IPSWICH GUITAR SCHOOL
Privacy Notice
Last updated: April 2026
This Privacy Notice explains how Ipswich Guitar School (“we”, “us”, “our”) collects, uses, and protects your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We are committed to protecting your privacy and handling your data responsibly and transparently.
1. Who We Are
Ipswich Guitar School is the data controller for the personal information described in this notice.
Contact details:
Richard Deyn — Ipswich Guitar School
Email: ipswichguitarschool@gmail.com
Phone: 01473 365515
Website: www.ipswichguitarschool.com
Address: 4 Court Farm, Stutton Road, Brantham, Manningtree, Suffolk, CO11 1PW
2. What Personal Information We Collect
We collect the following categories of personal information:
Students and Pupils
Full name
Date of birth (where relevant to lesson planning)
Emergency contact name and phone number
Parents and Guardians (for pupils under 18)
Full name
Phone number
Email address
Relationship to the pupil
Website Visitors
Anonymised traffic and usage data via Google Analytics (this data cannot be used to identify individual visitors)
We do not collect sensitive personal data (such as health information, ethnicity, or financial details) unless you specifically provide it to us and give explicit consent for us to hold it.
3. How We Collect Your Information
We collect personal information:
Directly from you or a parent/guardian when you enquire about or enrol in lessons
Via our website contact or enquiry forms
Through email or phone communication
Automatically via Google Analytics when you visit our website (anonymised data only)
4. Why We Use Your Information (Our Legal Bases)
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:
Legitimate Interests
We use contact details to communicate with students and parents/guardians about lesson scheduling, cancellations, changes to timetables, and school events. This is in the legitimate interests of running a music education service.
Contractual Necessity
Where you have agreed to tuition with us, we process your contact data to fulfil our obligations in delivering that service.
Consent
Where we send marketing or promotional communications (e.g. information about new courses or offers), we will only do so where you have given us permission. You may withdraw consent at any time.
Legal Obligation
We may retain certain records for as long as required by law (e.g. to meet HMRC or other regulatory requirements).
5. Children Under 18
Where pupils are under 18, we require consent from a parent or guardian before processing the child's personal data. We collect the minimum personal information necessary for lesson delivery.
We do not use children's data for marketing purposes, and we do not share it with third parties except where legally required.
If you believe we hold personal data about a child without appropriate consent, please contact us immediately at richard@deyn.co.uk so we can address this.
6. How Long We Keep Your Information
We retain personal data only for as long as necessary:
Active student contact details: held for the duration of tuition and up to 12 months after lessons end, unless you ask us to remove it sooner
Financial or administrative records: retained for 6 years in accordance with HMRC requirements
Website analytics data: retained and managed by Google in accordance with Google’s own retention policies (data is anonymised and not linked to individuals)
When data is no longer needed, we securely delete or anonymise it.
7. Who We Share Your Information With
We do not sell or rent your personal data to any third party.
We may share your information only in the following limited circumstances:
With service providers who help us operate the school (e.g. email platforms), under contractual data processing agreements
With Google Analytics for anonymised website traffic analysis — this data cannot identify individual visitors
Where required by law, for example by a court order or regulatory authority
In the event of a business transfer (e.g. sale of the school), in which case we would notify you in advance
8. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of access — to request a copy of the data we hold about you
Right to rectification — to ask us to correct inaccurate data
Right to erasure — to ask us to delete your data in certain circumstances
Right to restrict processing — to ask us to limit how we use your data
Right to data portability — to receive your data in a structured, commonly used format
Right to object — to object to processing based on legitimate interests or for marketing
Rights related to automated decision-making — we do not use automated decision-making or profiling
To exercise any of these rights, please contact us at richard@deyn.co.uk. We will respond within one month of receiving your request.
9. How to Make a Complaint
If you are unhappy with how we have handled your personal data, please contact us in the first instance so we can try to resolve the matter.
You also have the right to lodge a complaint with the UK’s data protection regulator:
Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Phone: 0303 123 1113
Post: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
10. Cookies and Google Analytics
Our website uses Google Analytics to understand how visitors use the site. This service uses cookies — small text files placed on your device — to collect anonymised data about page visits, session duration, and general geographic region.
This data is not linked to any individual and we cannot use it to identify you personally. You can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout.
You can also manage cookie preferences through your browser settings.
11. Updates to This Notice
We may update this Privacy Notice from time to time. Any changes will be posted on our website with a revised date at the top of this document. We encourage you to review it periodically.
12. Contact Us
For any questions about this Privacy Notice or how we handle your personal data, please contact:
Richard Deyn
Ipswich Guitar School
Email: ipswichguitarschool@gmail.com
Phone: 01473 365515
Website: www.ipswichguitarschool.com
Ipswich Guitar School — Privacy Notice — April 2026