Last updated: 16 September 2026
Who is responsible for your information?
I am Gergely Kendik, trading as Leeds Piano Lessons. I am the controller of the personal information I use to run my teaching business. For privacy questions or to exercise your rights, email gkendik@leedspianolessons.co.uk.
What information I collect
I collect names, email addresses and enquiry messages; pupil and parent or guardian contact details; addresses where needed for lessons; lesson schedules; musical-progress notes linked to pupils’ names; and payment status and transaction records needed to administer lesson fees. This information comes from you, a pupil’s parent or guardian, observations during lessons and payment updates from GoCardless. Technical information about website visits is described below. Please avoid including sensitive personal information in the contact form.
Why I use your information
I use information to answer enquiries, arrange and deliver piano lessons, support musical progress, manage payments and keep business records. The legal bases are:
Contract: taking steps you request before an agreement and fulfilling lesson agreements with adult pupils or parents or guardians. Information necessary to arrange and deliver lessons is needed to provide the service.
Legitimate interests: answering general enquiries, organising teaching and keeping limited pupil information and musical-progress notes to support learning. My interests are running the teaching business and providing appropriate tuition, while taking account of pupils’ privacy, particularly children’s rights and interests. Website security and reliable delivery of website content also serve these interests.
Legal obligation: keeping accounting and tax records required by law.
Children’s information
My teaching notes concern musical progress. Children have their own information rights. Parents or guardians can contact me about their child’s information; I consider the child’s understanding and the adult’s authority when responding. In simple terms: I keep your name, lesson arrangements and notes about your piano playing to help teach you. You can ask me what I have written and ask for mistakes to be corrected.
Where information is kept and who receives it
I use IONOS for website hosting and business email; personal Google Gmail and Google Calendar for correspondence, pupil names, schedules and addresses; and Samsung Notes on my phone, synchronised through my Samsung account, for pupil names and musical-progress notes. These services receive the information needed for their functions.
GoCardless handles payment collection and acts as an independent controller for its payment services. Its payer privacy notice explains its handling of payment information. Jetpack, provided by Automattic, supplies website security and content-delivery features; see Automattic’s privacy notice. I may also disclose relevant information where required by law or necessary to establish, exercise or defend legal claims.
Processing outside the UK
The cloud services I use can process information outside the UK. Google operates internationally, including in the United States. Its data-transfer information describes reliance on adequacy decisions and standard contractual clauses where required. My Google services are personal consumer accounts.
Samsung’s account services involve international processing, including in South Korea and the United States. Its Samsung account privacy notice lists other processing countries and describes standard contractual clauses for transfers outside the UK and EEA. Automattic also processes information internationally and describes European Commission or UK-approved contractual safeguards in its privacy notice. GoCardless explains its international processing in its detailed privacy notice.
These safeguards are intended to protect information when it is processed abroad. The linked notices explain how to request further details or copies of contractual safeguards from the providers. You can also contact me for information about the services I use and the handling of your records.
How long I keep information
Enquiries that do not lead to lessons: up to six months after the last contact. Routine pupil details, lesson calendar entries, correspondence and musical-progress notes: while lessons continue, then up to 12 months after they end for final administration and a possible return.
Records required for sole-trader tax purposes: at least five years after the relevant tax year’s 31 January filing deadline, or longer where HMRC requires it. Relevant records may be kept longer where necessary for an outstanding dispute or another legal obligation. This does not mean retaining every pupil record.
When information is no longer needed, I delete it or remove identifying details from the records I control, including synchronised records. Service providers may retain recoverable or backup copies for their own limited retention cycles. GoCardless applies its own retention rules to information it holds as an independent controller.
Website technical information and cookies
IONOS receives technical request information when you visit, such as the requested page, date and time, browser and device information and IP address. Its web-hosting information describes anonymisation of IP addresses and an eight-week retention period for hosting logs used for security and stability.
Jetpack delivers some website files from Automattic’s servers and protects the site against abusive login attempts. Security checks can process IP addresses, browser information and attempted login details. If Jetpack presents a login maths challenge, its jpp_math_pass cookie remembers a successful answer for one day. WordPress also uses cookies for administrator sign-in and preferences.
The website’s visitor-statistics plugins are disabled. The contact form sends your message by email so I can respond. Social-sharing links let you choose to open Facebook or X; use of those services is covered by their privacy notices. You can manage or delete cookies through your browser settings, although blocking essential cookies can affect functions such as signing in.
Your rights
Depending on the circumstances, you can ask to access your information, correct it, delete it, restrict its use or receive certain information in a portable format. You have the right to object to processing based on legitimate interests. If I rely on consent for a particular use, you can withdraw it at any time without affecting earlier lawful processing. These rights are subject to legal conditions and exceptions. Contact gkendik@leedspianolessons.co.uk to make a request.
You can raise concerns with me and you have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint.
Changes to this notice
I will update this notice when my information-handling practices change and bring significant changes to your attention where appropriate.