Privacy Policy
1. Introduction and company information
This Privacy Policy explains how Northbridge Vocal Studio Ltd collects, uses, stores, shares, and protects personal data when you visit our website, contact us, book services, attend sessions, enquire about our vocal services, or otherwise interact with us.
Northbridge Vocal Studio Ltd is the data controller for the personal data described in this policy.
- Company name: Northbridge Vocal Studio Ltd
- Address: Northbridge Vocal Studio, 18 Whitehall Road, Studio 3, Leeds LS12 1AF, United Kingdom
- Email: [email protected]
- Phone: +44 113 468 7924
This policy applies to all personal data processed by Northbridge Vocal Studio Ltd in connection with our vocal coaching, rehearsal, recording support, lesson bookings, customer communications, administration, and related business activities.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, title, and, where relevant, date of birth.
- Contact data: email address, telephone number, postal address, and emergency contact details where required.
- Booking and transaction data: session bookings, attendance records, payment status, invoices, receipts, and related correspondence.
- Communication data: messages you send to us, including enquiries, feedback, complaints, and responses.
- Technical data: IP address, browser type, device identifiers, log data, and website usage information.
- Marketing preferences: your consent choices and communication preferences.
- Service-related data: information you voluntarily provide about your vocal experience, goals, preferences, availability, and learning needs.
- Special category data: in limited circumstances, information concerning health, accessibility needs, or other sensitive matters that you choose to share with us so that we can provide suitable vocal services and adjustments.
We collect personal data directly from you, through our website or contact forms, by email, by telephone, during lessons or sessions, through booking and payment processes, and from service providers acting on our behalf. We may also receive information from third parties where you have asked them to contact us or where it is necessary for service delivery.
3. Purpose of data processing
We process personal data for the following purposes:
- to respond to enquiries and provide information about our services;
- to manage bookings, scheduling, cancellations, rescheduling, and attendance;
- to deliver vocal coaching, lesson administration, rehearsal support, and related services;
- to process payments, issue invoices, and maintain financial records;
- to communicate with clients, students, parents, guardians, and collaborators;
- to manage our business operations, customer records, and internal administration;
- to maintain website functionality, security, and performance;
- to improve our services, training materials, and customer experience;
- to send marketing communications where legally permitted and, where required, with consent;
- to comply with legal, regulatory, tax, accounting, and insurance obligations;
- to establish, exercise, or defend legal claims;
- to protect the safety, security, and well-being of our staff, clients, and visitors;
- to accommodate accessibility needs and adapt services where appropriate.
4. Legal basis for processing
We will only process your personal data where we have a lawful basis to do so. Depending on the activity, the legal bases we rely on may include:
- Contract: where processing is necessary to enter into or perform a contract with you, including providing vocal services and managing bookings.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as managing our services, securing our systems, handling enquiries, and improving our offerings, provided those interests are not overridden by your rights and freedoms.
- Consent: where you have given clear consent, for example for certain marketing communications or for processing optional sensitive information you choose to provide.
- Legal obligation: where processing is necessary to comply with applicable laws and regulations.
- Vital interests: in exceptional circumstances where processing is necessary to protect someone’s life or physical safety.
- Substantial public interest or other applicable basis for special category data: where required by law and only in accordance with applicable legal requirements.
Where we process special category data, we will do so only where an appropriate condition applies and additional safeguards are in place.
5. Data sharing and third parties
We may share personal data with trusted third parties where necessary for the operation of our business and the delivery of our services. These third parties may include:
- IT and cloud service providers: for hosting, storage, email, backup, and security services;
- Booking and scheduling platforms: for appointment management and client administration;
- Payment processors and financial institutions: for taking payments, refunds, and fraud prevention;
- Professional advisers: including accountants, lawyers, insurers, and auditors;
- Regulators, public authorities, and law enforcement: where disclosure is required by law or necessary to protect our rights;
- Website analytics and marketing service providers: where permitted and subject to applicable consent or other legal requirements;
- Contracted staff or associates: where they require access to perform services on our behalf and under confidentiality obligations.
We require third parties who process personal data on our behalf to implement appropriate technical and organisational safeguards and to process data only in accordance with our instructions and applicable law.
6. Data transfer to third countries
Where personal data is transferred outside the United Kingdom, or outside the European Economic Area where relevant, we will take steps to ensure that an adequate level of protection is maintained. Such safeguards may include:
- an adequacy regulation or equivalent finding;
- standard contractual clauses or other approved transfer mechanisms;
- supplementary security measures where appropriate;
- binding contractual obligations on the recipient.
If you would like further information about transfers outside your jurisdiction and the safeguards used, you may contact us using the details provided below.
7. Storage duration
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, insurance, and reporting requirements.
- Enquiry data: typically retained for a reasonable period after the enquiry has been resolved.
- Client and booking records: retained for the duration of the service relationship and for a further period where necessary for administration, dispute resolution, or legal compliance.
- Financial records: retained for the period required by tax and accounting law.
- Marketing data: retained until you unsubscribe, withdraw consent, or object, subject to any necessary suppression records.
- Special category or sensitive information: retained only for as long as necessary for the relevant purpose and then securely deleted or anonymised.
When data is no longer required, we will delete, anonymise, or securely archive it in accordance with our retention procedures.
8. User rights
Depending on applicable law, you may have the following rights in relation to your personal data:
- Right of access: to request confirmation of whether we process your personal data and to obtain a copy of that data.
- Right to rectification: to request correction of inaccurate or incomplete personal data.
- Right to erasure: to request deletion of your personal data in certain circumstances.
- Right to restriction: to request that we limit the processing of your personal data in certain cases.
- Right to data portability: to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, have it transmitted to another controller.
- Right to object: to object to processing based on legitimate interests and to object at any time to direct marketing.
To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding. We will respond within the time limits required by applicable law and may decline requests where an exception applies.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
You can withdraw consent by contacting us at [email protected] or by using any unsubscribe or preference-management option we provide. If you withdraw consent, we may be unable to provide certain optional services or communications.
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue.
You also have the right to lodge a complaint with the relevant data protection authority. In the United Kingdom, this is the Information Commissioner's Office (ICO). Details of how to contact the ICO are available on its official website.
11. Data security
We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, disclosure, or destruction. These measures may include:
- access controls and password protection;
- secure storage and encrypted systems where appropriate;
- staff confidentiality obligations;
- regular updates and security monitoring;
- data minimisation and role-based access;
- procedures for handling suspected data breaches.
However, no system can be guaranteed to be completely secure. We therefore cannot promise absolute security, but we continuously work to protect your personal data and respond appropriately to security incidents.
12. Contact information
If you have any questions about this Privacy Policy, wish to exercise your rights, or need further information about our data handling practices, please contact:
- Northbridge Vocal Studio Ltd
- Address: Northbridge Vocal Studio, 18 Whitehall Road, Studio 3, Leeds LS12 1AF, United Kingdom
- Email: [email protected]
- Phone: +44 113 468 7924
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, technical developments, or business operations. Any updates will be posted on this page with a revised effective date where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how Northbridge Vocal Studio Ltd protects your personal data.