Privacy Policy

Last updated: 7 June 2026

This Privacy Policy explains how Maria Butterly collects, uses, stores and protects your personal data when you visit mariabutterly.com, purchase products, download music, book tickets or performances, register for courses or workshops, subscribe to our newsletter, or contact us.

We are based in Ireland and process personal data in accordance with the General Data Protection Regulation, the Data Protection Act 2018, the ePrivacy Regulations, and other applicable Irish and EU data protection laws.

A privacy policy is part of a controller’s transparency obligations under Articles 12 to 14 of the GDPR, and should explain clearly how personal data is processed. The Data Protection Commission is Ireland’s supervisory authority for GDPR and related ePrivacy rules.

1. Who We Are

For the purposes of data protection law, the data controller is:

Maria Butterly
Email: info@mariabutterly.com
Address: Mulhussey, Kilcock, Co. Meath, Ireland
Website: mariabutterly.com

“Controller” means that we decide why and how your personal data is processed.

2. Personal Data We Collect

We may collect the following categories of personal data.

2.1 Information you provide directly

This may include:

  • Name.
  • Email address.
  • Phone number.
  • Billing address.
  • Delivery address.
  • Order details.
  • Payment-related information.
  • Account login details, if you create an account.
  • Newsletter subscription details.
  • Event, course or workshop registration details.
  • Performance booking enquiries.
  • Messages you send through contact forms or email.
  • Accessibility, dietary or attendance information you choose to provide for an event, course or workshop.

2.2 Order and transaction information

When you purchase through our website, we may collect:

  • Products purchased, such as CDs or MP3 downloads.
  • Ticket, course or workshop bookings.
  • Download access records.
  • Order number.
  • Order status.
  • Refund and return records.
  • Payment confirmation details.
  • Customer notes entered at checkout.

We do not intentionally store full card details on our website. Payments are usually handled by third-party payment providers such as [Stripe / PayPal / WooPayments / other provider].

2.3 Newsletter information

When you subscribe to our newsletter, we collect your email address and, if requested, your name and communication preferences.

Newsletter emails may include music news, release announcements, concerts, performances, courses, workshops, offers and related updates.

Electronic direct marketing in Ireland generally requires affirmative consent, such as an opt-in, unless a limited customer relationship exception applies; recipients must also be able to opt out.

2.4 Technical and website usage information

When you visit our website, we may collect:

  • IP address.
  • Browser type and version.
  • Device type.
  • Operating system.
  • Pages visited.
  • Referring website.
  • Approximate location based on IP address.
  • Time and date of visit.
  • Cookie identifiers.
  • Website interaction data.

Some of this information may be collected through cookies, analytics tools, security tools, hosting logs or WooCommerce functionality.

2.5 Special category data

We do not normally collect special category data.

However, you may choose to provide information such as accessibility requirements, health-related attendance needs, or dietary requirements for an event, course or workshop. Where this happens, we will only use that information for the purpose for which you provided it, such as helping us make reasonable arrangements for your participation.

3. How We Collect Personal Data

We collect personal data when you:

  • Visit the website.
  • Place an order.
  • Buy a CD.
  • Download MP3 music.
  • Book a concert ticket.
  • Request or confirm a performance booking.
  • Register for a course or workshop.
  • Create a customer account.
  • Subscribe to our newsletter.
  • Complete a contact form.
  • Email, phone or message us.
  • Leave a review, comment or testimonial.
  • Interact with our website cookies, analytics or embedded content.

We may also receive limited personal data from third-party services used to run the website, such as payment processors, email marketing platforms, ticketing systems, analytics providers and hosting providers.

4. Why We Use Your Personal Data and Our Legal Bases

Under GDPR, we must have a lawful basis for each use of personal data. The legal bases we rely on include contract, consent, legal obligation and legitimate interests.

Purpose Personal data used Legal basis
To process CD orders Name, address, email, order details Contract
To deliver physical products Name, delivery address, contact details Contract
To provide MP3 downloads Name, email, order details, download records Contract
To process payments Name, billing details, transaction details Contract; legal obligation
To issue refunds or handle returns Order details, contact details, refund records Contract; legal obligation
To manage concert ticket bookings Name, email, ticket details Contract
To manage performance bookings Name, contact details, event details, booking correspondence Contract; legitimate interests
To manage course and workshop registrations Name, email, attendance details, course details Contract
To send newsletter emails Email address, name, preferences Consent, or permitted customer marketing where applicable
To respond to enquiries Name, email, message content Legitimate interests; pre-contract steps
To manage customer accounts Login details, order history, account details Contract; legitimate interests
To improve and secure the website IP address, technical data, usage data Legitimate interests; consent where cookies require it
To comply with tax and accounting duties Order, payment and invoice records Legal obligation
To prevent fraud or misuse Technical data, order data, account data Legitimate interests; legal obligation
To keep records of consent and preferences Email, consent status, date/time of consent Legal obligation; legitimate interests

The GDPR gives individuals rights over their personal data, including rights to information, access, rectification and erasure, among others.

