Privacy Policy
1. Who I Am
My name is Doug Cartwright, and I provide private guitar tuition to students of all ages.
I am a self-employed music teacher and the data controller responsible for the personal information collected and processed in connection with my teaching services.
You can contact me at:
Email: doug@dougcartwright.com
2. What Information I Collect
I collect only the information needed to manage and deliver lessons effectively. This may include:
• Student name and contact details
• Parent or guardian contact details (for students under 18)
• Lesson scheduling and attendance information
• Payment records and invoices
• Notes related to musical progress or instrument details
Payment information (such as card details) is not stored by me and is processed securely by Stripe.
3. How I Use the Information
Personal information is used solely for:
• Managing lesson scheduling and administration
• Communicating about lessons, progress, or billing
• Processing lesson payments
I do not share or sell personal information to third parties.
4. How Information Is Stored
• Lesson correspondence and contact details are stored securely in my iCloud email account, protected by multi-factor authentication.
• Payment data is processed and stored by Stripe, which is fully PCI-compliant and GDPR-compliant.
• Lesson notes and scheduling information may also be stored securely on password-protected devices.
All data is kept confidential and used only for the purposes stated.
5. Data Sharing
Personal data is not shared with any third parties except where legally required (for example, by HMRC) or where you have given explicit consent.
6. How Long Data Is Kept
Student contact and lesson information is retained for as long as lessons are ongoing, and for up to one year afterwards for administrative purposes such as re-enrolment or record keeping.
Financial records are retained for up to six years as required by HMRC.
7. Your Rights
You have the right to:
• Request access to the personal information I hold about you
• Request correction or deletion of data where appropriate
• Withdraw consent for communications at any time
• Lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data has been misused
More information: www.ico.org.uk
8. Updates
This Privacy Policy may be updated periodically to reflect changes in data protection practices or lesson administration.
The latest version will always be available at: