Privacy and Cookie Policy

Last updated: 12 November 2026

This notice explains who we are, what personal information we collect, how we use cookies and similar technologies, who we share information with, and what rights you have. It applies to our website at cuberecording.com and to enquiries and bookings made by our contact form, live chat, email, phone or WhatsApp.

1. Who we are

Cube Recording is a residential recording studio near Truro, Cornwall. It is a UK sole trader business owned by Gareth Young.

When this notice says “we”, “us” or “our”, it means Gareth Young trading as Cube Recording, the data controller for the personal information described here.

Postal address: Penvale Barn, Silverwell, Truro, Cornwall TR4 8JE
Email: info@cuberecording.com
Telephone: 01872 492128

2. The information we collect

We only collect information we need to run the studio, answer enquiries and look after bookings. We do not sell your information.

Enquiries and bookings

If you contact us, we will collect the details you give us. That can include:

  • The website contact form (on our homepage): your name, email address, subject, message, and, if you choose one, a preferred engineer (Gareth, Ross, Chez or Tom, or no preference). The form is protected by Google reCAPTCHA.
  • Live chat on our website: whatever you type in the chat, together with technical information the chat widget needs in order to run the conversation (for example a visitor identifier and the page you were on).
  • Email to info@cuberecording.com, telephone on 01872 492128, or WhatsApp using the link on our homepage: the contact details and message you send us.

There is no online booking or payment system on this website. Bookings for studio time, production, mixing or our on-site accommodation are arranged by getting in touch as above. For a booking we may also need further details, such as the dates you want, the number of people, any accessibility or dietary needs you tell us about, and invoicing or payment details.

We also receive enquiries about student work experience. If you are under 18, please ask a parent or guardian to contact us on your behalf.

Website use

When you visit the site, our hosting environment may record standard technical logs, such as your IP address, browser and device type, the pages you view and the date and time. We also use Google Analytics, which collects similar information about how the site is used (see the cookies section below).

If you watch a YouTube video or play a Spotify playlist embedded on the site, YouTube (Google) or Spotify will receive information about that visit, which may include your IP address and cookies they set. The same applies if you use the live chat widget (LiveChat, operated by Text) or complete the contact form (Google reCAPTCHA).

Photographs and session work

Photographs from recording sessions may appear on our website and on our social media pages. If you appear in a photo and would like us to take it down, please contact us and we will consider your request as quickly as we can.

If you book studio time with us, we will also hold the project information needed to provide the service, such as session notes and the audio we record or mix for you. That is part of the booking, not something the website collects automatically.

3. Why we use your information and our lawful bases

We process personal information under UK data protection law (UK GDPR and the Data Protection Act 2018). The cookies and similar technologies on the site are also covered by the UK Privacy and Electronic Communications Regulations (PECR).

These are the main reasons we use your information:

What we do Lawful basis
Reply to an enquiry and, if you want to book, take the steps needed to set up a booking Contract (or steps you ask us to take before entering a contract). We may also rely on legitimate interests, so that we can respond to people who get in touch.
Provide the studio session, production, mixing or accommodation you have booked, and keep in touch about it Contract
Prepare invoices, keep accounting records and meet tax and legal requirements Legal obligation, and contract
Keep the website secure, prevent spam and abuse, and troubleshoot technical problems (including server logs and Google reCAPTCHA on the contact form) Legitimate interests. reCAPTCHA also uses cookies, which PECR generally requires consent for (see below).
Understand how the website is used (Google Analytics) Consent, which PECR requires before analytics cookies are set
Load the live chat widget, YouTube videos and Spotify playlists, which set their own cookies or similar storage Consent under PECR, unless and until we only load them after you ask us to (for example by starting a chat or pressing play on a blocked embed)
Publish a session photo that includes you Legitimate interests in showing the studio’s work, or consent where we have asked for it. You can object or ask us to remove a photo.

We do not use your enquiry or booking information for marketing lists, and the website does not have a newsletter sign-up. If that ever changes, we will ask for your consent first where the law requires it.

4. How long we keep it

We keep personal information only for as long as we need it for the purposes above, unless a longer period is required by law.