5. Newsletter and Marketing Emails

You can subscribe to our newsletter by entering your email address through the website.

We will use your email address to send you updates about:

  • New music releases.
  • Concerts and performances.
  • Tickets and event news.
  • Courses and workshops.
  • Offers, announcements and related creative work.

You can unsubscribe at any time by clicking the unsubscribe link in any newsletter email or by contacting us at [Privacy Contact Email].

Once you unsubscribe, we will stop sending you marketing emails. We may keep a limited suppression record to make sure we do not email you again by mistake.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

  • Keep the website working.
  • Enable shopping cart and checkout functions.
  • Remember your preferences.
  • Improve website security.
  • Understand how visitors use the site.
  • Support embedded content, such as video or music players.
  • Support marketing or social media features, where used.

Some cookies are essential for the website to function. Others, such as analytics, advertising or tracking cookies, usually require your consent.

The Irish Data Protection Commission states that consent is normally required for cookies and similar tracking technologies, and that GDPR consent must be clear, affirmative, freely given, specific, informed and unambiguous. The DPC also states that analytics cookies require consent.

You can manage cookies through our cookie banner or your browser settings. For more information, please see our Cookie Policy.

7. WooCommerce and Online Shop Data

This website uses WooCommerce or similar e-commerce functionality to process orders and bookings.

When you place an order, WooCommerce may store:

  • Name.
  • Billing address.
  • Shipping address.
  • Email address.
  • Phone number.
  • Order details.
  • Customer notes.
  • Download permissions.
  • Transaction status.
  • Account details, if you create an account.

This information is used to process your order, provide downloads, deliver products, handle refunds, manage customer service and meet accounting or legal obligations.

8. Payment Processing

Payments are handled by third-party payment providers such as [Stripe / PayPal / WooPayments / other provider].

We may receive confirmation that payment has been made, but we do not normally receive or store your full card details.

Payment providers process your personal data according to their own privacy policies and security standards. You should review the privacy policy of the payment provider used at checkout.

9. Concerts, Tickets, Courses, Workshops and Performances

If you book a ticket, course, workshop or performance, we may use your personal data to:

  • Confirm your booking.
  • Send event, class or workshop information.
  • Manage attendance lists.
  • Provide access links for online sessions.
  • Contact you about schedule changes.
  • Handle cancellations, refunds or transfers.
  • Manage health, safety or accessibility arrangements.
  • Keep records of bookings and payments.

For in-person events, courses or workshops, we may share limited attendance information with venues, tutors, assistants or event partners where necessary to run the event safely and effectively.

10. Contact Forms and Enquiries

When you contact us through the website, by email, by phone or through social media, we use the information you provide to respond to your enquiry.

This may include enquiries about:

  • Music purchases.
  • Download problems.
  • CD orders.
  • Ticket bookings.
  • Performance bookings.
  • Course or workshop registrations.
  • Press, media or collaboration requests.
  • General customer support.

We may keep enquiry records for a reasonable period so we can manage follow-up questions, disputes, bookings or legal obligations.

11. Reviews, Testimonials and User Content

If you submit a review, testimonial, comment or other content, we may process your name, review content and any related information you provide.

We may publish testimonials or reviews on the website, social media, promotional materials or newsletters, but we will avoid publishing unnecessary personal details.

If you want a published testimonial removed or updated, contact us at [Privacy Contact Email].

12. Embedded Content and Third-Party Platforms

Our website may include embedded content or links from third-party platforms, such as:

  • YouTube.
  • Vimeo.
  • Spotify.
  • Bandcamp.
  • SoundCloud.
  • Instagram.
  • Facebook.
  • Event or ticketing platforms.
  • Email newsletter platforms.
  • Payment processors.
  • Online course or video platforms.

Embedded content may behave as if you visited the third-party website directly. These third parties may collect data about you, use cookies, track your interaction, and combine that data with your account on their platform if you are logged in.

