Windmill Music Privacy Policy

What information do you keep?

We store user details such as names, email addresses, IP addresses, passwords, and the data you put into the system. Errors may also be logged for the purpose of fixing errors.

Your information is stored on a web server hosted in the UK. We use external sites to take payments, for sending emails and to monitor website traffic. When we use third parties, we take the appropriate measures to ensure they are also compliant with the GDPR. We do not pass on your details to anyone else.


How long do you keep my data?

We periodically delete user accounts that have been inactive for over 5 years. You can delete your account at any time. The nature of the site is such that we plan to keep family heritage information about individuals indefinately, although we will only guarantee it is kept for the period which is paid for.


Data security

It is our obligation to keep your data safe and so have technical, software, physical and administrative systems and procedures in place to protect your information. We make our best efforts to keep your personal information private, and if we are knowingly subject to a data breach then we will notify those affected without undue delay, as well as taking appropriate action. Any information you submit is sent at your own risk insofar as the transmission of information via the Internet is not completely secure.


What rights do I have under GDPR?

  1. The right to be informed: this Privacy Notice informs you of how we handle your data.
  2. The right of access: if you would like to see what data about you we handle, you can submit a Subject Access Request (SAR) to CustomerServices@windmill-music.org
  3. The right to rectification: if you would like us to correct any errors the data we hold on you, please let us know and we will update it accordingly.
  4. The right to erasure: if you would like us to erase any of the data we hold on you, please ask us and we will be happy to erase it provided this does not conflict with our retention period or any legal requirement to retain it.
  5. The right to restrict processing: if you would like us to restrict the processing of your data, please let us know, and we shall cease to use it.
  6. The right to data portability: if you would like an output of your data that we are process, you are able to print to export it. Please get in touch with us to request other formats.
  7. The right to object: if you would like to object to the processing of your data, for example, the sending of marketing communications, please use the unsubscribe link within the message, or contact us to request removal from our marketing list.
  8. Rights in relation to automated decision-making and profiling: we do not perform any fully automated-decision making.

You have the right to withdraw consent at any time. You also have the right to complain to the Information Commissioner's Office (ICO) if you feel we have not treated your information properly.


Links to external websites

This privacy notice only applies to this website; therefore, when you follow any links from this to other websites, you should read their privacy notices.