Privacy policy

At Music Monkeys, we handle your personal data and your child’s personal data with care. This privacy policy explains what information we use, why we need it and what rights you have.This privacy policy applies to our website, online shop, lessons, workshops and other services.

1. Who is responsible for your personal data?

Music Monkeys is responsible for processing personal data as described in this privacy policy.
Contact details:
Music Monkeys
Josette Kant
Witte de Withstraat 28
2518 CV The Hague
The Netherlands
Telephone: +31 6 40919983
Email: josette@musicmonkeys.nl

If you have any questions about privacy or would like to make a request concerning your personal data, please contact us using this email address.

2. What personal data do we process?

The information we process depends on the services you use. This may include:
• Your first and last name.
• Your child’s name and date of birth.
• Your address, email address and telephone number.
• Account details.
• Registrations, subscriptions, booked lessons and attendance records.
• Orders placed through our online shop.
• Payment details, including your bank account number and payment history.
• Messages you send us.
• Technical information about your website visit, such as your IP address, browser and device type.
• We only ask for information that is necessary for the relevant purpose. For children’s registration and participation, we receive information from their parent or caregiver. We use this information, for example, to select a suitable lesson group and organise their participation.

3. What do we use your personal data for?

We use personal data to:
• Process registrations and subscriptions.
• Schedule lessons and workshops and assign participants to groups.
• Manage attendance, absences and make-up lessons.
• Contact you about your participation, order or enquiry.
• Inform you about practical matters and changes to our services.
• Process online shop orders and arrange delivery or collection.
• Handle payments and our administration.
• Send newsletters.
• Keep our website secure and functioning properly.
• Comply with legal obligations, such as tax record retention requirements.

4. What are our legal grounds for processing your data?

We process personal data on the following grounds:
Performance of a contract
For example, when you book lessons, take out a subscription or place an order.
A legal obligation
For example, to retain our financial records.
A legitimate interest
For example, to secure our website and handle enquiries appropriately. We weigh our interests against your privacy interests.
Your consent
Where consent is required, we ask for it in advance. You can withdraw your consent at any time. This does not affect the lawfulness of any processing carried out before you withdrew it.

5. Lessons and subscriptions through Trainin

We use Trainin, integrated into the Music Monkeys app, to book and manage lessons, workshops and subscriptions.Through this platform, we process information needed for your account, registration, lesson scheduling, attendance and payments.If you would like us to delete your personal data, please contact us. We assess which information we can delete and which information we must retain.We cannot always immediately delete a Trainin account in full if it is linked to financial records, as doing so could result in the loss of information we are required to retain. In that case, we only retain information for which there is still a valid reason.We explain what information we retain, why we retain it and for how long.

6. Online shop through WooCommerce

Our online shop uses WordPress and WooCommerce. We use WooCommerce to sell products.
When you place an order, we process information including your name, contact details, billing address, delivery address where applicable, ordered products and payment status. This information is stored in our website’s database with our hosting provider, Junda.
To deliver orders, we share the necessary delivery details with the delivery company, PostNL.

7. Payments

We use the external payment services Mollie and PayPal to process payments. They receive the information needed to complete a payment, such as the amount, a payment reference and information associated with your chosen payment method.
Payment service providers may also process personal data independently to comply with their own legal obligations. Further information can be found in their privacy policies.

8. Emails and newsletters

We may email you about your registration, lessons, subscription or order. These practical messages are part of our services.
For newsletters and promotional messages, we use your email address when you have given consent or when this is legally permitted within an existing customer relationship.
We use Trainin to send updates relating to your lessons and Substack for general news.
You can unsubscribe at any time through your Trainin account or by using the unsubscribe link in a Substack newsletter. You will then no longer receive promotional messages. We may still send necessary messages about an ongoing registration or order.

9. Who do we share personal data with?

We do not sell your personal data.
We only share information when this is necessary to provide our services or when we are legally required to do so. This may include sharing information with:
• Trainin.
• Our hosting provider and technical support providers.
• Payment service providers.Our accountant.
• Our newsletter service provider.
• Teachers who need information to deliver their lessons.
• Public authorities, when required by law.
These parties only receive the information necessary for their task. Where parties process personal data on our behalf, we make the arrangements required by the General Data Protection Regulation (GDPR).

10. How long do we retain your personal data?

We do not retain personal data for longer than necessary for the purpose for which it was collected, unless a legal retention requirement applies.
Registration and lesson information
We retain this information for as long as it is needed to manage your participation and the associated administration.
Financial records
We generally retain invoices, payment information and other records subject to tax record retention requirements for seven years. If a different statutory retention period applies to certain information, we follow that period.
Enquiries and correspondence
We retain messages for as long as they are needed to handle your enquiry or request and address any follow-up questions or disputes.
Newsletter information
We retain your information for as long as you are subscribed. This information is deleted after you unsubscribe.

11. Cookies and services on our website

Our website uses functional cookies, for example, to enable the shopping basket and login functions.
For cookies and similar technologies that require consent, we ask for your consent in advance.You can delete cookies through your browser. Some parts of the website may then work less effectively.

12. How do we protect your personal data?

We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.
We limit access to people who need the information for their work and use secure connections to transmit data.
If you believe your information is not properly secured or suspect misuse, please contact us.

13. Your rights

Depending on the processing involved and the applicable legal conditions, you have the right to:
• Access your personal data and receive a copy.
• Have inaccurate or incomplete information corrected.
• Have personal data deleted.
• Restrict the processing of your data.
• Object to certain types of processing.
• Receive your data in a usable digital format or have it transferred, where the right to data portability applies.
• Withdraw consent you have previously given.
You can send a request to josette@musicmonkeys.nl. You may make a request concerning your child’s information if you are authorised to act on your child’s behalf. We normally respond within one month. If a request is complex or we receive several requests, we may extend this period by up to two additional months under the applicable legal conditions. We will inform you of this within the first month. We may ask for additional information to confirm that the request comes from the correct person. Sometimes we cannot delete information, for example because we are legally required to retain it. In that case, we explain which information is involved and why. If we cannot resolve your concern together, you can submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

14. Changes

We may update this privacy policy when our services or the law change. You can find the latest version on our website, with the date of the most recent update shown at the top. Where necessary, we will also inform you directly about significant changes.