PRIVACY AND GDPR POLICY

Lindsay Leighton is the "Controller" of the personal data that you provide.

WHAT I NEED

Unless otherwise agreed with you, I will only collect basic personal data about my students and their associates. This information may include:

• your name
• postal address
• phone number
• email address
• date of birth
• bank details
• education details
• medical conditions
• special educational needs data

I may also hold information on students' musical education including data from lesson plans, progress reports and exam results. This will be collected directly from you when you fill in the application form for lessons, when you make enquiries on the website or when you interact with me during your time as a student or parent/carer.

WHY I NEED IT

Your personal data is necessary for me to advise you of lesson dates and schedules; for billing purposes; and any changes/communications necessary for the effective running of the business. Your data may also be used to contact you to promote any goods or services that may be of interest and relevance to you.

HOW I USE YOUR PERSONAL DATA

Personal data provided to Lindsay Leighton will be used for the purposes set out at the time of collection. No third party will have access to or be able to use your personal data. I will take all reasonable steps to ensure that your personal data will be stored and processed as securely as possible. I will not collect any personal data from you that I do not need.

Personal data will generally be kept for 7 years, after which time it will be destroyed if it is no longer required for the lawful purpose(s) for which it was obtained.

You have the right at any time to request that your personal data is ammended or deleted. It is your responsibility to ensure the data that I hold is accurate and current. Any alterations can be requested via the Contact Me page.