Privacy Policy

Last updated: 15 September 2026

Type of website: Wedding band.

This website (the "Site") is owned and operated by Gary Harpur, performing as The Harleys. Gary Harpur is the data controller and can be contacted at:

• Email: theharleysmusic@gmail.com
• Telephone: +353 86 344 7878

Purpose

The purpose of this privacy policy (this "Privacy Policy") is to inform users of our Site of the following:

• The personal data we will collect;
• Use of collected data;
• Who has access to the data collected;
• The rights of Site users; and
• The Site's cookie policy.

This Privacy Policy applies in addition to any terms and conditions of our Site.

GDPR

For users in the European Union, we adhere to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation (the "GDPR"), as given further effect in Ireland by the Data Protection Act 2018. For users in the United Kingdom, we adhere to the GDPR as enshrined in the Data Protection Act 2018.

We have not appointed a Data Protection Officer as we do not fall within the categories of controllers and processors required to appoint a Data Protection Officer under Article 37 of the GDPR.

Consent

By using our Site, users agree that they consent to the conditions set out in this Privacy Policy.

Where the legal basis for us processing your personal data is that you have provided your consent to that processing, you may withdraw your consent at any time. If you withdraw your consent, it will not make processing which we completed before you withdrew your consent unlawful.

You may withdraw your consent by contacting us at theharleysmusic@gmail.com, providing your name, your contact information, and a clear statement that you wish to withdraw your consent for specific or all types of data processing. Where the processing relates to cookies or similar technologies, you may also withdraw consent by disabling or clearing cookies in your browser, or by using the opt-out mechanisms made available by the relevant platform.

Legal Basis for Processing

We collect and process personal data about users only when we have a legal basis for doing so under Article 6 of the GDPR. We rely on the following legal bases:

• Consent (Article 6(1)(a)): users have provided their consent to the processing of their data for one or more specific purposes, including non-essential cookies and similar technologies used for analytics and advertising.
• Contract and pre-contractual steps (Article 6(1)(b)): processing is necessary for us to take steps, at the request of a user, prior to entering into a contract, or for the performance of a contract to which the user is a party. This includes checking our availability for your date, responding to your enquiry, and planning and performing at your event once a booking is made.
• Legitimate interests (Article 6(1)(f)): processing is necessary for us or a third party to pursue a legitimate interest, where that interest is not overridden by the interests, rights or freedoms of the user. Our legitimate interests include responding to and following up on enquiries, managing our relationship with prospective and confirmed clients, understanding and improving how our Site and our advertising perform, and maintaining the security of the personal data we hold.
• Legal obligation (Article 6(1)(c)): processing is necessary for us to comply with a legal obligation, including the retention of records of bookings and payments for Irish tax and accounting purposes.
• Vital interests (Article 6(1)(d)): processing is necessary to protect the life of the user or another natural person.

If a user chooses not to provide their personal data, it may limit our ability to check our availability, respond to the enquiry, enter into a contract for our services, perform that contract, or process payment.

Personal Data We Collect

We only collect data that helps us achieve the purposes set out in this Privacy Policy. The categories below describe the data we collect and are indicative rather than exhaustive.

Data Collected Automatically

When you visit and use our Site, we may automatically collect and store information which may include, but is not limited to: your IP address; browser type and version; device type and operating system; approximate location derived from your IP address; the pages you view and the time spent on them; and the website, advertisement or referral source that directed you to our Site.

Data Collected in a Non-Automatic Way

We may also collect data when you perform certain functions on our Site or otherwise communicate with us. At the time of writing, our enquiry form requires your first name, last name, telephone number, email address, the date of your event and the venue or intended location of your event.

The fields listed above are not the limit of the data we may request. We may ask further questions, either through our forms or in the course of correspondence, which may include but are not limited to: your song selections and any songs you do not wish to be performed; the parts of your day for which you require live music; timings and running order; the contact details of your venue, wedding planner or other suppliers; and any practical arrangements relevant to the performance. The fields on our forms may be varied from time to time.

Where you contact us by email, telephone, social media, or by submitting an enquiry through an advertisement hosted on a third party platform, we will receive the information contained in that communication.

