01
Who we are
Piano With Kieran provides music, events and teaching services through this website and its secure student platform. For personal data connected with a teacher or studio, the teacher or studio identified on the relevant website is the data controller.
Location: Dublin, Ireland
Privacy contact: it@kevinegancars.ie
02
Personal data we collect
Depending on how you use our services, we may collect:
- Contact and enrolment details, such as your name, email address, telephone number, location and parent or guardian details.
- Student information, including lesson type, level, tutor, attendance-related information, learning progress and private teaching notes.
- Account and security information, including login details, authentication records, IP address, device information and activity needed to protect the service.
- Payment and accounting information, such as the selected plan, payment status, invoice details and transaction references. Card and bank credentials are handled by the payment provider and are not stored by us.
- Communications, including enquiries, email preferences, newsletter subscriptions, comments and messages sent through our services.
- Website information, including essential session data and technical information generated when you use the website.
Where a student is a child, a parent or guardian should provide and manage the information needed for enrolment. We ask users not to provide information that is not needed for teaching or administration.
03
How and why we use personal data
| Purpose | Legal basis |
|---|---|
| Responding to enquiries, arranging lessons, creating accounts and delivering teaching services. | Steps requested before a contract and performance of a contract. |
| Processing payments, maintaining invoices and meeting tax or accounting requirements. | Performance of a contract and legal obligations. |
| Sending the Weekly Letter, Theme Nights updates or other optional marketing. | Your consent. You can unsubscribe at any time. |
| Keeping the website and student platform secure, preventing misuse and providing support. | Our legitimate interests in operating a safe and reliable service. |
| Connecting an authorised Instagram professional account and displaying its public posts. | Your consent and the account holder's instructions. |
We do not sell personal data. We do not use personal data to make solely automated decisions that produce legal or similarly significant effects.
04
Newsletters and communications
When you subscribe, we use your email address to send the list you selected. Every marketing email includes an unsubscribe link. We may retain a minimal suppression record after you unsubscribe so that we can honour your preference.
Administrative messages about an enrolment, payment, account or lesson service are not marketing and may still be sent when they are necessary to provide the service.
05
Payments and accounting
Secure online payments are processed by Stripe. If the relevant teacher has enabled Xero, contact and invoice information may be sent to Xero for accounting. These providers process information under their own privacy terms and security controls.
We keep payment references and invoice records needed to administer services, resolve disputes and comply with financial record-keeping obligations.
06
Instagram and embedded media
An authorised administrator can connect a professional Instagram account to a specific website page. We then receive the account identifier, username, profile image, public media details and an access token. The token is encrypted and used only to refresh the selected public feed.
We do not request access to private messages, publish posts or manage comments through this integration. The administrator can disconnect either Instagram account independently in the CMS. Disconnecting removes the stored connection and locally cached Instagram images for that page.
Pages may also include media from services such as YouTube. Opening or playing embedded media may allow that provider to receive technical data in accordance with its own privacy policy.
07
Who receives personal data
We share personal data only where needed with authorised teachers and staff, hosting and technical service providers, payment and accounting providers, email delivery providers, authentication providers, professional advisers, or public authorities where the law requires it.
Some providers may process data outside the European Economic Area. Where this happens, we rely on an applicable adequacy decision or appropriate contractual and organisational safeguards.
08
How long we keep data
We keep personal data only for as long as it is needed for the purpose for which it was collected, to provide the service, and to meet legal, accounting and dispute-resolution requirements. Retention depends on the type of record and the relationship with you.
Newsletter details are kept until you unsubscribe, subject to a minimal suppression record. Instagram connection data is kept until the account is disconnected or access is revoked. Security records and cached technical data are retained for shorter operational periods.
09
Security
We use access controls, encrypted connections, protected credentials, tenant separation and other technical and organisational measures designed to protect personal data. No online service can guarantee absolute security, so we also review access and respond to suspected incidents.
10
Your data protection rights
Subject to applicable law, you may ask to access, correct, erase, restrict or receive a copy of your personal data. You may object to certain processing and withdraw consent at any time without affecting earlier lawful processing.
To make a request, use the contact details below or follow our data deletion instructions. We may need to verify your identity before completing a request.
You can also complain to Ireland's Data Protection Commission.
11
Contact and policy updates
Questions or privacy requests can be sent to it@kevinegancars.ie.
We may update this policy when our services or legal obligations change. The latest version and its update date will always appear on this page.