Privacy Policy

1. Who is responsible for your information?

Brian Hennessy, trading as DJ Brian Hennessy, is the data controller. I am a sole trader based in County Kilkenny, Ireland.

2. Information I collect

Depending on how you contact me or use my services, I may collect:

• Your name, email address and telephone number.
• Event date, event type, venue, preferred package and information you include in your enquiry.
• Booking agreements, music preferences, planning correspondence and payment or invoice records.
• Names and business contact details of relevant venue staff, performers or other suppliers.
• Reviews, testimonials, photographs, video and wedding-story information where provided or authorised for promotional use.
• Technical information processed by my website and its providers, such as IP address, browser/device information and security or error logs.

Most information comes directly from you. Relevant details may also come from your partner, event organiser, venue or suppliers. Public Google reviews shown on the website come from Google and may include the reviewer’s displayed name, profile image, rating and review.

Please avoid including sensitive personal information or unnecessary information about guests in a general enquiry. If a particular accessibility or other sensitive requirement needs discussing, contact me first so we can agree an appropriate way to handle it.

3. How I use information and why

Enquiries and bookings: I use your details to respond, check availability, prepare quotes, plan the music and deliver the agreed service. For an individual booking, the legal basis is taking steps at your request before entering a contract and performing that contract.

Business and supplier contacts: Where you act for a company, couple or event organiser, I rely on my legitimate interest in communicating with the relevant people and arranging the event.

Records and legal responsibilities: I retain necessary financial information to meet tax and accounting obligations. Necessary complaint, insurance and dispute records are processed for my legitimate interest in handling concerns and establishing or defending legal claims.

Website operation: I rely on my legitimate interest in maintaining a secure, functioning website and preventing misuse. This does not replace consent where consent is required for cookies or similar technologies.

Promotional content: I obtain consent for named wedding stories, directly supplied testimonials and identifiable promotional photographs or video. You can withdraw consent for future use by contacting me. Public Google reviews are displayed to help visitors assess my services, relying on my legitimate interest in showing genuine customer feedback and taking account of reviewers’ rights.

Providing enquiry details is voluntary, but without the necessary contact and event information I may be unable to respond, quote or provide the service.

4. Forms and email

Website enquiries are handled through Webflow. Zapier is used to route enquiry information and send an acknowledgement, and Titan Mail is used for business email.

Submitting an enquiry does not subscribe you to a marketing list. Any separate promotional email subscription will have its own opt-in and withdrawal method.

Automated acknowledgements do not make booking decisions. I do not use your information for automated decisions producing legal or similarly significant effects.

5. Who may receive information?

I share information only where relevant to the purpose:

• Webflow for website hosting and form handling.
• Zapier and Titan Mail for enquiry processing and communications.
• Elfsight and the relevant platforms for embedded Google reviews and Instagram content.
• Venue contacts and booked performers where needed to coordinate your event.
• Payment providers, accountants, insurers, professional advisers or public authorities where necessary for transactions, advice, claims or legal obligations.
• Authorised website support providers where access is needed for maintenance.

Access should be limited to what each recipient needs. I do not sell your personal information.

Google, Meta/Instagram and WhatsApp may also handle information under their own privacy notices when you use their services or interact with their content.

6. Processing outside the European Economic Area

Some service providers process information outside the EEA, including in the United States. Overseas support access may also constitute an international transfer.

Where a transfer requires safeguards, I use the applicable arrangement for that provider, such as an EU adequacy decision or European Commission Standard Contractual Clauses, together with additional measures where necessary. Contact me for details of the safeguards relevant to your information and how to obtain a copy.

7. How long I keep information

I keep information only for the relevant purpose:

• Enquiries that do not become bookings: normally up to 12 months after our last meaningful contact.
• Routine planning details and music preferences: normally up to 12 months after the event.
• Core booking agreements and records needed for potential claims: normally up to six years after the event or cancellation.
• Tax and accounting records: normally six years, or longer where a legal requirement applies.
• Consent-based promotional material: while the consent remains valid and the material remains relevant, with periodic review.
• Security logs and technical records: for the period needed to diagnose incidents, prevent abuse and operate the service, taking account of the relevant provider’s retention arrangements.

Relevant records may be kept longer where required by law or while an active complaint, insurance matter or legal claim remains unresolved. Unnecessary information is deleted or anonymised. Backups are removed through their normal replacement cycle.

8. Cookies and embedded content

The website includes third-party reviews and social content. These services may receive technical information when their content loads.

Strictly necessary technologies may be used to provide requested functions. Optional cookies or similar tracking technologies require your consent before they are used. Where optional technologies are present, the cookie controls explain their providers, purposes and durations and allow you to accept, reject or later change your choices.

I do not currently use analytics tools or advertising pixels on this website.

9. Security

I use appropriate access controls and other safeguards to protect information, and limit access to people who need it for their work. No website or communication method is completely secure.

10. Your rights

Subject to the conditions and exceptions in data protection law, you can request access, correction, deletion, restriction or portability of your information. You can object to processing based on legitimate interests and to direct marketing.

Where processing depends on consent, you can withdraw that consent at any time without affecting earlier lawful use.

Contact me using the privacy email above. I may need proportionate information to verify your identity. I normally respond within one month; if a permitted extension is necessary, I will explain why within that month. Requests are normally free.

You can complain to Ireland’s Data Protection Commission at https://www.dataprotection.ie. You do not have to contact me first, although I welcome the opportunity to address your concern.

11. Updates

I may update this policy when my services or information practices change. The current version and its update date will appear on this page.