Legal

Privacy Policy

Last updated: May 2025

1. Who we are

This privacy policy applies to the website colibriheartsong.com, operated by Helen Pickles, trading as Colibri Heartsong.

Helen Pickles is the data controller for personal data collected through this website. If you have any questions about how your data is handled, please contact:

2. What personal data we collect

We collect personal data in two ways:

• Contact form submissions: When you use the contact form on this website, we collect your name, email address, and the content of your message. This data is processed by Formspree (formspree.io) and forwarded to Helen's email address.
• Email list sign-ups: When you subscribe to the Colibri Heartsong mailing list, we collect your email address. This is stored and managed by Mailchimp (intuit.mailchimp.com), our email marketing service provider.

We do not collect any other personal data, and we do not use cookies for tracking or analytics purposes on this website.

3. Why we collect your data and our legal basis

Contact form: We process your name, email, and message in order to respond to your enquiry. Our legal basis is legitimate interests (UK GDPR Article 6(1)(f)) — specifically, responding to communications sent to us.

Email list: We process your email address to send you newsletters, event announcements, and updates about Helen's work. Our legal basis is consent (UK GDPR Article 6(1)(a)). You give consent by actively submitting your email address and clicking the subscribe button. You may withdraw consent at any time by unsubscribing (there is an unsubscribe link in every email we send).

4. How we share your data

We do not sell, rent, or trade your personal data. Your data is shared only with the following third-party service providers who process it on our behalf:

• Formspree (formspree.io) — processes contact form submissions. Their privacy policy is available at formspree.io/legal/privacy-policy
• Mailchimp / Intuit Inc. — stores and manages our email subscriber list and sends newsletters. Their privacy policy is available at mailchimp.com/legal/privacy

Both providers are GDPR-compliant and have appropriate data processing agreements in place. Mailchimp stores data on servers in the United States. Adequate safeguards are in place under the EU-US Data Privacy Framework and Standard Contractual Clauses.

5. How long we keep your data

• Contact form submissions: Retained in Helen's email inbox as long as reasonably necessary to respond to and manage the enquiry, and deleted when no longer needed.
• Email list subscribers: Retained until you unsubscribe. You can unsubscribe at any time using the link in any email we send, or by emailing [email protected].

6. Your rights under UK GDPR

As a UK resident, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct any inaccurate data we hold.
• Right to erasure: You can ask us to delete your personal data ("the right to be forgotten").
• Right to restrict processing: You can ask us to limit how we use your data.
• Right to data portability: You can ask us to provide your data in a portable format.
• Right to object: You can object to us processing your data on the basis of legitimate interests.
• Right to withdraw consent: Where we process data based on consent (email list), you can withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.

7. Cookies

This website does not use tracking cookies, analytics cookies, or advertising cookies. We do not use Google Analytics or any similar tracking service. The website is a static site with no server-side processing of visitor data.

Third-party services embedded on this page (YouTube thumbnail image, Google Fonts) may set their own cookies or make network requests. These are governed by their respective privacy policies.

8. Children's data

This website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

9. How to complain

If you are unhappy with how we have handled your personal data, please contact us first at [email protected] and we will do our best to resolve the matter.

You also have the right to lodge a complaint with the UK's data protection authority:

10. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date at the top. Continued use of the website after changes are posted constitutes acceptance of the updated policy.