Who operates ShedDrum
ShedDrum is operated by Steven Shedden, a sole trader trading as ShedDrum.
This policy describes ShedDrum’s new account-enabled online services: lessons, accounts, score libraries, practice tools and private video feedback. For privacy questions or requests, email contact@sheddrum.com.
Services described below apply when they are available and you choose to use them. This page does not announce that those services have launched. The existing Squarespace shop and separate native apps are outside the scope of this policy and may have their own privacy information.
Information used to provide your services
- Accounts: your name, email address, account identifier, profile image if supplied, verification status and authentication/session information.
- Enquiries and lessons: contact details, messages, requested lesson date, time and timezone, booking status and correspondence about the lesson.
- Saved libraries: the metronome and groove settings and names you save to your account, download history, score purchases and access rights.
- Video feedback: the video and audio you upload, its filename and technical details, your title and question, permission confirmation, payment status and the reviewer’s written feedback.
- Purchases: items, amounts, payment and refund references and, for physical orders where offered, delivery/contact details.
- Email requests: the email address and score or launch update you request, plus your separate marketing preferences.
- Website operation: request information such as IP address, browser/device information and diagnostic or security logs handled by the website and its service providers.
These details support account access, delivery of requested services, customer support, purchase verification, fraud prevention and reliable operation. If required information is missing, the corresponding service may not be available.
Signing in with Google
If you choose Google sign-in, Google and Clerk authenticate you and provide the account identifier, basic profile details and email/verification information needed to create or access your ShedDrum account. ShedDrum does not receive your Google password.
Google sign-in is used only to authenticate your ShedDrum account. Signing in does not grant ShedDrum access to your Gmail messages, Google Drive files, contacts or personal calendar. You can review or revoke the connection in your Google Account. Revoking that connection does not itself delete records held by ShedDrum; contact us to request their deletion.
Online lessons, Google Calendar and Google Meet
When calendar-based booking is available, ShedDrum stores your requested time and timezone, contact details, booking reference, payment status and correspondence needed to manage the lesson. Confirmed appointments also have a Google event reference and meeting link. Only authorised ShedDrum staff can access the private teacher workspace.
ShedDrum separately authorises its own business Google account to check availability in its connected calendars and create, reschedule or cancel lesson appointments. This teacher connection is separate from customer Google sign-in. Customers do not need to give ShedDrum access to their personal calendars.
Google processes appointment times, a booking reference and meeting information. The public booking page shows available times, not the names or details of private events in the teacher’s calendar. ShedDrum sends booking and appointment emails to the customer and teacher, including meeting links and calendar attachments where appropriate.
If you add an invitation to your calendar or join a Google Meet lesson, your chosen calendar service and Google process the information needed to provide those services under their own privacy terms. Your name, voice, video and anything you share in a meeting may be visible or audible to the other participants. Share joining links only with people who should attend.
Service providers and sharing
The website uses specialist providers to operate the service:
- Clerk and Google: account authentication, verification and related security functions. Google Calendar and Google Meet also support online lesson scheduling and meetings, as described below.
- Stripe: hosted payment processing. Payment card details are entered with Stripe; the website receives payment references and status rather than storing your full card number or security code.
- Mux: video upload, processing and private playback for video feedback and supported score/lesson media.
- Vercel, Neon and Sanity: hosting, storage, application records and website content delivery.
- Resend and MailerLite: service correspondence, requested score delivery and the email updates you choose.
Where a physical purchase is offered, the relevant fulfilment provider and delivery service need the information required to make and deliver the order. Existing Squarespace purchase links take you to the separate checkout used for those products.
Information may also need to be provided to meet applicable legal obligations or resolve a payment dispute.
Where information is processed
ShedDrum uses overseas services. The current website database and private file store are located in the United States. Clerk processes account information in the United States and through its service providers; Mux processes video and playback information in the United States and other countries through its international delivery network.
Resend stores service-email data in the United States. The MailerLite service used for requested score delivery and email updates has its main data centre in the Netherlands, with related support and processing through its service providers, including in Poland. Sanity handles website content through infrastructure in Europe and the United States and a global delivery network.
Google and Stripe also process information internationally, including in the United States. Stripe describes processing in Europe and India as well. These locations describe known arrangements, rather than a guarantee that every provider copy remains in a single country. Provider support, security, backups and delivery services can involve other locations.
