Data Protection Policy
Purpose
1
This Data Protection Policy sets out how Music In Schools UK Ltd collects, uses, stores, and protects personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
We are committed to ensuring the privacy and security of all data subjects — including students, parents/guardians, staff, contractors, and website users.
Scope
2
This policy applies to:
All staff, tutors, contractors, and anyone handling personal data on behalf of Music In Schools UK Ltd
All personal data processed electronically or in paper form
All business areas, including website activity, student registration, tuition delivery, marketing
Data Controller
3
Music In Schools UK Ltd 88 Pengelly, Delabole, Cornwall, PL33 9AU, UK
Company Registration Number: 1563 0332 Email: musicinschoolsuk@gmail.com
Key Principles
4
We are committed to processing personal data in accordance with the following principles:
Lawfulness, fairness, transparency: We explain why and how we collect data at point of entry
Purpose limitation: Data is used only for the reason it was collected
Data minimisation : We only collect what we need
Accuracy : Records are reviewed and updated regularly Music in Schools – Data Protection Policy 2026
Storage limitation: We don’t retain data longer than necessary
Integrity and confidentiality: Data is stored securely, with restricted access
Accountability: We document our decisions and responsibilities
Lawful Bases for Processing
5
We rely on one or more of the following legal bases:
Consent: for marketing communications and photos/videos
Contract: to deliver lessons, communicate with customers
Legal obligation: safeguarding, financial record keeping
Legitimate interests: internal processes, business improvement
Types of personal data collected
6
We may collect and process:
Full name, contact information, emergency contacts
Student info (age, school, instruments, lesson history)
Email communication, lesson feedback, performance recordings (with consent only)
Payment and billing information
IP addresses, device/browser data via cookies (with consent)
Sensitive data (e.g. medical or safeguarding concerns) is only collected where necessary and treated with enhanced protection.
Individual Rights
7
All data subjects have the right to:
Access their personal data
Rectify inaccurate or incomplete data
Erase personal data (subject to legal or contractual obligations)
Restrict or object to processing
Withdraw consent at any time
Lodge a complaint with the James Manders Director
To exercise any rights, contact: musicinschools@gmail.com
Data Sharing & Third PArties
8
We may share data with:
Tutors and teaching staff (under data sharing agreements)
Music in Schools UK Ltd Accounts department
IT support and safeguarding bodies where required
All third-party processors are contractually obliged to comply with UK data laws.
Our data security measures:
Access to data is restricted by role
Staff and contractors receive GDPR training
Devices are password-protected and kept up to date
Paper records (if any) are securely stored and shredded when no longer required
Any suspected breach must be reported to the Data Protection Contact immediately. We will:
1. Investigate and contain the breach
2. Report to James Manders, Director within 72 hours (if required)
3. Notify affected individuals where there is a high risk to their rights
4. Document all outcomes and actions taken
Data Security
9
Data Breach Protocol
10
Data Breach Protocol
10
Any suspected breach must be reported to the Data Protection Contact immediately. We will:
1. Investigate and contain the breach
2. Report to James Manders, Director within 72 hours (if required)
3. Notify affected individuals where there is a high risk to their rights
4. Document all outcomes and actions taken
Our staff must:
Understand and follow this policy
Only access data relevant to their role
Report any concerns or breaches immediately
Never store or share data outside of authorised systems
This policy is reviewed annually or when there are changes in the law, technology, or operations that impact data handling.
Email: musicinschoolsuk@gmail.com
Phone: 07958796153
Mail: Music In Schools UK Ltd, 88 Pengelly, Delabole, Cornwall, PL33 9AU, UK
Staff Responsibilities
11
Policy Review
12
Questions or Concerns
13
Have a question about our Data Protection Policy?
You can contact Jody, our Director and Administrator, directly by phone or email, or via the contact form below.
Jody Manders
Director, Administrator & Enrolment Coordinator
Jody holds a vast amount of experience in both music and office administration, and has worked in secretarial roles and schools for many years.
Jody now operates Music in Schools UK Ltd, overseeing enrolments, organising timetables, and handling daily emails and enquiries.
In addition to her administrative roles, Jody has also made a name for herself as a professional singer, leading a popular wedding and party band in the Buckinghamshire region. As a session singer, she has performed with a small choir alongside artists including Emeli Sande, Tom Walker and Ed Sheeran.
Jody is in the office between the hours of 10:30am -2:30pm Monday to Friday during term time. Outside of work Jody enjoys walking Ozzie, her wired haired standard dachshund along the Cornish coastal paths and beaches.