Last updated: 11 November 2026
Benjamin Ward is responsible for the personal information collected through this website. For privacy questions or to exercise your rights, email ben.ward@bjwproductions.co.uk.
What we collect and why
- Enquiries: your name, email address and message, so we can respond to you and keep a record of the conversation.
- Orders: your name, email address, the sheet music you buy, payment references, order status and download activity. We use these to take payment, deliver your files, provide support, manage refunds and keep accounting records.
- Mailing list: your email address, your name if supplied, and when and where you subscribed or unsubscribed. Signing up is optional and is not required to buy sheet music or contact us.
- Security and reliability: your IP address, browser information, requests and error reports. Reports can include contact or order details submitted when an error occurs. We use these to prevent abuse, investigate failed requests and keep the site working.
- Admin accounts: invited users' account details, sign-in sessions and account activity, to control access to the site.
- Website statistics: public pages viewed, referring websites, browser language, device information and approximate location, to understand how people use the site. We use Umami, hosted by Connect Dorset, without analytics cookies. We exclude admin, sign-in, checkout and download pages, strip query strings and do not send form contents or purchase details to Umami. IP addresses are used to derive approximate location and session statistics, rather than stored in analytics reports.
Card details are handled by Stripe. We do not receive or store your full card number or security code.
Our reasons for using this information
We process orders and related support to perform our contract with you. We answer enquiries and protect and maintain the website in our legitimate interests, taking your rights into account. We also use limited website statistics to improve the site. We keep records where required by law. Marketing emails rely on your consent, which you can withdraw at any time using the unsubscribe link in an email or by contacting us. Withdrawing consent does not affect earlier lawful processing.
Services that help run the site
Connect Dorset maintains the website and can access information needed for technical support. Cloudflare hosts the site, database and files and protects its traffic. Stripe processes payments and helps prevent payment fraud. Plunk delivers emails and checks email addresses. Cap provides the human check, our GlitchTip error-monitoring service helps diagnose faults, and our Umami service provides website statistics.
We share information with these services only for the purposes described here, and with professional advisers or authorities where necessary to meet legal obligations or deal with a claim. Stripe also processes some information for its own legal and fraud-prevention purposes; see Stripe's privacy policy. We do not sell your personal information.
Some providers process information outside the UK. Where a transfer needs protection under UK data-protection law, it must be covered by an adequacy decision or appropriate contractual safeguards. Contact us for information about the providers and safeguards relevant to your data.
Cookies and browser storage
The site uses browser storage to remember your cart and sound preference. During checkout, it stores your details and an order-access key in your browser session so you can resume an unfinished payment. Admin sign-in uses authentication cookies. Stripe and Cloudflare may use cookies and similar technologies needed for payment security and protection against abuse.
We do not use advertising pixels or marketing-tracking cookies on this site. You can clear or block browser storage through your browser settings, although this may clear your cart or prevent sign-in or checkout from working. Links to other websites are covered by those websites' own policies.
To opt out of Umami statistics, enable Do Not Track or Global Privacy Control in your browser. We honour both signals.
How long information is kept
We keep order and payment records for accounting, legal obligations and purchase support. Enquiries are kept while needed to handle the matter and any related follow-up. Mailing-list details are kept while you subscribe; a minimal record of an unsubscribe may be retained to respect your choice. Security records and backups may remain for their operational retention periods. The appropriate period depends on the purpose, legal requirements and any unresolved dispute. You can ask us to review or delete information that is no longer needed.
Your rights
Depending on the circumstances, you can ask to access, correct or erase your information, restrict its use, object to processing, or receive a portable copy. We may need to verify your identity before acting on a request. Some information must be retained to meet legal obligations. We normally respond within one month and will explain if an extension is needed.
If you are unhappy with how your information is handled, please contact us. You can also complain to the Information Commissioner's Office, the UK's data-protection regulator.
We will update this page when the way we use information changes. The date above identifies the latest version.