Privacy Policy

Last updated: 1 September 2026 · Version 1.0

This policy explains how OHB Music Limited ("OHB Music", "we", "us") collects, uses and protects personal data when you use our website, join an ensemble, book lessons, buy tickets, or contact us. We aim to comply with UK GDPR and the Data Protection Act 2018.

What we collect

• Contact details (name, email, phone, postal address) when you enquire, join, or book.
• Membership and payment records (via Stripe — we never store full card details ourselves).
• Details you provide for children in your care, where relevant to a junior lesson or ensemble booking.
• Website usage data via Cloudflare Web Analytics, only with your consent (see our Cookie Policy).

How we use it

• To process membership, lesson bookings and ticket sales, and to communicate about rehearsals, concerts and account matters.
• To meet our safeguarding obligations, including DBS checks for adults working with under-18s.
• To send you information you've asked for, such as newsletters — you can unsubscribe at any time.
• To meet legal and accounting obligations.

Where it's stored

Member, event and payment-reference data is held in Cloudflare D1 with access controls limited to those who need it to run the organisation. Payment card details are handled entirely by Stripe and never touch our own systems. Files such as concert photos, sheet music and policy documents are stored in Cloudflare R2.

Who we share it with

We share data with service providers who help us run OHB Music — Stripe (payments), Resend (transactional email), and Cloudflare (hosting and infrastructure) — under their own data-processing terms. We do not sell personal data, and we only share safeguarding information with relevant authorities where required by law or our safeguarding duties.

How long we keep it

We keep personal data only as long as necessary for the purpose it was collected — typically for the duration of membership plus a reasonable period for accounting and safeguarding records, after which it is deleted or anonymised.

Your rights

You can ask to see, correct, or delete the personal data we hold about you, or object to certain uses of it. Contact hello@ohbmusic.org.uk to exercise these rights. You can also complain to the UK Information Commissioner's Office (ICO) if you're unhappy with how we've handled your data.

Children's data

Where we hold data about a child (for example, a junior lesson pupil), it is provided and managed by a parent or guardian, used only for the purposes of delivering lessons/ensembles safely, and subject to the same rights and protections above.