DATA PRIVACY NOTICE
Tafelmusik/Wirral School of Music
- Who are we?
Tafelmusik/Wirral School of Music operates as two separate limited companies: Tafelmusik Ltd and Keepbond Ltd. The registered address of both companies is:
43 Shrewsbury Road, Prenton, CH43 2JB
This policy applies to both companies.
At Tafelmusik/Wirral School of Music, we are committed to maintaining the trust and confidence of our customers and students. We want you to know that we are not in the business of selling, renting or trading your personal data with other companies and businesses for marketing purposes. But just in case you’re not sure, we’ve provided lots of information in this policy on when and why we collect your personal information, how we use it, the limited conditions under which we may disclose it to others and how we keep it secure.
- Your personal data – what is it?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation (the “GDPR”).
- Which data do we collect, and how do we use it?
Enquiring about lessons
When a student or their parent/carer enquires about lessons, we collect the following personal data:
- Student name, address, date of birth and school & school year where applicable
- Parent/carer’s name, address, contact telephone number and email address
This means that we can:
- Liaise with a student/parent/carer about a lesson trial or their first lesson
- Find the appropriate teacher for the age and ability of the student
When a student enrols, we collect the following personal data:
- Date of birth
This means that we can:
- Create a student record
- Book lessons on our timetable
- Provide the student’s teacher(s) with information which helps to identify their student and plan their lessons
We also collect the following information about the parent/carer of students under 18, and/or person responsible for payment (the ‘customer’):
- Contact telephone number
- Email address
This means that we can:
- Create a customer record
- Contact you regarding any changes to lessons
- Pass on messages from our teachers
- Keep you informed of any news and events directly related to the school
- Issue your invoices for lessons
We store all the above data on our scheduling system, MindBody. For more information on how MindBody keep your information safe, please visit www.mindbodyonline.com/security-policy. For more information on how MindBody use your data, please visit www.mindbody.com/privacy-policy.
We invoice you on our invoicing system, Wave Accounting. For more information on how Wave use your data, please visit https://my.waveapps.com/privacy.
Payment for lessons
When a customer agrees to make a payment to us we collect the following data, when applicable:
- For direct debit payments: the payer’s sort code and bank account numbers; the name on the account; the bank name and address
- For card payments: the customer’s card number, expiry date and CVV code
This data allows us to process payments for lessons, exams and retail items.
Our direct debit payments are processed by Paysafe. For more information on how Paysafe use your information, please visit www.paysafe.com/legal-and-compliance/privacy-policy.
Our card payments are processed by Worldpay. For more information on how Worldpay use your information, please visit www.worldpay.com/uk/privacy-policy.
To make sure you are kept informed about any changes to lessons, issues with payments or news/events connected to the school, we use your personal data to enable us to contact you. We may also need to tell you about something new or different, or ask you to check your data is correct. We may contact you by email, telephone, text or post.
We collect this data when the student enrols with us, and we don’t rent or trade mailing lists with other organisations or businesses.
We use MailChimp to deliver our newsletter and other ‘mass’ email communications. For more information on how MailChimp use your data, please visit https://mailchimp.com/legal/privacy.
We use MessageBird to contact you by text. For more information on how MessageBird use your data, please visit https://support.messagebird.com/hc/en-us/articles/207882929-Privacy-Policy.
Tafelmusik/Wirral School of Music complies with its obligations under the “GDPR” by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
- What is the legal basis for processing your personal data?
Explicit consent of the data subject has been obtained so that we can register you as students of the school, process your payments and keep you informed about examinations, concerts and other news or events relating to the school.
- Sharing your personal data
Your personal data will be treated as strictly confidential and will only be shared with relevant teachers to enable them to teach their lessons. Our office staff will be able to access your records for the purposes of lesson and payment administration. Our teachers and office staff all abide by the GDPR regulations in handling your data.
If we need to share your data with another organisation or business, we will obtain your consent first.
- How long do we keep your personal data?
We will not keep your data for any longer than is necessary for the reason(s) which it has been collected. We are committed to destroying your data in a secure manner when it is no longer needed.
- Your rights and your personal data
You are entitled to view, amend or delete the personal information that we hold.
You can contact our Data Protection Officer, Peter Rainsford, with any requests:
0151 652 3440
- Further processing
If we wish to use your personal data for a new purpose which is not covered by this Privacy Notice, we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.
- Changes to this Privacy Notice
This notice was last reviewed on 23ndMay 2018.
We will next review this notice on 23ndMay 2019, unless we need to make explicit changes in the meantime as a result of company policy or changes in legislation.