Privacy Policy
Last update 30/05/2018
​
Summit School of Music (The school) collects and uses personal information about staff, pupils, parents and other individuals who come into contact with the school. This information is gathered in order to enable the school to provide music education and other associated functions. In addition, there may be a legal requirement to collect and use information to ensure that the school complies with it’s statutory obligations.The new law states that you have rights in relation to the data we hold. This includes:
​
-
The right to see the data we keep on record
-
The right to request changes where errors exist
-
The right to request that something is removed from the record / data
-
The right to request that information is not used in any way other than originally intended
-
The right to have your data used by somebody else
-
The right to object to data being used for marketing or other commercial purposes
-
The right for your child’s data to be used for their education only
-
The right to complain about how the data has been gathered and used in this school
-
The right to compensation if damages have occurred as a result of our data handling
Our student data
As a school we require some essential data from parents/students. This 'data' can be as simple and as routine as your address, a contact phone number or any medical conditions your child/the student may have. Such information is not only legally required by the school, but is useful as it helps to ensure that all our students and their families are well served by the school for routine matters.
In most cases, this data will be provided by you in a written form but will then be 'processed' and entered onto the school's information management systems (computer system). Be assured that our systems are:
-
password protected
-
restricted to those with a 'need to know'
-
regularly backed up externally
-
managed in accordance with the law and local guidance
Information usage and storage
The school will always endeavour to tell you what we are doing with your data. However on occasion we may be required to pass on data to other people / agencies. The circumstances in which we would be likely to do so include:
​
-
When booking formal student exams recitals or festivals
-
Where we believe your child to be at risk of harm
-
Where we are legally required to do so
-
At the request of police services in relation to a crime
We use the information you give us for the following reasons:
-
Create and manage your account (including generating invoices)
-
To send you information about lessons, fees, concerts, exams and any other information related to you or your child’s lessons with us
-
Process payment for purchases or services
Our duties
The school must operate within the law (GDPR). This means that the school must:
​
-
Have policies for the management of data (including complaints)
-
Ensure that our staff are aware of and understand our policies and procedures
-
Respond to complaints or requests within one calendar month
-
Keep clients informed of what we 'do' with any data
-
Inform you of any breach in our data that affects you
Under the General Data Protection Regulation 2018 (Regulation (EU) 2016/679 ) you may request a copy of personal information held about you or your child by the school. If you would like a copy of the information held on you, please write to the business address at the bottom of this page. All requests will be responded to within one month, in accordance with the GDPR 2018.
You have the right to access the personal information that the school holds about you (as defined in the EU General Protection Data Regulation 2018) upon receipt of a written request. Before providing personal information to you or another person on your behalf, we will ask for proof of identity and sufficient information about your interactions with us that we can locate your personal information. If any of the personal information we hold about you is inaccurate or out of date, you may ask us to correct it.
The school will not usually charge for any request by parents or students. However, it would consider making a charge when requests are considered to be unfounded or excessive. You have the right to object to the school processing your personal information if we are not entitled to use it any more, to have your information deleted if we are keeping it too long or have its processing restricted in certain circumstances. If you would like to exercise this right, please contact us.
Personal information requests (know as Subject Access Requests) should be sent in writing and posted to:
Summit School of Music Ltd, Arch 68 South Harrow Arches, Off Welbeck Road, South Harrow HA2 8AA