Private videos and written feedback
Feedback submissions are associated with your account and made available to you, the authorised ShedDrum reviewer and the providers needed to upload, process, store and play the video. They are not published in a public gallery.
For new submissions under this policy, video access ends 30 days after Stevie publishes the written feedback, and the video is scheduled for deletion. Your account shows the date after publication. Written feedback stays in your account until you request deletion or close it. Keep your original video if you want a permanent copy. Existing submissions without these terms are not automatically enrolled.
Only upload footage you have permission to share with ShedDrum, including permission from other people shown or heard. Use the available removal controls or contact us about earlier deletion. A payment awaiting confirmation or a submission awaiting review can require assistance before removal. Removing a video does not automatically erase payment, review or operational records.
Stevie provides the written review. ShedDrum does not request AI-generated reviews or AI analysis of your submitted video. Mux processes the media to provide the video service; its terms also allow use of non-personal or anonymised data to improve its services, including its own AI models.
Microphone, camera and practice recordings
Practice features that use your microphone or camera ask for browser permission. The stroke counter analyses microphone input on your device. Mock-competition recordings are created in your browser for local playback or download. These features do not themselves upload the recording to ShedDrum.
If you separately choose to upload a recording for video feedback, the private-video arrangements above apply. You can revoke microphone or camera permission in your browser settings. Keep your own downloaded recordings if you want to retain them.
Cookies and browser storage
Authentication uses cookies and related browser storage to maintain and protect your session. The website also uses a cookie to remember free-score access and a browser-bound cookie to recover a lesson checkout.
Your basket, practice preferences, competition plans and progress can be stored in your browser. Some settings and download recovery information last only for the current browser session. Items explicitly saved to your account are also stored on the server.
You can clear cookies or site storage in your browser, but this may sign you out or remove local plans and drafts. Clearing browser storage does not delete account records.
Embedded YouTube and Vimeo videos contact those providers when the embedded player loads, which may happen before you press Play. Those services, and external authentication and payment pages, can receive request information and use their own cookies. YouTube embeds use its privacy-enhanced player, which does not mean that no information is sent to YouTube.
Email choices
A request for a free score allows delivery of that score; the optional checkbox for ongoing ShedDrum updates is separate. Launch-list sign-ups request updates about the selected launch. You can use the unsubscribe link in marketing emails or contact us to change your preferences.
Necessary account, security, booking and purchase messages are separate from marketing preferences.
Open and click tracking are disabled in the current Resend service-email configuration. Marketing-email preferences are handled separately; an unsubscribe does not cancel a purchase or prevent essential account and service messages.
Keeping, accessing and deleting information
Account details and saved libraries support your account while you use it. Written feedback stays available until you request deletion or close the account. The submitted-video period is described above. Enquiries and support records are kept as needed to handle the request and follow-up. Records needed for a dispute, security investigation or legal obligation may need to be kept longer.
Australian business record-keeping generally requires relevant transaction records for at least five years, with longer periods in some circumstances. Closing an account does not automatically erase invoices, payment/refund references or records that must be retained. Stripe may separately retain information for its own fraud-prevention and legal obligations. Marketing suppression records can be retained to respect an unsubscribe.
Email contact@sheddrum.com to request access, correction, an export, account closure or deletion. We may need to verify your identity before acting. Account closure and associated-record deletion are handled as a verified request; deleting your sign-in profile alone does not automatically erase separate website records. Tell us if you have already removed that profile so we can locate and deal with those records.
Deleting a saved item removes it from your library view; it does not necessarily immediately erase every stored copy. Deleting browser storage or revoking Google sign-in also does not erase server records. We will explain what has been removed, what must be retained and any outstanding provider action when responding to your request.
Backups and provider recovery copies are separate from the active service. A deletion may take additional time to reach those copies, and provider legal or security requirements can affect retention. We do not promise immediate erasure from every backup. Deleted information restored during recovery must be removed again before normal use.
Questions, concerns and changes
Send a privacy concern to contact@sheddrum.com with enough detail for us to investigate. Please do not email passwords or full payment-card details. We will review the concern and explain the outcome and any further steps available.
You can also contact the Office of the Australian Information Commissioner for information about privacy complaints and whether it can help.
When the policy changes, the updated version and its date will appear here.