At Cornwall Guitar Academy, we are committed to protecting and respecting the privacy of all our students. This policy should answer aims to answer any questions you may have about the data that I hold on file about you.

This policy has been prepared in accordance with GDPR and may be changed from time to time as updates are required. It is effective from 25th May 2018.

Why is my data being collected?
As a music academy, we collect and process your data to ensure we provide you with the highest level of service, care and tuition.

Data is collected to record your progress and to compare progress week to week. It is also used to highlight changes, concerns, action to be taken and to form a record of education provided.

Data collection also allows us to comply with our insurance requirements.

Who is collecting it?
As a music academy, we collect data from your first point of contact.

We are a multi-skilled music academy and teach from various locations including public schools.

What information is being collected?
We need to have a record of your personal details, date of birth, address, telephone numbers, email, your next of kin (if provided).

Personal data about your music education and progress will also be documented in detail for each session. I may also keep on file pictures we have taken for assessment or comparison purposes. These pictures will not be used in any marketing material and will not be shown to anyone else without your consent. If we wish to use a picture for marketing purposes, we will always ask you to provide written permission first.

How is it collected?
Any information we hold on file has come directly from you, the person who made the appointment booking or a parent/guardian of a student under the age of 16.

Collection of data may happen by laptop or mobile phone logged into my website, via email, text messages, occasional photographs and letters. No personal data will be collected via social media.

Where do we keep your information?
All data is stored electronically and in paper form. Any paper records are stored securely at our head office.

How will we use your information?
Data will be used to communicate appointments, tuition information, progress, and relevant consented media.

We use the information you have provided primarily to keep a record of your tuition. We will also use your data to contact you by phone, post or email regarding your appointments and to contact you with marketing information such as an email newsletter.

You are welcome to opt out of email or text reminders regarding your appointments and the newsletter at any time.

The information you provide along with details of your tuition are treated as confidential.

Who will it be shared with?
We do not share your personal data with third parties unless specifically asked to by you. This could include being asked to discuss your tuition with a local school for example.

No data is sold to third parties for business reasons ever.

We may share good results and achievements from tuition via social media, but no identifying personal data will ever be added.

How long will we keep your data?
We will keep your details and supplementary information for as long as necessary.

Security
All computers, laptops, tablets and phones are locked with passcodes. Online software is password protected. Only individuals with permission can access this data.

No client files are left on surfaces or open on a computer for other students / staff to read.

In the unfortunate event of a data breach such as stolen paper records or if the online cloud-based system is infiltrated, I will notify you as soon as reasonably possible.

Persons under the age of 16 years old
The data we collect for persons under the age of 16 years old is within the same categories for adults. In addition, a parent or guardian is required to read and sign a consent form for music education.

Your Rights
Under GDPR you have certain rights. These include the right to…

be informed – the information above explains how we collect and use your data.
have access – you have the right to request (verbally or in writing) access your personal data and supplementary information free of charge within one month of the request. A fee may be charged for repeated access or for copies of the same information. The request will be logged within your file.
rectification – You have the right to have inaccurate or missing information corrected or completed. Requests can be verbal or written and will be carried out within a month of the request. The request will be logged within your file.
erasure – You have the right to be forgotten. You are welcome to opt out at any time of any marketing, newsletters, emails and text messages should you wish to. The request will be logged within your file.
data portability – you may obtain and reuse your personal data for your own purposes or if you wish to pass it onto another professional. This information will be provided free of charge within one month of the request. The request will be logged within your file. The information will be provided in electronic format and will be emailed.
object – to processing of data for direct marketing or for research and statistics. You can object at any point verbally or in writing. The request will be logged within your file and your details removed from any marketing, research or statistical lists.
decide on matters relating automated decision making and profiling – we do not use any form of this
complain – Please contact us if you have a complaint relating to your tuition or the way we handle your data. You can complain to the ICO if you think I am not handling your data correctly

Consent for Tuition
You will be required to read and consent to this privacy policy before tuition can commence. If you choose not to give consent, tuition will not be carried out and the initial details provided will be deleted.