PRIVACY STATEMENT - Beccy Burgess Singing Services
Personal data and privacy statement
This privacy notice covers the use of your personal data if you are a pupil or customer of Beccy Burgess Singing Services or if you have provided data when enquiring about services I provide.
I need to process personal data for purposes such as management and day to day administration of my business but I take the privacy and security of your data very seriously and will only use it in a lawful, fair and transparent manner in order to manage my relationship with you and ensure the effective running of my business. This statement sets out the principles I apply when processing personal data. It describes the types of personal data I may collect about you, what I do with any data I collect about you, how I will keep it secure and the legal bases on which I rely for processing your data. This statement also informs you of your rights and how you can contact me.
1. About me and my services
I am a sole trader running a business called Beccy Burgess Singing Services. As a business I provide singing tuition for children and adults both from my studio at home and also in schools. I am also available to hire as a soprano soloist and as a choir director. As I am a sole trader I am also the Data Controller for my business for the purposes of current data protection legislation. Please see the Contact section below for my full contact details.
2. When do I collect personal data?
Information may be collected and used at many stages during your interaction with Beccy Burgess Singing Services. The most regular points of collection are when you make contact with me to enquire about my services, when you visit my home studio, when you enter into a contract with me, and when you visit my website and engage with me on social media.
3. What personal data do I collect from you?
Personal data is any information relating to an identifiable living individual. I only collect the personal data I need to be able to provide you with the services you have asked me to provide or tell you about. The information I hold about you may include:
Contact details: your name, home address, email addresses and telephone numbers.
Date of birth
Photographic and video images: my home studio is equipped with CCTV outside the front door. All visitors to the house are temporarily captured on this equipment for security purposes.
Digital information: IP addresses, and details of your interaction with my website and social media, should you engage with me through these channels.
Correspondence: any additional information you choose to provide me with as part of your enquiry into my services.
Other: I keep ongoing records about all my pupils documenting their progress. These records may contain any relevant information that you choose to provide me with that may have a bearing on your singing and performance. This can include information relating to your physical and mental health that you choose to provide me with when it is relevant to your lessons.
4. How will I use your data and what is my lawful basis for processing it?
I may only process your personal data where I have a lawful basis to do so. I may collect and process your personal data for the following legitimate reasons:
In order to perform a contract I have agree with you to provide you with my business services or in order to respond to any enquiries into my services before we enter into a contract. The lawful basis for collecting the data is as part for performing a contract because we have entered into a contract or you have asked me to take specific steps (handling your enquiry) before entering in a contract for my business services.
If it is necessary for the purposes of my legitimate interests as a business. In these cases I will do so in a way which might reasonably be expected from my relationship with you, and which does not impact materially on your fundamental rights, freedom and interests. I will not process your personal data on this basis if I believe your rights override mine. Instead, I may seek your specific consent, and/or another legal basis. The sort of data that may be collected as part of my legitimate interests as a business could include:
Dates of birth – this is required in order to enter music exams and on the application form for some competitions and festivals. Entering pupils for these is a legitimate part of my business therefore this data is processed as a legitimate interest.
Medical and other personal information - when this information is given to me voluntarily AND where there is a relevant need for me to keep a record of this information in order to perform my business services (e.g. information about a physical or mental health problem that may affect a pupil’s vocal production or ability to perform) there is a legitimate interest to record this information.
Data required to protecting my business from fraud and other illegal activities. This processing is necessary for my legitimate interests by ensuring the proper management of my business and financial risks.
To administer my website and other digital services I may send you survey and feedback requests to help improve my services. These messages will not include any promotional content and do not require prior consent when sent by email or text message. This processing is necessary for development of my services, which is a legitimate interest of my business. I have a legitimate interest to do so as this helps make my products or services more relevant to you. You are free to opt out of receiving these requests from me at any time by contacting me.
I may provide you with information by post (or by email with your consent) about other products and services I offer similar in nature to those you currently receive or have previously asked about. Information I may process for this purpose includes your name, address and email address. This processing is necessary for marketing my services, which is a legitimate interest for my business.
It is necessary for compliance with legal obligations. For example I may need to send you communications required by law or which are necessary to inform you about changes to the services I provide you, for example, updates to this Privacy Statement, and any information legally required which relates to any contracts between us. These service messages will not include any promotional content and do not require prior consent when sent by email or text message.
Lastly, if not covered by the above, I will only process your data where I have your consent to do so, for example in relation to marketing by electronic means. I will only send marketing information to you by email if I have your consent. You have the right to withdraw your consent at any time.
If you have any concerns about my data processing please contact me: see Contact. Please also see Your Rights, below.
5. Is my data safe?
The safety of your personal data is very important to me and I take appropriate technical measures to protect the personal data I transmit, store or otherwise process against accidental or unlawful destruction, loss, alteration or unauthorised disclosure or access. Personal data is securely filed or is stored digitally. My computers and mobile devices are password protected.
6. Who do I share your data with?
In some circumstances I may need to share your data with third parties that enable me to support the efficient running of my business such as:
If this is necessary, I will provide only the information they need to perform the services I require. They will only use the data for the purposes I specify. I require third parties to maintain appropriate security to protect information from unauthorised access or processing (e.g. they must be GDPR compliant).
In some circumstances, I may need to share your personal data with other third parties (including legal or other advisers, regulatory authorities, courts and government agencies) to enable me to enforce my legal rights, or where such disclosure may be permitted or required by law.
Unless I tell you otherwise, your data will not be processed outside the EEA.
7. How long will I keep your data?
I will only keep personal data for as long as is necessary to provide my services, or for as long as I reasonably need to keep the information for the lawful business purposes or to comply with a statutory or other legal requirement.
8. Your Rights
You may exercise your rights by contacting me using the details in Contact, below. I aim to handle any requests within a reasonable period and, in any event, within one calendar month of the original request.
You have the right to be informed about what personal data I collect about you, why, on what lawful basis and what your rights are. This Privacy Statement is the key document I use to inform you about this.
You also have a right to request access to the personal information that I hold about you, and to receive a copy of this information, along with other information which is generally contained in this Privacy Statement.
You have the right to request that inaccurate personal data be rectified, or completed if it is incomplete. It is important to me that the personal information I hold about you is correct so please notify me of any change of details.
In certain circumstances, you have the right to ask me to limit, or cease processing, or erase information I hold about you from my files and systems. This will only be possible if there is no other legal basis under which I am obliged to keep the information. When responding to such requests, I will tell you how such restrictions or deletions may affect my ability to fulfil my contracts with you or otherwise affect your interests.
If you have given me any specific consent to use your personal data, you have the right to withdraw it any time. If you wish to tell me that you are withdrawing your consent, please email me at firstname.lastname@example.org
If you are unhappy with the way I process your personal data, please contact me using the information provided below. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data is being processed improperly or illegally:
Information Commissioner’s Office
Tel: 0303 123 1113 or 01625 545 745
If you have any questions about this policy, or you wish to exercise any of your rights, please contact me by telephone, email or in writing using the contact details below:
Mrs Rebecca Burgess
Beccy Burgess Singing Services
1 Dove Close
11. Updates to this statement
I may change this privacy statement from time to time. I will post updates to this privacy statement on my website, and where appropriate, I may notify you by post or email. Please check my website to stay up to date.
Last updated August 2020