Privacy Policy

1. Introduction

We take the protection of your personal data very seriously. This Privacy Policy explains how we collect, use, and protect your information when you visit soneofficial.com or use our services.

The responsible party for data processing on this website is:
Sonya Shane McGaffey
Email: [email protected]

2. Data We Collect

Information You Provide

When you use our website, you may voluntarily provide:

• Contact information (name, email address) when using our contact form
• Booking information when scheduling voice lessons
• Payment information (processed by third-party providers)
• Email address when subscribing to our newsletter (if opted in)

Automatically Collected Information

When you visit our website, certain information is collected automatically:

• IP address (anonymized where possible)
• Browser type and version
• Operating system
• Date and time of access
• Pages visited on our website

This data is collected through server log files and is used solely for ensuring website functionality and security. It is not combined with other data sources.

3. Purpose of Data Processing

We process your data for the following purposes:

• Responding to your inquiries via the contact form
• Processing and managing voice lesson bookings
• Sending newsletter updates about performances, releases, and lessons (only if you have opted in)
• Ensuring the security and functionality of our website
• Complying with legal obligations

4. Legal Basis for Processing

We process your personal data based on:

• Consent (Art. 6(1)(a) GDPR) - When you voluntarily submit information through our contact form
• Contract (Art. 6(1)(b) GDPR) - When processing is necessary for voice lesson bookings
• Legitimate Interest (Art. 6(1)(f) GDPR) - For website security and functionality

5. Third-Party Services

Google Workspace (Booking & Video Conferencing)

We use Google Workspace for scheduling voice lessons and conducting sessions via Google Meet. When you book a lesson, your data is processed by Google according to their privacy policy. Google Workspace is GDPR compliant. For more information, see Google's Privacy Policy.

Stripe (Payment Processing)

Payments for voice lessons are processed through Stripe. Stripe collects and processes payment information including card details, billing address, and transaction data. Stripe is PCI-DSS compliant and adheres to GDPR requirements. For more information, see Stripe's Privacy Policy.

Google Fonts

This website uses Google Fonts for typography. When you visit our website, your browser may connect to Google servers to load fonts. Google may collect anonymized usage data. For more information, see Google's Privacy Policy.

YouTube (Links and Videos)

Our website contains links to YouTube content. When you click on a YouTube link, you will be directed to YouTube's platform where their privacy policy applies. Any embedded video content is loaded with privacy-enhanced settings where possible.

Social Media Links

Our website contains links to social media platforms (Instagram, YouTube, TikTok). These are simple links and do not transfer data to these platforms until you click on them.

6. Newsletter

If you subscribe to our newsletter (via the checkbox on our contact form), we collect your name and email address to send you updates about performances, new music releases, and voice lesson offerings. Newsletter subscription is entirely voluntary and requires your explicit consent.

Newsletter subscriptions are managed through Google Forms. When you opt in, your data is transmitted to Google and stored according to Google's Privacy Policy.

You can unsubscribe at any time by contacting us at [email protected]. Upon unsubscription, your email address will be removed from our mailing list.

The legal basis for processing newsletter subscriptions is your consent (Art. 6(1)(a) GDPR).

7. Cookies

This website uses minimal cookies necessary for functionality. We do not use tracking cookies or advertising cookies.

Essential cookies may be set for:

• Session management
• Security purposes
• Remembering your preferences

You can configure your browser to reject cookies, though this may affect website functionality.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact form submissions: Deleted after your inquiry is resolved, unless ongoing communication
• Booking data: Retained for the duration required by tax and accounting regulations
• Newsletter subscriptions: Retained until you unsubscribe
• Server logs: Automatically deleted after 7 days

9. Your Rights

Under GDPR, you have the following rights:

• Right of Access - Request information about your stored data
• Right to Rectification - Request correction of inaccurate data
• Right to Erasure - Request deletion of your data
• Right to Restriction - Request limited processing of your data
• Right to Data Portability - Receive your data in a portable format
• Right to Object - Object to processing based on legitimate interests
• Right to Withdraw Consent - Withdraw consent at any time

To exercise any of these rights, please contact us at [email protected].

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes SSL encryption for data transmission and secure hosting infrastructure.

11. International Data Transfers

Some of our third-party service providers may process data outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

12. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. You can contact the data protection authority in your country of residence.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Contact

For questions about this Privacy Policy or to exercise your data protection rights, please contact us at:
[email protected]