Skip to content
Amped Up Rock School
Legal

Privacy Policy.

How we collect, use and protect your personal information when you interact with Amped Up Rock School.

Amped Up Rock School is the data controller for the personal information described in this policy. Owner: Gary Treanor. We process personal data in accordance with the UK GDPR and the Data Protection Act 2018.

Questions? info@ampeduprockschool.co.uk or WhatsApp +44 7405 203909

1.Information We Collect

We may collect the following categories of information.

Parent / Guardian

  • Name
  • Email address
  • Phone number
  • Address (if required)
  • Payment and booking details

Student

  • Name
  • Age or date of birth
  • Instrument interest
  • Lesson attendance and progress
  • Relevant medical or support needs (where disclosed)

Website and Form Data

  • Enquiry submissions
  • Booking requests
  • Testimonials
  • Student nominations

Media

  • Photos
  • Videos
  • Written testimonials
  • Consent preferences

2.How We Use Your Data

  • To provide lessons and services
  • To manage bookings and payments
  • To communicate with parents and guardians
  • To ensure student safety
  • To improve our services
  • To manage testimonials and marketing (with consent)
  • To meet legal obligations

3.Lawful Basis

We rely on the following lawful bases to process your data:

Contract:
to deliver lessons and services
Legitimate Interest:
to operate the business
Consent:
for marketing, photos and videos
Legal Obligation:
for accounting and safeguarding

4.Children's Data

We only collect information about children that is necessary to deliver the programme. Parents or guardians are responsible for providing consent and managing communication on their child's behalf.

5.Photos, Videos & Testimonials

We will not publish photos, videos, student names or testimonials without clear consent. Consent can be withdrawn at any time by contacting us directly.

6.Data Sharing

We may share data with:

  • Payment providers
  • Booking systems
  • Form tools (e.g. Typeform)
  • CRM tools (e.g. Airtable)
  • Automation platforms
  • Professional advisers

We do not sell personal data.

7.Data Retention

We retain data only as long as necessary:

Customer records:
up to 6 years
Enquiries:
up to 24 months
Safeguarding records:
as required by law
Marketing:
until unsubscribed

8.Security

We take reasonable steps to protect your data, including secure systems, access controls and organised records.

9.Your Rights

Under UK GDPR you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Withdraw consent at any time
  • Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, contact us at the details below.

10.Contact

For privacy-related questions or to exercise your rights:

Last updated: April 2026. · Back to home