top of page
Logo Copyright_edited.png

The String Teaching Library - Privacy Policy

UK GDPR privacy notice for digital educational music products

 

Last updated: 9 August 2026
 

1. Purpose of this Privacy Policy

This Privacy Policy explains how The String Teaching Library collects, uses, stores and shares personal data when you visit thestringteachinglibrary.com, contact us, subscribe to updates, or purchase digital educational music products.

It is intended to meet the transparency requirements of the UK GDPR and the Data Protection Act 2018.


2. Who we are

The data controller is the person or organisation responsible for deciding how personal data is used.

  • Legal business name / owner: Pablo Cerezo Barrera

     

  • Trading name: The String Teaching Library

     

  • Email: info@thestringteachinglibrary.com

     

  • Website: thestringteachinglibrary.com

     

  • Address: 2b Wooden, Sutton, LONDON SM1 3LH

     

  • Data protection contact: info@thestringteachinglibrary.com

     

  • ICO registration number: Not Applicable
     

     

3. Personal data we collect

Depending on how you use the website, we may collect:

  • Identity data: name, business/studio name, account username if applicable.

  • Contact data: email address, billing address, correspondence address and contact form details.

  • Transaction data: order details, purchase history, invoices, refunds and delivery/download records.

  • Technical data: IP address, device identifiers, browser type, operating system, time zone, logs, cookie identifiers and website usage information.

  • Marketing data: newsletter subscription status, consent records, preferences and unsubscribe records.

  • Support data: messages, enquiries, technical support requests and any files or screenshots you provide.

  • Payment data: payment status, transaction reference and limited payment details supplied by payment providers. We do not intentionally store full card numbers.
     

4. How we collect personal data

We collect personal data directly from you when you place an order, create an account, complete a form, subscribe to emails or contact us. We may also receive limited data from service providers such as website hosting platforms, payment processors, email marketing providers, analytics providers or fraud-prevention tools.
 

5. Purposes and lawful bases

We must have a lawful basis under Article 6 UK GDPR for each use of personal data. The main purposes and bases are:

  • Process orders and deliver digital products: Uses identity, contact, transaction, and technical delivery data. Lawful basis: Contract: necessary to provide the purchased products.

  • Take payment and prevent fraud: Uses identity, transaction, payment-status, and technical data. Lawful basis: Contract; legal obligation; legitimate interests in fraud prevention.

  • Customer support and technical assistance: Uses contact data, support messages, and transaction data. Lawful basis: Contract; legitimate interests in responding to enquiries.

  • Accounts, downloads and website security: Uses identity, account, technical, and log data. Lawful basis: Contract; legitimate interests in keeping the website secure.

  • Accounting, tax and legal record keeping: Uses identity, contact, transaction, and invoice data. Lawful basis: Legal obligation; legitimate interests in business record keeping.

  • Improve website and products: Uses usage, analytics, and technical data. Lawful basis: Consent where required for cookies; legitimate interests for non-cookie, aggregated or strictly necessary analysis.

  • Email newsletter and promotional updates: Uses email address, consent records, and preferences. Lawful basis: Consent, unless another PECR-compliant basis clearly applies.

  • Respond to legal claims or enforce rights: Uses relevant account, transaction, communication, and technical data. Lawful basis: Legitimate interests; legal obligation.
     

6. Marketing emails

We will only send newsletter or promotional emails where we have a valid legal basis to do so. For most website sign-ups, this means you have actively opted in, for example by ticking an unticked box or entering your email into a subscription form.

We will not automatically add customers to a marketing list merely because they made a purchase. You can unsubscribe at any time using the unsubscribe link in our emails or by contacting info@thestringteachinglibrary.com.
 

7. Cookies and analytics

We use cookies and similar technologies as explained in our Cookies Policy. Non-essential cookies, such as many analytics or marketing cookies, should not be set unless you have given valid consent through the cookie banner or consent tool, unless a specific legal exemption applies.


8. Who we share personal data with

We may share personal data with trusted service providers where needed to run the website and fulfil purchases:

  • Website / e-commerce platform: Wix

     

  • Payment processors: Stripe, PayPal, Wix Payments

     

  • Email and newsletter provider: Mailchimp / Brevo

     

  • File delivery, hosting or cloud storage provider: Wix Cloud / Secure Cloud Storage

     

  • Analytics provider: Google Analytics / Plausible

     

  • Professional advisers, accountants, insurers and legal advisers

     

  • Regulators, courts, law enforcement or public authorities where legally required

     

We do not sell personal data.
 

9. International transfers

Some service providers may process personal data outside the United Kingdom. Where this happens, we will take steps intended to ensure appropriate safeguards are in place, such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or other lawful transfer mechanisms.
 

10. How long we keep personal data

We keep personal data only for as long as necessary for the purposes described above, including legal, accounting and reporting requirements. Suggested retention periods are:

  • Order, invoice and tax records: Usually 6 years after the end of the relevant tax/accounting year.

  • Customer account data: While the account remains active, then a reasonable closure period unless records must be retained.

  • Download/access records: As long as needed to provide access, support and evidence of fulfilment.

  • Support correspondence / Marketing consent records: Up to 6 years where needed for legal/business records; shorter where not needed / While subscribed and then as long as needed to evidence consent or suppression/unsubscribe status.

  • Analytics data: Set according to the analytics tool retention settings and disclosed in the Cookies Policy.

  • Cookie consent records: For the period needed to remember and evidence preferences, then refreshed as required.
     

11. Your data protection rights

Depending on the circumstances, you may have the right to:

  • Request access to your personal data.

  • Request correction of inaccurate or incomplete personal data.

  • Request deletion of personal data.

  • Request restriction of processing.

  • Object to processing based on legitimate interests, including direct marketing.

  • Request data portability.

  • Withdraw consent where processing is based on consent.

  • Complain to the UK Information Commissioner's Office.

To exercise your rights, contact info@thestringteachinglibrary.com. We may need to verify your identity before responding.


12. Complaints

You can contact us first at info@thestringteachinglibrary.com so we can try to resolve your concern. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator.
 

13. Children and students

Our products may be used by music teachers and students, but the website is not intended to collect personal data directly from children without appropriate adult involvement. Teachers and institutions using our products with students are responsible for complying with their own data protection obligations in relation to their students.
 

14. Security

We use reasonable technical and organisational measures designed to protect personal data, such as access controls, secure payment processing, reputable service providers, password protection where applicable and secure website connections. No online system is completely secure.
 

15. Automated decision-making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you, unless the website states otherwise.
 

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be posted on the website with an updated date.
 

17. Contact

Questions about this Privacy Policy should be sent to info@thestringteachinglibrary.com.

bottom of page