Privacy Policy

Last updated: 12 March 2026

This Privacy Policy explains how Melody Music School (the "School", "we", "us", or "our") collects, uses, and protects your personal data when you visit this website, contact us, or use our music education services in Ireland.

1. Who We Are

We are a music school providing lessons, courses, and related services. For the purposes of applicable data protection law (including the EU General Data Protection Regulation (GDPR)), we are the "data controller" of the personal data we collect from you.

2. What Data We Collect

We may collect and process the following categories of personal data:

Contact details – such as your name, email address, phone number, and postal address.
Booking information – such as lesson type, instrument, level, schedule preferences, and details of the student (including children, where provided by a parent or guardian).
Payment information – such as payment status and transaction details (note: card details are usually processed directly by our payment provider and are not stored by us).
Communication data – such as messages sent through contact forms, emails, or other correspondence.
Technical data – such as IP address, browser type, device identifiers, and information about how you interact with our website (cookies and similar technologies).

3. How We Use Your Data

We use your personal data for the following purposes:

To provide, manage, and improve our lessons, courses, and other services.
To manage bookings, payments, and customer accounts.
To communicate with you about your bookings, enquiries, and important updates (for example, timetable changes or teacher substitutions).
To send you information about our services, events, and offers where permitted by law and, where required, with your consent.
To maintain the security and proper operation of our website.
To comply with legal obligations and respond to lawful requests from public authorities.

4. Legal Bases for Processing (GDPR)

We process your personal data on one or more of the following legal bases:

Contract – where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract (for example, processing bookings for lessons).
Legitimate interests – where processing is necessary for our legitimate business interests, such as running and improving our music school, while respecting your rights and freedoms.
Legal obligation – where processing is necessary to comply with legal or regulatory requirements.
Consent – where you have given us clear consent for a specific purpose (for example, certain marketing communications). You can withdraw your consent at any time.

5. Children’s Data

We may collect and use personal data relating to children where it is necessary to organise lessons or courses for them. This information is usually provided by a parent or legal guardian, who must ensure that it is accurate and that they are authorised to share it with us.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies to improve your browsing experience, remember your preferences, and gather statistics about website usage.

Some cookies are strictly necessary for the site to function.
Other cookies (such as analytics or marketing cookies) may only be used with your consent, depending on your jurisdiction.
You can usually control cookies through your browser settings or, where available, through a cookie banner on our website.

7. How We Share Your Data

We may share your personal data with:

Trusted service providers who assist us in operating the website and delivering our services (for example, IT hosting, payment processors, email delivery services).
Teachers and staff members where necessary to provide your lessons and manage your bookings.
Professional advisers (such as accountants or legal advisers) where needed.
Public authorities, regulators, or law enforcement where required by law or to protect our rights or the safety of others.

We do not sell your personal data.

8. International Transfers

Where your personal data is transferred outside the European Economic Area (EEA), we will take appropriate steps to ensure it is protected in accordance with applicable data protection laws (for example, by using standard contractual clauses or transferring only to countries recognised as providing an adequate level of protection).

9. Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements.

When the data is no longer needed, we will securely delete or anonymise it.

10. How We Protect Your Data

We take appropriate technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights

Under data protection law (including GDPR), you may have the following rights in relation to your personal data:

Right to access – to obtain a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to request that we limit the processing of your data in certain cases.
Right to data portability – to receive your personal data in a structured, commonly used, and machine‑readable format and to transmit it to another controller where technically feasible.
Right to object – to object to processing based on legitimate interests or to direct marketing.
Right to withdraw consent – where processing is based on your consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details on the Contact page. We may need to verify your identity before responding to your request.

12. Marketing Communications

We may send you information about our services, events, and offers if you have requested it, signed up to a mailing list, or where we are otherwise permitted to do so by law.

You can opt out of marketing communications at any time by following the unsubscribe instructions in the email, or by contacting us directly.

13. Links to Other Websites

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy notices of any external websites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The "Last updated" date at the top of this page will be changed accordingly. Please review this page regularly for the latest information.

15. Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us using the information on the Contact page.

You also have the right to lodge a complaint with the relevant data protection authority in your country of residence or in Ireland (for example, the Data Protection Commission) if you believe that your data protection rights have been infringed.

Important: This page is provided for general information purposes only and is not legal advice. For a fully compliant legal document tailored to your situation, you should consult a qualified legal professional.