Effective Date: 22-07-2025

At Lucena Music Academy, we are committed to protecting your personal data and ensuring your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights under applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. What Information We Collect

We collect the following personal information:

• Full name.
• Email address.
• Phone number.
• Geographic location.
• Payment and billing information (processed securely via third parties).

We may also collect non-personal data such as browser type, pages visited, and usage data via cookies and analytics tools.

2. How We Collect Information

Data may be collected when:

• You fill out registration or contact forms.
• You make a payment or subscribe to a course.
• You communicate with us through email or messaging platforms.
• You interact with our website (cookies, comments, etc.)

3. Purpose of Data Use

Your data is processed for the following legitimate purposes:

• To provide access to our courses and content.
• To manage your subscription and process payments.
• To issue certificates of completion.
• To communicate important updates and announcements.
• For promotional or marketing purposes (with your consent).
• For compliance with legal or contractual obligations.

4. Legal Basis for Processing

We rely on the following legal grounds to process your data:

• Performance of a contract: For course registration, access, and payment.
• Legitimate interest: For internal analytics and communication.
• Consent: For marketing communications and optional data collection.
• Legal obligation: Where we must retain certain data for tax or financial reporting.

5. Third-Party Services

We share data only with secure, GDPR-compliant third parties necessary for our services:

• Stripe, PayPal, WooCommerce, etc. (payment processing)
• Email marketing platforms (to send course updates and newsletters)

These providers are under strict data processing agreements and may only use your data as instructed by us.

6. Cookies and Analytics

We use cookies to enhance your experience and to track website activity. In the near future, we plan to implement Google Analytics to gather anonymized data on user behavior. You will be notified and asked for consent when this feature is activated.

7. Data Retention

We retain your personal data only for as long as necessary:

• While your subscription is active
• For legal, financial, or tax obligations
• For internal record-keeping purposes (up to 7 years if required)

Once your data is no longer needed, it will be securely deleted or anonymized.

8. Your Rights Under GDPR

Although we require some personal data for subscription-based access, you have the following rights:

• Right to access your data
• Right to correct inaccurate data
• Right to object to certain types of processing
• Right to restrict processing under specific conditions
• Right to lodge a complaint with a supervisory authority (e.g. CNPD – Comissão Nacional de Proteção de Dados in Portugal)

Please note: Due to the nature of our services, data cannot be erased during an active subscription period.

9. Security of Your Information

We take all reasonable steps to protect your data through technical and organisational measures, including:

• SSL encryption on our site
• Secure servers hosted in the EU (via Hostinger)
• Access control and limited user permissions
• Regular backups and system monitoring

10. Policy Updates

This Privacy Policy may be updated occasionally to reflect changes in technology, regulation, or our services. When we do, we will notify users via email or website notice.

11. Contact Us

If you have any questions, requests, or concerns regarding your data, please contact us at:

📧 info@lucenamusicacademy.com