone number
Event details (e.g. date, venue, event type)
Any other information you choose to include in a message to us
We do not knowingly collect sensitive personal data (such as health information, financial details, or government ID numbers) through our Site.
3. How We Collect Information
We collect personal information directly from you when you:
Fill in a contact or enquiry form on the Site
Email or message us directly
Book our services
We do not currently collect personal information through automated tracking technologies beyond standard, non-identifying analytics cookies (see Section 9, Cookies).
4. Why We Collect It and Our Legal Basis (UK/EU GDPR)
We process your personal information for the following purposes, relying on the legal bases set out below:
PurposeLegal BasisResponding to your enquiry or quote requestLegitimate interests (to respond to prospective customers) / Steps taken prior to entering a contractArranging and delivering a booked performancePerformance of a contractSending booking-related communications (confirmations, logistics, invoices)Performance of a contractOccasional marketing updates (only if you've opted in)ConsentComplying with legal or tax obligationsLegal obligation
Where we rely on consent (for example, marketing emails), you can withdraw that consent at any time — see Section 7.
5. How We Use Your Information
We use the personal information you provide to:
Respond to enquiries and provide quotes
Discuss, confirm, and deliver bookings
Communicate with you about your event
Maintain records for accounting and legal purposes
Improve our services and Site
We do not sell your personal information to third parties, and we do not use it for any purpose beyond what is described in this policy without asking you first.
6. Who We Share Your Information With
We do not sell, rent, or trade your personal information. We may share limited information with:
Service providers who help us operate our business (e.g. email providers, booking or accounting software, cloud storage) — these providers only process data on our instructions and are contractually required to protect it.
Professional advisors (e.g. accountants, insurers) where necessary.
Authorities, where required by law, regulation, or legal process.
We do not share your data with third parties for their own marketing purposes.
7. Your Rights (UK/EU GDPR)
If you are located in the UK or EU, you have the right to:
Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase your data ("right to be forgotten"), in certain circumstances
Restrict how we use your data
Object to processing based on legitimate interests or for marketing purposes
Data portability — receive your data in a portable format, where technically feasible
Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, contact us using the details in Section 1. We will respond within one month, as required by law.
You also have the right to lodge a complaint with a supervisory authority:
UK: Information Commissioner's Office (ICO) — ico.org.uk
EU: Your local data protection authority
8. Your Rights (US — California Residents / CCPA-CPRA)
If you are a California resident, you have the right to:
Know what personal information we collect, use, and disclose
Delete personal information we hold about you, subject to certain exceptions
Correct inaccurate personal information
Opt out of the sale or sharing of personal information (note: we do not sell or share personal information as defined under the CCPA/CPRA)
Limit use of sensitive personal information (not applicable, as we do not collect sensitive personal information)
Non-discrimination — we will not discriminate against you for exercising any of these rights
To exercise these rights, contact us using the details in Section 1. We may need to verify your identity before fulfilling your request.
Residents of other US states with comprehensive privacy laws (e.g. Virginia, Colorado, Connecticut, Utah) have similar rights, which we will honour on request.
9. Cookies
Our Site may use essential cookies necessary for it to function, and may use basic analytics cookies to understand how visitors use the Site. Where required by law (including under UK/EU rules on electronic communications), we will ask for your consent before setting non-essential cookies
10. International Data Transfers
If your personal information is transferred outside the UK or EEA (for example, to a service provider based in the US), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, the UK International Data Transfer Addendum, or transfers to organisations certified under an approved data protection framework.
11. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes described in this policy, including any legal, accounting, or reporting requirements. Enquiry data that does not result in a booking is typically retained for 12 months before being deleted. Booking-related records are retained for 5 years to meet UK tax and accounting obligations.
12. Data Security
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
13. Children's Privacy
Our Site and services are not directed at children, and we do not knowingly collect personal information from anyone under the age of 16 (or the relevant age of digital consent in your jurisdiction). If you believe a child has provided us with personal information, please contact us so we can delete it.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Email: bookings@thirdwheelmusic.com Address: 28 Longfield Ave, Poulton-Le-Fylde, FY6 7DA