Privacy Policy

Privacy Policy

Last updated: 17 October 2026.

This notice explains how personal information is handled when you visit fallowood.co.uk or contact Fallowood. It covers Fallowood Records, Fallowood and Fallowood Collective.

Who is responsible for your information

This website is operated by Dual Wave Digital, trading as Fallowood Records, Fallowood and Fallowood Collective. Dual Wave Digital is the data controller: it decides why and how the personal information described here is used.

For questions about privacy or to exercise your data protection rights, please use our contact form and mention “Privacy enquiry” in your message. This notice should be read alongside the Dual Wave Digital privacy policy. The specific 12-month CMS retention period below applies to this website’s contact-form submissions.

Information we collect and why

If you use the contact form, we receive your name, email address and the information you include in your message. We use this information to read, manage and answer your enquiry and keep a record of our response. Please avoid including sensitive personal information or information about other people unless it is necessary for your enquiry.

Our lawful basis for handling general enquiries is our legitimate interest in communicating with people who contact the label. If you ask us to take steps towards a contract, we may instead rely on taking those steps at your request. Submitting an enquiry does not sign you up to a mailing list, and we do not sell your personal information.

Our hosting provider, IONOS, also processes technical information needed to deliver and protect the website, such as requested pages, access times, browser and device information, and IP-related information. This is separate from contact-form records. Our lawful basis is our legitimate interest in maintaining a secure and reliable website.

Cookies and similar technologies

We do not set cookies for ordinary visits to the public website. We do not use analytics cookies, advertising cookies or advertising trackers. WordPress uses necessary sign-in and administration cookies when authorised administrators log in; these are separate from ordinary public browsing.

Our fonts and website images are hosted with the site. If you follow a link to another website, that provider’s own privacy and cookie practices apply. We will review this notice before introducing tools that change how visitor information is collected, and request consent where required.

Where your information is stored and who can access it

Contact-form submissions are stored in our WordPress CMS using Ninja Forms on our IONOS hosting. A notification containing your enquiry is also sent to our email inbox, provided by Microsoft. Access is limited to people who need to handle the enquiry or maintain the website, and the service providers needed to run those systems.

We may also disclose relevant information where required by law or where necessary to establish, exercise or defend legal claims. Some technology providers may process information outside the United Kingdom. Dual Wave Digital’s wider arrangements for suppliers and international transfers are described in its privacy policy; you can request further details through our contact form.

How long we keep information

Contact-form submissions stored in the website CMS are deleted 12 months after submission. This period applies to the CMS record, not to copies delivered by email.

Email notifications, replies and other correspondence may be kept longer under the Dual Wave Digital privacy policy. Inactive or unsuccessful enquiries are normally kept for up to 24 months. If an enquiry leads to a business relationship, relevant contractual, client or financial records may normally be retained for up to six years after the relevant relationship or accounting period. Information may be kept longer where required by law or reasonably necessary for a legal claim.

Hosting logs and routine backups are separate from live CMS submissions and follow the relevant provider’s retention arrangements. Deleted information may remain in restricted backups until they are replaced in the normal backup cycle; it is not kept there for ordinary use.

Your rights and how to contact us

Depending on the circumstances, you can ask for access to your personal information, correction of inaccurate information, deletion, restriction of its use or a portable copy. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it. These rights do not apply in every situation.

To make a request, use the contact form. We may need to confirm your identity before providing or changing personal information. We normally respond within one month, subject to any extension or clarification allowed by law.

You can also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator. You do not need to contact us first, although we welcome the opportunity to resolve a concern.

Changes to this notice

We will update this page if our website or data practices change. The date at the top shows when this notice was last updated.