Privacy Policy

Last updated: 4 February 2026

Red Squirrel Music (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what we collect, how we use it, and your rights.

Contact: hello@redsquirrelmusic.co.uk

1) Who we are

Data Controller: Red Squirrel Music.

Data Protection Officer: Sally Proudman

If lessons are delivered by a self-employed teacher featured through Red Squirrel Music, that teacher may also be a data controller for the information they hold for lesson delivery. Where relevant, we will make it clear who to contact.

2) What data we collect

We may collect and process the following types of personal data:

Identity and contact data

  • Name (student and/or parent/guardian)

  • Email address

  • Phone number (if provided)

  • Billing details (e.g., billing name/address if collected at checkout)

Booking and lesson data

  • Appointment type, date/time, booking history

  • Lesson notes, goals, progress notes

  • Any information you provide in intake forms or messages (e.g., experience level, musical interests)

Safeguarding data (where relevant)

  • Student age (or confirmation of age band)

  • Parent/guardian contact details for under-18s

  • Any safeguarding-related communications needed to deliver lessons appropriately and safely

Technical data

  • Basic website usage data and device information collected via cookies and similar technologies (see Cookies Policy)

Payment data

  • Payments are processed by Stripe. We do not store full card details. Stripe will process your payment information directly.

Special category data

  • We do not ask for medical information as a routine part of booking. If you choose to share health or accessibility information, we will only use it to support lesson delivery appropriately.

3) How we collect your data

We collect data when you:

  • use this website (e.g., via forms or cookies)

  • book lessons through Acuity Scheduling

  • contact us by email

  • attend online lessons (e.g., via Google Meet)

  • purchase digital or physical products or courses

4) Why we use your data

We use your personal data for the following purposes:

  1. To provide lessons and services

  • manage bookings and scheduling

  • deliver lessons and support your learning

  • communicate about lessons, resources, and changes

2. To take payments and manage orders

  • process payments and provide receipts/records

3. To run the business

  • keep records for accounting and tax purposes

  • prevent fraud and manage disputes

  • improve our services and website

4. Marketing (optional)

  • If you opt in, we may send updates about new services or resources. You can unsubscribe at any time.

5) Platforms and service providers we use (processors)

We use trusted third-party services and technology to operate the website and help deliver lessons. These companies may process personal data on our behalf:

  • Squarespace

  • Acuity Scheduling

  • Stripe

  • Google Workspace

  • Google Meet

These providers may store or process data outside the UK. Where international transfers occur, they use appropriate safeguards (such as Standard Contractual Clauses or equivalent).

6) Who we share data with

We do not sell your personal data.

We may share your data only where necessary:

  • with the service providers listed above to run bookings, payments, and lesson delivery

  • with a self-employed teacher delivering your booked service (where applicable)

  • where required by law, regulation, or legal process

  • to protect our rights, safety, or property (e.g., handling fraud or disputes)

7) How long we keep your data (retention)

We keep personal data only as long as necessary for the purposes above.

Typical retention periods:

  • Booking and basic contact records: up to 24 months after your last lesson/interaction (to manage re-bookings and follow-ups)

  • Lesson notes: up to 24 months after your last lesson (or longer if you request ongoing tracking)

  • Financial records (invoices/receipts): up to 6 years (legal/accounting requirement)

If you ask us to delete data, we will do so where possible, but we may need to keep certain records for legal or accounting reasons.

8) Your rights (UK GDPR)

You have the right to:

  • access your personal data

  • request correction of inaccurate data

  • request deletion (in some cases)

  • restrict processing (in some cases)

  • object to processing (in some cases)

  • request data portability (in some cases)

  • withdraw consent at any time (where processing is based on consent)

To exercise your rights, email: hello@redsquirrelmusic.co.uk.

9) Keeping your data secure

We take reasonable steps to protect your data, including limiting access to necessary parties and using secure systems provided by our service providers. No system is 100% secure, but we work to reduce risk.

10) Children’s privacy

Lessons are offered to students aged 9+. For students under 18, a parent/guardian must book and provide contact details. We only collect children’s data as necessary to deliver lessons safely and appropriately.

11) Cookies

We use cookies and similar technologies to make the website work and to understand how the site is used. For details, see our Cookies Policy.

12) Complaints

If you have concerns, please contact us first at hello@redsquirrelmusic.co.uk and we will try to resolve them.

You also have the right to lodge a complaint with the UK supervisory authority: the Information Commissioner’s Office (ICO).

13) Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this website, with the ‘Last updated’ date shown at the top.