Who we are
Kent Music Academy (Isaiah Prince, trading as Kent Music Academy, Units 5 & 6 Montpelier Business Park, Dencora Way, Ashford, Kent TN23 4FG) is the data controller for personal data collected through kentmusicacademy.com. Contact: info@kentmusicacademy.com.
What we collect
- Account holder details: name, email, phone, date of birth (to confirm you are 18+), optional address for home lessons.
- Learner details: name, date of birth, instrument interest, experience and goals, and any learning notes you choose to share.
- Optional care information: medical, accessibility and emergency-contact details that you choose to provide so lessons are safe and suitable. This may include health data, which is special category data. We process it only with your explicit consent (Article 9(2)(a) UK GDPR), and you can remove it at any time.
- Booking and payment records: lesson dates, tutor, amounts and payment status. Card payments are handled by Stripe. We never receive or store full card numbers.
- Technical data: essential cookies that keep you signed in. See our Cookie Policy.
Why we use it (lawful bases)
- To provide lessons you book (contract).
- To keep learners safe and respond to safeguarding concerns (legal obligation and legitimate interests; vital interests in an emergency).
- To keep financial records (legal obligation, as HMRC requires).
- To send booking confirmations and reminders (contract).
- To send occasional news, only if you opt in (consent).
Who can see it
- Our tutor(s): only for learners they teach, and only the information needed to teach safely.
- Our administrator(s).
- Service providers acting for us: Supabase (database and login, hosted in London, UK), Stripe (payments), our email delivery provider, and Netlify (website hosting). Each works under a data processing agreement.
- We never sell your data.
How long we keep it
- Account and learner data: while your account is active, then deleted within 12 months of closure or on request.
- Payment and booking records: 6 years, to meet UK tax requirements. After deletion, these are kept only with the minimum identifying details.
- Safeguarding records: kept in line with statutory guidance.
Your rights
You can ask for access to your data, correction, deletion, restriction, portability, or object to processing. From your account you can download a copy of your data and ask for your account to be deleted. We respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).
Children
Children cannot create accounts. A parent or guardian provides and manages all information about learners under 18, and must confirm they have authority to do so.
Last updated: 2 October 2026