GDPR STATEMENT

Last updated: 31st March 2026

Privacy Policy (GDPR)

Effective Date: 31st March 2026

1. Introduction

Welcome to thesingingteacher.co.uk (“we”, “us”, “our”). We are committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy explains how we collect, use, store, and protect your personal data when you use our website (https://thesingingteacher.co.uk) and services.

2. Data Controller

 The data controller responsible for your personal data is:

The Singing Teacher

Contact

3. Personal Data We Collect

 We may collect and process the following types of personal data:

• Identity Data: Name

• Contact Data: Email address, phone number

• Transaction Data: Payment and booking details

• Technical Data: IP address, browser type, cookies

• Usage Data: Website interaction data

• Audio Data: Voice recordings (only where necessary for lessons and with consent)

4. How We Collect Your Data

 We collect data through:

• Contact forms on our website

• Booking and payment systems (Acuity Scheduling, Stripe)

• Online lesson platforms (Mooz)

• Email or direct communication

• Cookies and tracking technologies

5. Legal Basis for Processing

 We process your data under the following legal bases:

• Contract: To provide singing lessons and related services

• Consent: For marketing communications and audio recordings

• Legitimate Interests: To improve our services and website performance

• Legal Obligation: To comply with applicable laws

6. How We Use Your Data

 We use your personal data to:

• Provide and manage singing lessons

• Respond to enquiries

• Process payments and bookings

• Send updates and marketing (with consent)

• Improve our website and services

7. Sharing Your Data

 We do not sell your data. We may share your data with:

• Payment processors (including Stripe)

• Scheduling/booking platforms (including Acuity Scheduling)

• Online lesson platforms (including Mooz)

• Website hosting and analytics providers

• Legal or regulatory authorities if required

All third parties are required to respect the security of your personal data and process it in accordance with the law.

7A. International Data Transfers

 Some third-party services we use (including Stripe, Mooz, and Acuity Scheduling) may process or store personal data outside the United Kingdom (UK) and European Economic Area (EEA).

Where this occurs, we ensure appropriate safeguards are in place, including:

• Use of UK-approved International Data Transfer Agreements (IDTAs)

• Standard Contractual Clauses (SCCs)

• Transfers to countries with adequacy regulations recognised by the UK Government

These measures ensure your personal data remains protected to UK GDPR standards.

8. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes it was collected for, including legal, accounting, or reporting requirements.

Typical retention periods:

• Client records: up to 6 years (for tax/legal purposes)

• Contact enquiries: up to 12 months

• Audio recordings: only as long as necessary for teaching purposes or until consent is withdrawn

9. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request erasure (“right to be forgotten”)

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent at any time

To exercise your rights, contact us at: craigfaulkner@thesingingteacher.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

10. Data Security

 We implement appropriate technical and organisational measures to protect your personal data, including:

• Secure payment processing (Stripe)

• Encrypted communications where applicable

• Access controls and password protection

11. Cookies Policy

Our website uses cookies to enhance user experience and analyse traffic.

We use the following types of cookies:

• Strictly Necessary Cookies: Essential for website functionality

• Analytics Cookies: Help us understand how users interact with the site

• Marketing Cookies: Used only with consent for promotional purposes

You can manage or withdraw consent via your browser settings or cookie banner.

12. Third-Party Links

 Our website may include links to third-party websites. We are not responsible for their privacy practices and encourage you to read their policies.

13. Children’s Data

 Our services may involve individuals under 18. We only collect personal data from minors with parental or guardian consent.

We take additional care to:

• Limit data collection to what is necessary

• Store data securely

• Obtain explicit consent for recordings

14. Audio Recording & Lesson Data

 We may record sessions for educational purposes.

• Recordings are only made with explicit consent

• Recordings are used solely for teaching and development

• Recordings are not shared publicly without additional written permission

• You may withdraw consent at any time

15. Online Lessons (Mooz)

 If lessons are conducted via Mooz or other platforms, your data may be processed by those providers in accordance with their privacy policies.

This may include:

• Video/audio transmission

• User account data

• Session metadata

16. Changes to This Policy

 We may update this policy from time to time. Updates will be posted on this page with a revised effective date.

17. Contact

 If you have any questions about this privacy policy or your data, please contact:

 Craig Faulkner