We do not seek and do not wish to receive special categories of personal data as defined in Article 9 of the GDPR, such as data concerning health or religious beliefs. Users are asked not to provide such data. Where arrangements for an event require us to be made aware of information of this nature, for example an accessibility requirement at a venue, we will process it solely for that purpose.

How We Use Personal Data

Data collected on our Site will only be used for the purposes specified in this Privacy Policy or indicated on the relevant pages of our Site. We will not use your data beyond what we disclose in this Privacy Policy.

The data we collect automatically may be used for the following purposes: analytics and performance monitoring; measurement of the effectiveness of our advertising; and Site security and fraud prevention.

The data we collect when a user performs certain functions may be used for the following purposes: to check our availability and respond to enquiries; to correspond with prospective and confirmed clients; to plan, prepare for and perform at booked events; to maintain records of bookings and payments; and to comply with our legal obligations.

We do not sell personal data. We do not add users to marketing lists without their agreement, and we do not pass user details to other suppliers for those suppliers' own marketing purposes.

Who We Share Personal Data With

The Band

Personal data may be disclosed to members of the band and to any person engaged by us who reasonably requires access to that data in order to achieve the purposes set out in this Privacy Policy.

Third Parties

We may share user data with third parties who provide services to us. These currently include, and may in future extend beyond, the following categories:

• Customer relationship management. We use GoHighLevel to receive, store, organise and respond to enquiries and bookings.
• Third party providers. We engage third party providers to operate our advertising and to administer our systems on our behalf. Such providers may access enquiry data in the course of that work. They act on our instructions only, are bound to keep the data confidential, and may not use it for their own purposes.
• Analytics and advertising platforms. We use, or may use, tools including Google Analytics, Google Tag Manager, the Meta pixel and Google Ads conversion tracking, to analyse Site traffic and user behaviour and to measure and optimise our advertising. These tools may collect information including IP address, device and browser data and on-Site activity. The platforms concerned may associate that activity with an account you hold with them.
• Social media platforms. Where an enquiry is submitted through an advertisement on Facebook or Instagram, the form is hosted by Meta and the data is received through that platform.
• Communications, hosting and infrastructure providers, through which messages reach us and through which our Site is delivered and our data is stored.
• Our accountant and professional advisers, where required in connection with the keeping of records.

Third parties will not be able to access user data beyond what is reasonably necessary to achieve the given purpose. The specific providers we engage may change from time to time and the list above may not be exhaustive at any given moment.

Other Disclosures

We will not sell or share your data with other third parties, except in the following cases: if it is required for any legal proceeding; to establish, exercise, prove or protect our legal rights; where we are required to do so by law or by a public authority; and to buyers or potential buyers of the business in the event that we seek to sell or transfer it.

If you follow hyperlinks from our Site to another site, please note that we are not responsible for and have no control over their privacy policies and practices.

How Long We Store Personal Data

User data will be stored until the purpose for which the data was collected has been achieved, or for such longer period as we are required or entitled to retain it.

In practice, enquiry records are retained as a business record and are not routinely deleted, as prospective clients frequently re-contact us after an interval, including where the date of their event changes. Records relating to bookings and payments are retained for a minimum of six years in order to comply with Irish tax and accounting requirements. Data held by the analytics and advertising platforms referred to above is retained in accordance with the retention settings of those platforms.

Users may request erasure of their personal data at any time, and we will comply with such a request except where we are required or entitled at law to retain the data.

How We Protect Your Personal Data

We take the security of personal data seriously and apply measures appropriate to the nature of the data and the size of our operation.

Our Site is delivered over an encrypted connection (HTTPS), so that data transmitted between your device and our Site is protected in transit. Enquiry data is held within the account-based systems described above, which are protected by access controls and authentication managed by the relevant provider. We restrict access to personal data to those who require it for the purposes set out in this Privacy Policy, and we use password protected accounts.

While we take reasonable steps to protect personal data, no method of transmission over the internet and no method of electronic storage is entirely secure, and we cannot guarantee absolute security. In the event of a personal data breach which is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by the GDPR.

International Data Transfers

Certain of the providers referred to in this Privacy Policy are established outside the European Economic Area, including in the United States. Where personal data is transferred outside the European Economic Area, that transfer is made subject to appropriate safeguards recognised under Chapter V of the GDPR, which in practice means the European Commission's Standard Contractual Clauses or, where applicable, the EU to US Data Privacy Framework. Further information regarding these safeguards is available on request.

Your Rights as a User

Under the GDPR, users have the following rights in respect of their personal data:

• The right to be informed as to how their personal data is collected and used;
• The right of access to the personal data we hold, and to receive a copy of it;
• The right to rectification of inaccurate or incomplete personal data;
• The right to erasure, where we have no overriding legal basis to retain the data;
• The right to restrict processing;
• The right to object to processing, including processing carried out on the basis of our legitimate interests, and to object at any time to processing for direct marketing;
• The right to data portability; and
• The right not to be subject to a decision based solely on automated processing. We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

Children

Our Site and our enquiry forms are intended for adults arranging an event. We do not knowingly collect personal data from or about children. If you believe that a child has provided us with personal data, please contact us and we will delete it.

How to Access, Modify, Delete, or Challenge the Data Collected

If you wish to access, modify, delete, restrict or object to the processing of the personal data we hold about you, or to exercise any other right set out above, please contact us at theharleysmusic@gmail.com. We will respond within one month of receiving your request, and there is no charge for doing so. We may ask you to verify your identity before acting on a request.

Do Not Track Notice

Do Not Track ("DNT") is a privacy preference that you can set in certain web browsers. We respond to browser-initiated DNT signals. If we receive a DNT signal indicating that a user does not wish to be tracked, we will not track that user. We are not responsible for and cannot guarantee how any third parties who interact with our Site and your data will respond to DNT signals.

How to Opt-Out of Data Collection, Use or Disclosure

In addition to the methods described above, the following specific opt-out methods are available:

• Cookies and similar technologies: you may refuse, disable or delete cookies through your browser settings. Refusing non-essential cookies does not prevent you from using our Site or submitting an enquiry.
• Behavioural advertising: you may opt out of the collection and use of information for advert targeting through the advertising settings provided by the relevant platforms, including Facebook and Instagram ad preferences and Google Ads settings.
• Direct communications: you may ask us at any time to stop contacting you, by replying to any message or by emailing us at the address above.

Cookie Policy

A cookie is a small file stored on a user's device by a website. Its purpose is to collect data relating to the user's use of that website. Similar technologies, including tracking pixels and tags, perform a comparable function. You can choose to be notified each time a cookie is transmitted, and you can choose to disable cookies entirely in your internet browser, although doing so may reduce the quality of your experience of the Site.

We use, or may use, the following types of cookies and similar technologies on our Site:

• Strictly necessary cookies, which are required for the Site and its features to function. This includes cookies set by our enquiry form, which is embedded from the servers of our customer relationship management provider. These do not require consent;
• Functional cookies, which are used to remember selections you make so that they are retained for subsequent visits;
• Analytical cookies, which allow us to improve the design and functionality of our Site by collecting data on how the Site is accessed and used; and
• Targeting and advertising cookies and pixels, which collect data on your use of the Site and your preferences in order to measure the performance of our advertising and to present relevant advertising to you on third party platforms.

Cookies and similar technologies which are not strictly necessary are used only where you have consented to their use. The specific technologies in use may change from time to time and the categories above may not be exhaustive at any given moment.

Modifications

This Privacy Policy may be amended from time to time in order to maintain compliance with the law, to reflect any changes to the manner in which we collect and use personal data, or to reflect changes to the providers and technologies we use. The revised policy will take effect on the date it is published on this page, and the date at the top of this page will be updated accordingly. Where the change is material and we hold your contact details, we will notify you directly.

Complaints

If you have any complaint about how we process your personal data, please contact us using the details in the Contact Information section below so that we may, where possible, resolve the matter. If you consider that we have not addressed your concern in a satisfactory manner, or if you prefer to do so directly, you have the right to lodge a complaint with a supervisory authority. In Ireland, the supervisory authority is the Data Protection Commission, www.dataprotection.ie.

Contact Information

If you have any questions, concerns or complaints regarding this Privacy Policy or the personal data we hold, you may contact the data controller, Gary Harpur, at:

• Email: theharleysmusic@gmail.com
• Telephone: +353 86 344 7878