1. Who We Are

Music Tech Hub Ltd (“Music Tech Hub”, “we”, “us”, “our”) is a music education company providing curriculum-aligned lesson resources, training, and digital tools for teachers and music education professionals across the UK.

Our registered address is available on request. You can contact us at:
Email: bradley@musictechhub.org

We are the data controller for personal data collected through this website and our associated web applications.

2. What This Policy Covers

This policy applies to:

• The Music Tech Hub website at musictechhub.org, including member accounts and gated resources
• Our associated web applications hosted via Cloudflare Pages (browser-based music apps accessed as part of paid project resources)
• Our member administration system, which uses Supabase as its backend database

It does not cover third-party websites or services we may link to. We recommend reading the privacy policies of any external sites you visit.

3. The Data We Collect and Why

3a. Website Members and Subscribers (eMember Accounts)

When you create an account or subscribe to Music Tech Hub resources, we collect:

• Name – to identify your account and personalise communications
• Email address – to manage your account and send you service-related communications
• School or organisation name – to administer your licence correctly
• Music service or hub association (where relevant) – to associate your account with a partner organisation if applicable
• Subscription and payment data – processed via our payment provider (see Section 5). We do not store full card details.
• Account activity data – including last login, to maintain security and manage active licences

Legal basis: Contract (Article 6(1)(b) UK GDPR) – processing is necessary to provide the service you have signed up for. Legitimate interests (Article 6(1)(f)) for security and account management purposes.

3b. Web Application Users (Supabase-Backed Apps)

Some paid resources include access to browser-based music applications hosted via Cloudflare Pages, with access permissions managed through our Supabase database.

For adult users (teachers and music education professionals) who are granted access to these applications, we store:

• Name
• Email address
• School or organisation
• Music service or hub association (where relevant)
• The application(s) they are associated with
• Basic usage data (for example, date of last access)

Legal basis: Contract (Article 6(1)(b)) and legitimate interests (Article 6(1)(f)).

3c. Children and Young People Using Web Applications

Our web applications are designed to be used by children and young people under teacher supervision, without requiring children to create accounts or provide any personal information.

How this works:

• A teacher generates a temporary session code (a random word and number combination) to start a class session.
• Children enter this session code to access the application. No name, email address, or account is required from the child.
• Session data (such as which application was accessed and when) may be logged in association with the teacher’s account, but no personally identifiable information about individual children is collected by us.

Project saving: If a child saves their work, the project file is downloaded directly to their device as a text file. This data is held entirely on the child’s device (or their school’s device) and is not transmitted to or stored on our servers.

Advisory note on project file names: Children may choose to include their name when saving a project file. We advise teachers to remind pupils to use a class name, initials, or a non-identifying label instead of their full name when saving work.

We do not knowingly collect personally identifiable data from children. If you believe a child has inadvertently submitted personal data to us, please contact us at bradley@musictechhub.org so we can investigate and delete it promptly.

3d. Website Visitors (Analytics)

We use Google Analytics to understand how visitors use our website. This collects anonymised data including:

• Pages visited and time spent on each page
• Approximate geographic location (country/region level)
• Device type and browser
• Traffic source (how you found our site)

Google Analytics uses cookies to collect this data. You can opt out via our cookie consent tool or by installing the Google Analytics Opt-out Browser Add-on.

Legal basis: Consent (Article 6(1)(a)) – collected via our cookie consent mechanism.

3e. Contact and Enquiries

If you contact us by email, we will retain your name and email address and the content of your message in order to respond to and follow up on your enquiry.

Legal basis: Legitimate interests (Article 6(1)(f)).

4. How Long We Keep Your Data

We will delete or anonymise data that is no longer needed.

5. Who We Share Your Data With

We do not sell your personal data. We share data only with the following trusted service providers who process it on our behalf:

All third-party processors are required to handle data in accordance with GDPR and our instructions.

6. International Data Transfers

Some of our service providers process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the relevant data protection authority.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Erase your data (where no legal obligation requires us to retain it)
• Restrict how we process your data in certain circumstances
• Object to processing based on legitimate interests
• Data portability – receive your data in a structured, machine-readable format
• Withdraw consent at any time where consent is the legal basis (for example, analytics cookies)

To exercise any of these rights, please email bradley@musictechhub.org. We will respond within one calendar month.

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner’s Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

8. Security

We take reasonable technical and organisational measures to protect personal data, including:

• HTTPS encryption across all web properties
• Access controls on our Supabase database
• Regular review of third-party processor security practices

No method of transmission over the internet is completely secure. If you have concerns about the security of your data, please contact us.

9. Cookies

We use cookies on this website. For full details, please see our Cookie Policy. You can manage your cookie preferences at any time using the cookie consent tool on our website.

10. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify active members by email and update the “Last updated” date at the top of this page.