Privacy Policy
Last updated: August 20, 2026
This Privacy Policy explains how changeofcolours (“I”, “me”, or “my”) collects, uses, and protects personal information when you visit changeofcolours.com, contact me, join my mailing list, purchase a product or service, or submit information through a questionnaire or form.
I care about your privacy and only collect personal information that is necessary to operate my website, communicate with you, provide my products and services, and meet legal obligations.
1. Who is responsible for your data
The person responsible for the processing of personal data through this website and my services is:
changeofcolours
Email: contact@changeofcolours.com
Further business and contact information can be found in the legal notice / imprint on this website.
2. Information I may collect
Depending on how you interact with my website and services, I may collect information such as:
your name and email address;
information you provide when contacting me;
information required to process a purchase;
information you voluntarily share through forms or questionnaires;
newsletter subscription information;
technical information related to your visit to the website, such as IP address, browser or device information, and website usage information.
I only ask for information that is reasonably necessary for the relevant purpose.
3. Website hosting and Bandzoogle
This website is hosted and operated using Bandzoogle.
When you visit the website, certain technical information may be processed automatically in order to provide, secure, maintain, and understand the use of the website. This may include information such as your IP address, browser and device information, pages visited, and cookies or similar technologies.
Bandzoogle may process this information as part of providing its website hosting and related services.
4. Newsletter
If you voluntarily subscribe to my newsletter, I use the information you provide, primarily your email address and, where provided, your name, to send you news, music, releases, offerings, and other updates from changeofcolours.
My newsletter is managed through Bandzoogle.
You can unsubscribe at any time by using the unsubscribe link included in newsletter emails. Unsubscribing does not affect the lawfulness of processing carried out before you withdrew your consent.
5. Purchases and payments
When you purchase a product or service, I may process information necessary to manage your order, such as your name, email address, purchased product or service, transaction information, and correspondence relating to your purchase.
Payments may be processed by Stripe. Stripe receives and processes information necessary to complete and secure your payment. Depending on the payment method used, this may include payment information, transaction information, contact details, device information, and information used for fraud prevention and authentication.
I do not receive or store your complete credit or debit card details.
Payment information may also be processed by the provider of the payment method you choose, where applicable.
Information relating to purchases may be retained where necessary to fulfill the agreement with you and to comply with applicable accounting, tax, and other legal obligations.
6. Personal questionnaires and Sound Portraits
If you purchase a personalized offering such as a Sound Portrait, you may be invited to complete a questionnaire hosted through Tally.
The questionnaire allows you to voluntarily share information that helps me create your personalized work. This may include your name, email address, intentions, reflections, experiences, or other information you choose to provide.
Please only share information that you feel comfortable sharing and that is relevant to the creation of your Sound Portrait.
Your responses are used for the purpose of creating and delivering the personalized service you requested and communicating with you about it.
Tally processes form submissions on my behalf as a service provider. If email notifications for the form are enabled, some or all of your submitted responses may also be sent to my business email account.
I do not sell questionnaire responses or use the personal reflections shared through a Sound Portrait questionnaire for advertising purposes.
7. Contact and email communication
If you contact me by email or through a contact form, I process the information you provide in order to respond to your message and, where applicable, provide the requested service.
Correspondence may be retained for as long as reasonably necessary to manage our communication, fulfill a contract, or meet legal obligations.
8. Embedded YouTube content
Some pages on this website may contain videos embedded from YouTube, a service provided by Google.
When you interact with or load embedded YouTube content, information about your visit may be transmitted to YouTube/Google. Depending on your browser settings, cookies, consent choices, and whether you are logged into a Google account, YouTube may process information about your interaction with the embedded content.
For more information, please refer to Google's privacy information.
9. Links to other websites and social media
My website contains links to external websites and services, including Instagram, YouTube, music platforms, and other third-party websites.
When you follow an external link, the privacy practices of that third party apply. I am not responsible for how independent third-party websites process personal information.
A simple link to a social media profile does not itself mean that I receive information about your activity on that platform.
10. Cookies and similar technologies
This website and the services used to operate it may use cookies or similar technologies that are necessary for website functionality, security, preferences, and, where applicable, analytics.
Where consent is legally required for non-essential cookies or similar technologies, they should only be used after you have provided the relevant consent.
You can also control or delete cookies through your browser settings, although disabling certain cookies may affect website functionality.
11. Legal bases for processing
Where the General Data Protection Regulation (GDPR) applies, personal data may be processed on one or more of the following legal bases:
Consent - for example, when you subscribe to the newsletter;
Performance of a contract or steps prior to entering into a contract - for example, when you purchase a Sound Portrait or another product or service;
Legal obligations - for example, where transaction records must be retained for tax or accounting purposes;
Legitimate interests - where necessary to operate, protect, and improve my website and business, provided those interests do not override your rights and freedoms.
12. Service providers and international data transfers
I use selected third-party service providers to operate my website and provide my services, including services such as Bandzoogle, Stripe, and Tally.
These providers may process personal information only to the extent necessary to provide their respective services and may operate or use infrastructure in countries outside your country of residence, including outside the European Economic Area.
Where required by applicable data protection law, appropriate safeguards for international transfers are used by the relevant service providers.
13. How long information is kept
I do not intend to keep personal information longer than reasonably necessary.
The appropriate retention period depends on why the information was collected. For example:
newsletter information is generally kept until you unsubscribe;
correspondence is kept for as long as reasonably necessary to handle the communication;
purchase and transaction records may need to be retained for statutory accounting and tax periods;
information provided for personalized services is kept only for as long as reasonably necessary to create, deliver, and administer the service, unless a longer period is required by law.
Information may be deleted or anonymized when it is no longer needed for these purposes.
14. Your data protection rights
Depending on the law applicable to you, and in particular under the GDPR, you may have the right to:
request access to personal data held about you;
request correction of inaccurate information;
request deletion of your personal data;
request restriction of processing;
object to certain processing;
receive certain personal data in a portable format;
withdraw consent at any time where processing is based on consent; and
lodge a complaint with a competent data protection supervisory authority.
These rights may be subject to legal limitations, including obligations to retain certain records.
To exercise your rights or ask a privacy-related question, contact:
15. Security
I take reasonable organizational and technical measures, together with the security measures provided by the services I use, to protect personal information against unauthorized access, loss, misuse, or disclosure.
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
16. Changes to this Privacy Policy
I may update this Privacy Policy when my website, services, or legal obligations change.
The current version will always be available on this page, and the “Last updated” date at the top indicates when it was most recently revised.
17. Contact
If you have questions about this Privacy Policy or how your personal information is handled, you can contact me at: