Skip to content
Marylees Sound Sanctuary

Legal

Privacy Policy

Last updated 20 August 2026

Marylees Sound Sanctuary ("we", "us", "Marylees") is run by Karen Middleton, based in Leicestershire, UK. This policy explains what personal data this website collects, why, and what rights you have over it. It's written in plain language rather than boilerplate — if anything here is unclear, email hello@maryleessoundsanctuary.co.uk and ask.

Who's responsible for your data

Karen Middleton, trading as Marylees Sound Sanctuary, is the data controller for anything collected directly through this website (the contact form). For anything you enter directly into the booking calendar, Bookwhen Ltd is a separate data controller — see "Third-party services" below.

Marylees Sound Sanctuary currently operates from home rather than a dedicated studio, so for personal safety a full postal address isn't published here. If you need it for a specific legal or regulatory reason, email hello@maryleessoundsanctuary.co.uk and we'll share it. We'll add a business address here once sessions move to a dedicated studio space.

What we collect, and why

This site collects personal data in exactly two places:

The contact form

Name, email address, what you're interested in, and your message — submitted voluntarily when you get in touch. Used only to reply to you, and processed via Netlify (our website host — see below). Legal basis: your consent in sending it, and our legitimate interest in responding to enquiries.

The booking calendar

Loading the calendar on the Book a Session page, and booking through it, sends data directly to Bookwhen, not to us first. That typically includes your name, email, and payment details for the session you're booking. See "Third-party services" below for how that's handled.

We don't run analytics, advertising trackers, or any hidden tracking scripts. We don't sell or share your data with anyone for marketing purposes.

Cookies

This site sets exactly one thing in your browser by default: a small local storage entry recording whether you've accepted or declined cookies, so the banner doesn't ask you again. That's strictly necessary to the site's own function and doesn't require consent under the ePrivacy rules.

The booking calendar on the Book a Session page is provided by a third party, Bookwhen, and only loads after you accept cookies or choose to load it directly — it isn't loaded automatically. Once loaded, Bookwhen may set its own cookies to run the booking flow; we don't control those directly. See Bookwhen's own privacy policy for what they collect.

The Sessions page has an embedded YouTube video, which works the same way — it only loads after you accept cookies or choose to load it directly. Once loaded, YouTube (operated by Google) may set its own cookies. See Google's privacy policy for what they collect.

You can change your cookie choice at any time by clearing your browser's local storage for this site, or by emailing us to ask what's stored.

Third-party services

  • Netlify — hosts this website and processes contact form submissions on our behalf as a data processor.
  • Bookwhen — provides the booking calendar embedded on the Book a Session page. Bookwhen acts as an independent data controller for anything you enter directly into it (bookings, payments).
  • YouTube (Google) — provides the video embedded on the Sessions page. It's loaded on request only, as described in "Cookies" above.

We don't use Google Fonts, Google Analytics, or any other third-party service that loads automatically when you visit — the site's fonts are hosted directly by us, and both the booking calendar and the YouTube video are loaded on request only.

How long we keep it

We keep contact form messages only for as long as needed to respond to you and for a reasonable period afterwards in case you follow up, then delete them. We don't keep booking data ourselves — that sits with Bookwhen, governed by their own retention policy.

Your rights

Under UK GDPR (and EU GDPR, if you're contacting us from the EU), you have the right to:

  • Ask what personal data we hold about you, and get a copy of it
  • Ask us to correct anything inaccurate
  • Ask us to delete your data
  • Object to or restrict how we use it
  • Withdraw consent at any time, where consent is the basis for processing

To use any of these, email hello@maryleessoundsanctuary.co.uk. If you're not satisfied with how we've handled your data, you can complain to the UK's Information Commissioner's Office at ico.org.uk, or your local supervisory authority if you're based in the EU.

Children

This site isn't directed at children, and we don't knowingly collect data from anyone under 16.

Changes to this policy

If this policy changes, we'll update the date at the top of this page. Meaningful changes will be reflected here before they take effect.