Privacy Policy

Who We Are

This website (https://courses.musicandmovement.org.uk) provides online courses for Music & Movement.
Music & Movement is the data controller for all personal data collected through this courses platform.
Our main website is: https://www.musicandmovement.org.uk

 

Contact Details

If you have any questions about this privacy policy or how your data is handled, you can contact us at:
Email: [email protected]
Phone: 07929 324965

What Personal Data We Collect

1. When you create an account
To access courses, you must create an account. We collect:
• name
• email address
• password (encrypted — we never see it)
• IP address (for security)

2. When you enrol in a course
LearnDash stores:
• course enrolment history
• course progress
• quiz results
• certificates earned
• completion dates
This information is required to deliver the course and track your learning.

3. When you make a payment (Stripe)
Payments are processed securely by Stripe.
We do not store or see your card details.
Stripe collects and processes:
• billing name
• billing email
• transaction details
• partial card information (last 4 digits)
• IP address (fraud prevention)
Stripe’s privacy policy applies to payment processing.

4. When you contact us
If you email us or message us, we collect the information you choose to provide so we can respond.

5. Technical data
Our hosting provider automatically collects:
• IP address
• browser type
• device information
• pages visited
• security logs
This is used for security and site performance only.

Lawful Basis for Processing
We process personal data under:
• Contract – to provide access to courses, track progress, and process payments
• Legitimate Interests – to maintain site security, prevent fraud, and improve the learning experience
• Legal Obligation – for tax, accounting, and compliance purposes

 

Cookies and Tracking

This courses site uses:
Essential cookies (required for the site to function)
These include:
• WordPress session cookies
• LearnDash course progress cookies
• Login and authentication cookies
• Security cookies
These do not require consent.
No analytics or marketing cookies
We do not use:
• Google Analytics
• Facebook Pixel
• Advertising cookies
• Behavioural tracking

Embedded Content

Some course pages may include embedded content such as:
• videos
• audio
Embedded content behaves as if you visited the other website directly and may collect your IP address and browser details.

Email Notifications

LearnDash may send automated emails related to:
• course enrolment
• course reminders
• password resets
• certificate notifications
These are essential to the functioning of your account.

How Long We Keep Your Data

• Course accounts: kept while your account is active
• Course progress records: up to 7 years (for educational and administrative purposes)
• Payment records: 7 years (required by UK tax law)
• Emails and enquiries: up to 12 months
• Security logs: short-term retention, automatically deleted
You may request deletion of your account at any time (unless we must retain certain data for legal reasons).

Third‑Party Service Providers

We use trusted providers to operate this courses platform:
• Stripe – payment processing
• Hosting provider – security, backups, server logs
• Email service – sending course notifications
These providers only process data on our instructions and must keep it secure.

Your Rights

Under UK GDPR, you have the right to:
• access your personal data
• request corrections
• request deletion of your account
• download your course data
• object to certain types of processing
• restrict processing in specific circumstances
To exercise these rights, contact us using the details above.

Data Protection Complaints (Data Protection (Use and Access) Act 2025)

If you have concerns about how we handle your data, you can raise a complaint with us.
We will:
• acknowledge your complaint within 30 days
• investigate promptly
• keep you updated
• provide a clear outcome
If you are not satisfied, you may contact the Information Commissioner’s Office (ICO):
https://www.ico.org.uk

Changes to This Policy

We may update this privacy policy from time to time.
The latest version will always be available on this page.