Privacy Policy

Last updated: 20 October 2026

This policy explains what personal information I collect, why, and what your rights are. I try to keep it plain and short.

Who I am

I am Paul Emmett, a sole trader trading as Paul Emmett Music. I am the "data controller", which means I decide how and why your information is used.

What I collect and why

Pupils and families (lessons, packages and ensembles)

  • Names, email addresses and phone numbers of pupils, parents or carers
  • Age or year group, instrument, lesson notes and progress
  • Any information you choose to tell me that helps me teach well, such as learning needs
  • Payment records (I do not see or store full card numbers)
  • Exam recordings, where an exam requires one (see below)

Ensemble members and clients

  • Names, contact details, invoices and payment records for rehearsal fees, commissions and other work

Website visitors

  • Anything you send me when you get in touch
  • Orders from the Sheet Music Shop: name, email address, billing details and what you bought
  • Basic, anonymous visit statistics (see the Cookie Policy)

My legal reasons for using your information

  • Contract: to set up and run lessons, packages, orders and commissions, and to take payment
  • Legal obligation: to keep accounting and tax records
  • Legitimate interests: to run my business, reply to enquiries, keep lesson records and send updates about lessons to current pupils and families
  • Consent: for example, before any photograph of a pupil is used. You can withdraw consent at any time

Who I share information with

I only share what is needed, with:

  • My Music Staff (MMS): my lesson, invoicing and communication system
  • Stripe, including Apple Pay through Stripe: to take card payments, through MMS and through my website shop
  • Squarespace: hosts my website and Sheet Music Shop
  • Google (Gmail): for email
  • Exam boards: where an exam entry or recording is needed
  • The school where lessons take place: where needed to run lessons
  • HMRC, and my accountancy or bookkeeping tools: for tax and accounts

I do not sell your information. Some of these providers handle data outside the UK. Where they do, they must use appropriate safeguards.

Photographs and recordings

  • I do not take photographs of pupils unless you have agreed in writing beforehand.
  • Names are never used in photographs, and a pupil's name or image is never shared online without prior consent.
  • Consent is only requested when needed, not at sign-up. If I want to use an image for another event or purpose, I ask again.
  • Where an exam needs a video recording, it is stored on my device only until the exam board has received the submission, and is then deleted. I can send the video to the pupil or parents on request. If a pupil is submitting the exam themselves, I send it to them and delete it straight away.

How long I keep information

  • Accounting and payment records: at least 6 years
  • Lesson records: while a pupil is learning with me, and for up to 12 months afterwards
  • Enquiries that do not lead to lessons: up to 12 months
  • Exam recordings: as described above

Updates and marketing

I use MMS to email current pupils and families about lessons, resources and offers. You can ask me to stop at any time, or use the unsubscribe link. I do not currently run a public newsletter. If I start one, I will ask for your consent first.

Your rights

You can ask me to:

  • see the information I hold about you
  • correct anything that is wrong
  • delete your information, or restrict how I use it
  • send you a copy of it in a portable format
  • stop using it for something you object to

Email me and I will reply as soon as I can, and within one month. If you are not happy with my response, please tell me first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Children

Information about children is given to me by their parents or carers. I use it only to teach and look after the pupil. See also my Safeguarding Policy.

Changes

If I change this policy, I will update the date at the top.