  • Enquiries that do not lead to a booking, including contact-form messages, emails, calls, WhatsApp messages and live-chat transcripts: usually for up to 12 months after we last heard from you, or sooner if there is no reason to keep them.
  • Bookings, invoices and accounting records: for the length of the booking and then for six years after the end of the tax year they relate to, which is the usual period needed for UK tax and accounting rules.
  • Session recordings and project files: for as long as needed to deliver the work and for a sensible period afterwards, or as agreed with you.
  • Website analytics and third-party cookies: for the lifetimes shown in the cookie table, or until you delete them in your browser.
  • Server logs: for a short period, as needed for security and troubleshooting.

If you ask us to delete your information, we will do so where we have no legal obligation or other lawful reason to keep it.

5. Who we share information with

We share information only where we need to in order to run the studio and this website. The third parties below were found on the live site (the homepage, the In Session page and The Team page at /engineers/) on 12 November 2026.

  • Google Ireland Limited / Google LLC — Google Analytics (property UA-140139221-1, loaded via Google’s gtag.js script on every page); Google Fonts (the Lato and Montserrat typefaces, loaded from fonts.googleapis.com); Google reCAPTCHA version 2 on the homepage contact form; and YouTube, for the video embeds on the homepage and the In Session page. Google’s privacy policy is at policies.google.com/privacy.
  • LiveChat Inc. (Text) — the live chat widget, loaded on every page from connect.livechatinc.com. If you use the chat, Text processes the conversation and related visitor data for us. See Text’s privacy policy and service cookies notice.
  • Spotify AB — the playlist embeds on the In Session page and The Team page. Spotify’s privacy policy is at spotify.com/legal/privacy-policy.
  • Our website host and email provider — the site is hosted on Apache hosting (IONOS). Emails to info@cuberecording.com are processed by our email provider so that we can read and reply to them.
  • WhatsApp (Meta) — only if you choose to message us on WhatsApp. That conversation is handled on Meta’s service, under Meta’s terms and privacy policy.

We may also share information with professional advisers (for example an accountant) or if the law requires us to, or to protect our legal rights.

Some of these organisations are based outside the UK, or may store information outside the UK (including in the United States). Where that happens, they should use a lawful transfer mechanism, such as a UK adequacy regulation or standard contractual clauses.

The website also contains ordinary links to our Facebook and Instagram pages, and to a small number of other websites. Those links do not load tracking pixels. If you follow a link, the other site’s own privacy notice will apply.

We looked for, and did not find, a Facebook Pixel, Google Tag Manager container, Matterport tour, or other advertising or analytics tags on the pages we checked.

6. Cookies and similar technologies

Cookies are small text files stored on your device. Similar technologies include local storage and session storage, which some of our third-party tools also use.

A simple visit to the site does not set any first-party cookies in the initial page response. WordPress login cookies are only set if a member of our team signs in to manage the site.

The following cookies and similar technologies come from the third-party tools actually present on the site. Because they are set by scripts and embeds after the page loads, their exact names and lifetimes can change when Google, LiveChat, YouTube or Spotify update their products. Durations below are the usual or documented periods, not measurements from a browser session.

Analytics

Name Provider Purpose Type Duration
_ga Google Analytics (gtag.js, UA-140139221-1) Distinguishes visitors so we can see how the site is used Analytics, first-party 2 years
_gid Google Analytics Distinguishes visitors Analytics, first-party 24 hours
_gat Google Analytics Throttles the rate of requests to Google Analytics, first-party 1 minute

The Analytics script is included on every page we checked. Enfold (our theme) can wait for cookie consent before loading it, but that option is not currently turned on, so the script is loaded automatically.

Live chat

Name Provider Purpose Type Duration
__lc_cid LiveChat / Text (accounts.livechatinc.com) Recognises a returning visitor and restores chat history Functional / third-party Up to 2 years
__lc_cst LiveChat / Text (accounts.livechatinc.com) A token used to verify the visitor for a secure chat Functional / third-party Up to 2 years
__oauth_redirect_detector LiveChat / Text (accounts.livechatinc.com) A temporary cookie used in certain sign-in or redirect checks Functional / third-party Session

The LiveChat widget also uses local storage and session storage on secure.livechatinc.com (for example to keep chat state, a first-visit flag and short-lived access tokens). The widget script loads on every page.

Contact form (Google reCAPTCHA v2)

Name Provider Purpose Type Duration
_GRECAPTCHA Google (www.google.com) Helps Google tell genuine visitors from automated spam on the contact form Functional / third-party Typically 6 months

The reCAPTCHA checkbox is on the homepage contact form. Because the widget is loaded from www.google.com, Google may also read or set other cookies on the google.com domain (for example NID). If you do not complete reCAPTCHA, the form cannot be sent. The form also includes a hidden honeypot field, which stays on our own site and is used only to catch spam.

