Effective 2 July 2026. This policy explains how Taqasim School Music School ("we", "the school") handles personal data, in line with the UK GDPR and the Data Protection Act 2018.
1. Who we are
Taqasim School Music School, London, United Kingdom. We are the data controller for the information described in this policy. You can reach us by email at info@taqasim.net for any data-protection enquiry.
2. What we collect
- Enquiries and contact forms. Name, email address, and the content of your message.
- Newsletter sign-ups. Email address only, with your active consent.
- Course enrolment. Name, email, phone, and any relevant accessibility or learning needs you choose to share so we can prepare for the class.
- Site usage. Anonymous, aggregated visit counts via cookies — only if you accept analytics in the cookie banner.
We do not collect special-category data (health, race, religion, biometric, political) and we do not knowingly collect data from anyone under 16.
3. Lawful basis
We rely on the following lawful bases under Article 6 of the UK GDPR:
- Consent — newsletter, optional cookies. You can withdraw consent at any time.
- Contract — course bookings and the lessons themselves.
- Legitimate interests — replying to your enquiry, keeping basic records of correspondence, and protecting the school's information systems.
4. How long we keep it
- Enquiry emails: up to 24 months from last contact, then deleted.
- Newsletter subscribers: until you unsubscribe.
- Course enrolment records: 7 years (HMRC requirement for bookkeeping).
- Anonymous analytics: 14 months.
5. Who we share it with
We use a small number of trusted processors to run the school. Each one is bound by a written data-processing agreement.
- Email hosting — for sending and receiving correspondence.
- Newsletter platform — for sending the few-times-a-year update.
- Eventbrite and the Arab British Centre — for course bookings, when you choose to book through their platforms.
- Web hosting — to keep this website running.
We do not sell personal data, and we do not transfer it outside the UK or EEA without an appropriate safeguard in place.
6. Your rights
Under the UK GDPR you have the right to:
- Access the personal data we hold about you.
- Have inaccurate data corrected.
- Ask for your data to be erased.
- Restrict or object to processing.
- Receive your data in a portable format.
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, email info@taqasim.net. We aim to respond within 30 days.
7. Cookies
The site uses a small number of cookies. Strictly necessary cookies keep the site working and are always on. Analytics and marketing cookies run only with your consent, which you can change at any time via the cookie preferences link.
8. Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (the UK supervisory authority) at ico.org.uk or by telephone on 0303 123 1113.
9. Updates to this policy
We will post any material changes on this page and update the effective date at the top.