Privacy

Last updated: 11 October 2026

This page explains what personal data the Mount Helicon website collects, why, and what you can ask us to do with it.

Who is responsible

Mount Helicon (Galen Mac Caba and Sigrid Anita Haugen), Oslo, Norway, is responsible for the personal data described here. Questions about privacy can be sent to Galen Mac Caba through our contact form, or by email to the address shown on that page.

What we collect, and why

We only collect what you choose to send us through the website’s two forms.

• Contact form: your name, email address, the kind of enquiry (“I am writing as a…”), who the message is for, and your message.
• Commission brief: your name, email address, the occasion, the venue and city (optional), your message, and your answers to the estimate (ensemble, duration, deadline, text setting and language, and whether you would like a recording), together with the price range the estimate calculated.

We use this information to reply to you and, for a commission brief, to prepare a quote and a delivery date. The legal basis is our legitimate interest in answering enquiries, and, for commission briefs, taking the steps you have asked for before a possible agreement.

Your message is read by the composer it is addressed to and by Mount Helicon. We do not sell or share your details with anyone else, and we do not use them for marketing.

Services that handle data for us

• Netlify hosts the website and stores the messages sent through the forms, then forwards them to us by email. Like any web host, Netlify keeps short-term technical logs (such as IP addresses and the pages requested) to run the site securely. Netlify’s spam filter sends messages for processing to third-party service Akismet. Netlify is based in the USA. Transfers to the USA are covered by Netlify’s data processing agreement, which includes the EU Standard Contractual Clauses.
• Cloudflare Turnstile checks that forms are sent by a person rather than an automated program. To do this it processes your IP address and technical information about your browser. Full details are in Cloudflare’s privacy policy.
• Email: form messages reach us through our email provider, Gmail (Google).

To prevent misuse, the price estimate and the forms limit how often they can be used from each connection. For this, the website stores a scrambled (hashed) version of your IP address together with a count of recent requests; it does not store the IP address itself. These records are deleted automatically after one day.

Cookies and tracking

The website does not use cookies for tracking or advertising, and it has no analytics. Fonts and recordings are served from the website itself, not from third parties. While you fill in the estimate, your answers are kept in your own browser so that the back button and refreshing the page work; they are deleted when you close the tab. To show the price range, your answers (but not your name or email address) are sent to the website to be calculated and are not stored. They only reach us if you send a brief.

How long we keep your data

We keep enquiries for up to 12 months after our last contact, and then delete them. If you commission a work, we keep what is needed for the agreement and for as long as Norwegian bookkeeping law requires.

Your rights

You can ask to see the personal data we hold about you, have it corrected or deleted, restrict or object to its use, and receive a copy of it. Write to us through the contact form and we will reply within one month.

If you believe we handle your data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no).