YouTube embeds

There is one YouTube video on the homepage and twelve on the In Session page. They are loaded as ordinary YouTube iframes, so YouTube can set cookies as soon as the page loads, even if you do not press play. Cookies commonly used by YouTube embeds include:

Name Provider Purpose Type Duration
VISITOR_INFO1_LIVE YouTube / Google (youtube.com) Estimates bandwidth and may remember playback preferences Functional / marketing, third-party Typically about 6 months
VISITOR_PRIVACY_METADATA YouTube / Google Stores a privacy / consent state for the embedded player Functional, third-party Typically about 6 months
YSC YouTube / Google Keeps a session identifier for video views Analytics / functional, third-party Session
PREF YouTube / Google Stores player preferences, such as volume or quality Functional, third-party Typically up to about 8 months
CONSENT or SOCS YouTube / Google Records a cookie-consent state on Google’s domains Functional, third-party Typically up to 13 months or 2 years

If you are signed in to a Google account, additional Google account cookies may be sent with the request. See Google’s privacy policy and cookie information.

Spotify embeds

There are six Spotify playlist embeds on the In Session page and three on The Team page. Like the YouTube videos, these are ordinary iframes, so Spotify may set cookies when the page loads.

Name Provider Purpose Type Duration
sp_t Spotify (spotify.com / open.spotify.com) A tracking cookie used by Spotify embeds and the Spotify service Analytics / marketing, third-party Typically up to 1 year
sp_landing Spotify Set when you land on a Spotify embed or page Analytics / functional, third-party Typically 1 day

Spotify may set further cookies, especially if you are signed in to Spotify. See Spotify’s cookie policy.

Google Fonts

The site loads the Lato and Montserrat fonts from Google Fonts (fonts.googleapis.com, with the font files usually served from fonts.gstatic.com). Google Fonts typically does not set cookies, but your browser does send a request to Google, which can include your IP address. The font request is currently made automatically on every page.

Theme cookie-consent cookies (not currently in use)

Our Enfold theme can show a cookie banner and then set first-party cookies such as aviaCookieConsent, aviaPrivacyEssentialCookiesEnabled, aviaPrivacyRefuseCookiesHideBar, aviaPrivacyGoogleTrackingDisabled, aviaPrivacyGoogleWebfontsDisabled and aviaPrivacyGoogleReCaptchaDisabled. Those cookies would remember your choice. They are not being set today, because the theme’s cookie consent option is switched off.

7. How to manage cookies

You can block or delete cookies in your browser settings. If you do, some parts of the site may not work as expected. The contact form depends on reCAPTCHA, and the live chat, videos and playlists depend on the third-party tools described above.

You can also use your browser’s site settings to block third-party cookies, or to clear cookies for google.com, youtube.com, spotify.com and livechatinc.com.

For Google Analytics, you may also install Google’s browser add-on to opt out of Analytics, available from Google’s site.

The site does not currently show its own cookie consent banner. Once a banner is in place, you will be able to accept or refuse non-essential cookies from the banner itself, and change your mind later.

8. Your rights

Under UK GDPR you have the right to:

  • ask for a copy of the personal information we hold about you (access);
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete your information in certain circumstances;
  • ask us to restrict how we use your information in certain circumstances;
  • object to processing that is based on legitimate interests;
  • receive information you provided to us in a structured, commonly used format (data portability), where the legal conditions are met; and
  • withdraw consent where we are relying on consent, without affecting the lawfulness of what we did before you withdrew it.

To use any of these rights, contact us using the details below. You do not have to pay a fee in most cases. We may need to confirm your identity before we can respond.

You also have the right to complain to the UK Information Commissioner’s Office (ICO), which regulates data protection in the UK:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113

We would be grateful if you contacted us first, so that we can try to put things right.

9. How to contact us

For any question about this notice, your information or your rights:

Gareth Young
Cube Recording
Penvale Barn, Silverwell, Truro, Cornwall TR4 8JE

Email: info@cuberecording.com
Telephone: 01872 492128

10. Changes to this notice

We may update this notice from time to time, for example if we add a new tool to the website or the law changes. The “last updated” date at the top will always show when it was last revised.