We are not responsible for third-party privacy practices. You should review the privacy policies of any third-party services you use.

13. Who We Share Personal Data With

We only share personal data where necessary and lawful.

We may share personal data with:

  • Website hosting providers.
  • WooCommerce-related service providers.
  • Payment processors.
  • Email newsletter platforms.
  • Delivery and postal providers.
  • Ticketing platforms.
  • Course or workshop platforms.
  • Video conferencing providers.
  • Venues, tutors, assistants or event partners.
  • Accountants, bookkeepers or tax advisers.
  • IT support and website developers.
  • Legal advisers, insurers or professional advisers.
  • Public authorities where legally required.

Where a service provider processes personal data on our behalf, GDPR may require a data processing contract between controller and processor. The Irish DPC provides guidance on controller and processor relationships and the need for data processing contracts.

14. International Transfers

Some third-party providers may store or process personal data outside Ireland, the European Union or the European Economic Area.

Where this happens, we will take steps designed to ensure that appropriate safeguards are in place, such as:

  • An adequacy decision.
  • Standard contractual clauses.
  • Contractual, technical and organisational protections.
  • Use of providers with recognised data transfer safeguards.

You can contact us for more information about international transfers relevant to your data.

15. How Long We Keep Personal Data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, including legal, accounting, tax, contractual and customer service purposes.

Typical retention periods may include:

Data type Typical retention period
Order and invoice records Up to 6–7 years for tax/accounting purposes
Customer account data Until account deletion is requested, unless we need to keep records
Download access records For as long as needed to provide access and support
Enquiry emails Usually up to 2 years, unless connected to a booking, dispute or contract
Performance booking records Usually up to 6–7 years where contractual or accounting records are involved
Course and workshop attendance records Usually up to 2 years, or longer where needed for legal/accounting reasons
Newsletter subscription records Until you unsubscribe or withdraw consent
Marketing suppression records As long as necessary to respect your opt-out
Cookie consent records For the period required to manage and prove consent
Security logs For a limited period unless needed to investigate misuse or security issues

These periods are examples and may be adjusted depending on business, legal or technical requirements.

16. How We Protect Personal Data

We use reasonable technical and organisational measures to protect personal data, including where appropriate:

  • Secure website hosting.
  • SSL/HTTPS encryption.
  • Password protection.
  • Access controls.
  • Payment processing through secure third-party providers.
  • Software and plugin updates.
  • Spam and security tools.
  • Limited access to personal data.
  • Backups and recovery procedures.

No website or online service can be guaranteed completely secure. You are responsible for keeping your own login details secure and for using strong passwords.

17. Your Data Protection Rights

Subject to legal conditions and exceptions, you may have the following rights under GDPR:

  • Right to be informed about how your data is used.
  • Right of access to your personal data.
  • Right to rectification of inaccurate or incomplete data.
  • Right to erasure, also known as the right to be forgotten.
  • Right to restrict processing in certain circumstances.
  • Right to data portability in certain circumstances.
  • Right to object to certain processing, including direct marketing.
  • Right to withdraw consent where processing is based on consent.
  • Right not to be subject to certain automated decisions, where applicable.

The European Commission explains that GDPR rights include the right to be informed, access personal data, correct inaccurate data and request erasure where data is no longer needed or processing is unlawful.

To exercise your rights, contact us at:

[Privacy Contact Email]

We may need to verify your identity before responding. We will respond within the timeframe required by law.

18. Withdrawing Consent

Where we rely on your consent, you may withdraw that consent at any time.

For newsletter emails, you can withdraw consent by clicking the unsubscribe link in any email or contacting us directly.

Withdrawing consent does not affect processing that was lawful before consent was withdrawn.

19. Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the Irish Data Protection Commission:

Data Protection Commission
Website: dataprotection.ie

The DPC is Ireland’s independent authority responsible for upholding personal data protection rights and is the Irish supervisory authority for GDPR.

20. Children’s Privacy

This website is not directed at children.

If you are under 18, you should only use this website, make purchases, book events or register for courses with the permission of a parent or guardian.

We do not knowingly collect personal data from children without appropriate consent where required.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The updated version will be posted on this page with a new “Last updated” date.

Where changes are significant, we may take additional steps to notify you, such as placing a notice on the website or contacting newsletter subscribers where appropriate.

22. Contact Details

For questions about this Privacy Policy or your personal data, contact:

Maria Butterly
Email: info@mariabutterly.com
Address: Mulhussey, Kilcock, Co. Meath, Ireland
Website: mariabutterly.com