Privacy policy

Who is responsible for your information?

Drum Break is a trading brand of Robert Moutrey, trading as Moutrey Creative Enterprises. Robert Moutrey is the data controller for the personal information described in this notice. You can contact Drum Break at info@drumbreak.co.uk or 020 3576 4547. Privacy enquiries may also be sent to admin@moutreycreative.com.

Information collected

When you submit an enquiry, the website may collect your name, email address, phone number, preferred programme, preferred day and time, waiting-list choice and any message you provide. If you become a pupil, we may retain your linked account identifier, contact details, programme, lesson dates and attendance, teaching notes shared with you, staff-only administrative notes, session credits, payment status and receipt references. The pupil portal also processes private messages and staff-reviewed requests such as holiday dates or corrections. Public reviews and community participation involve the nickname and content you choose to submit, subject to moderation and the permissions described below. We do not store payment card numbers in the pupil portal.

How the information is used

We use information to reply to enquiries; manage availability, waiting-list preferences, teaching, attendance and credits; verify and account for payments; answer private pupil requests; moderate reviews and pupil discussions; protect accounts against misuse; and comply with legal and accounting duties. We do not sell personal information. We do not use waiting-list consent as permission for unrelated marketing.

Availability requests and waiting lists

If you submit an availability request, Drum Break uses your chosen day, time and programme to check suitability and reply. If your preferred slot is unavailable and you agree to be added to the waiting list, we may contact you when a suitable time becomes available. You can ask us to remove your waiting-list entry at any time by emailing info@drumbreak.co.uk. Joining the list does not guarantee a booking or reserve a place.

Lawful bases

Enquiries are generally handled to take steps requested before a contract, or under our legitimate interests in replying to genuine enquiries and preventing misuse. Lesson, account and payment administration may be necessary to perform a contract; financial records may be retained to meet legal obligations. Where required, we ask separately for consent, such as permission to publish a testimonial or to contact you about another suitable slot. Consent may be withdrawn without affecting processing that has another valid lawful basis.

Service providers and sharing

Netlify hosts this website, processes website forms and supports private preview services. Google Firebase Authentication handles sign-in and Firestore stores authorised pupil and staff records. Stripe handles checkout and payment events; Drum Break uses payment and receipt references for reconciliation rather than taking card details in the pupil portal. Email, cloud storage and accounting providers may process data where needed for the service. Google Calendar integration is under development and is not a promise that lesson dates are currently synchronised. Information may be disclosed where law requires or to professional advisers under appropriate safeguards.

International processing

Some services store or process information outside the UK, including in European or other overseas data centres. The precise region depends on the provider and service. We review provider locations and applicable UK international-transfer safeguards; we do not promise UK-only hosting. Contact us if you would like more information about a particular provider or transfer.

Retention

Inactive enquiries are ordinarily assessed for deletion after around 12 months without relevant activity. Waiting-list entries are normally reviewed for deletion after 12 months without further contact or activity. These are review points; no automatic deletion occurs at the review date. A former pupil record may be considered for archival after 12 months and for deletion review after 24 months of inactivity, subject to checks for future lessons, unused credits, open disputes, safeguarding or legal holds and financial-record retention. Client and payment records may need to be retained longer where legally required. No automatic expiry or removal of a pupil account is promised; you can request a retention review at any time.

Your rights

Depending on the circumstances, you may have rights to be informed, access your information, correct inaccurate information, request deletion or restriction, object to certain processing and receive portable data. Where processing relies on consent, you may withdraw it.

Reviews and testimonials

Reviews may be submitted or edited through a verified pupil account in the development service. You choose a public display name and expressly agree before your star rating and text can appear on the Reviews page. For transparency, new and edited reviews are hidden pending staff approval; your email address and pupil account identifiers are not displayed publicly. Where verified parent or guardian access is available, adults may submit reviews only for children explicitly linked to their account; children do not independently publish reviews. A payment receipt or a shared email address does not prove guardian access. Staff may hide reviews under fair moderation rules, recording a reason; reviewers may appeal a decision. Published reviews and staff replies are not presented as independently certified by a third-party review platform. You may withdraw publication permission at any time from your own portal or request removal by contacting info@drumbreak.co.uk.

Staff can send an optional, one-time review invitation to an existing pupil contact using our email provider. The invitation contains a secure link to stop future review invitations for that address. This opt-out does not affect lesson correspondence or waiting-list requests. Email-provider acceptance is not proof that a message reached your inbox. We keep a minimal invitation attempt and suppression record to prevent duplicates and respect your preference.

Children, guardians and private community

Drum Break teaches younger pupils as well as adults. We apply additional care to children’s account records, private messages and community discussions. The pupil community and reviews are moderated, and participation should use a nickname rather than sharing contact details publicly. Guardian account access is limited to verified linked children when the parent portal is enabled. Parents and guardians can contact us about access, permissions, safeguarding and appropriate handling of a child’s information. Children have their own privacy rights; disclosure to a parent is assessed in light of the child’s circumstances and applicable law.

Access, correction and export

A verified pupil can download an available copy of their pupil profile, recorded lessons, credits, pupil-safe receipts and shared notes through the portal. This does not necessarily include all internal records or a full legal subject access response. To request other records, consent history, correction, restriction or erasure, contact us so identity and applicable rights can be checked. Private staff notes and payment-system records are not automatically exposed to another pupil or an unverified guardian.

Cookies and analytics

Optional analytics stays off unless you accept it. Details of the technologies used, their purpose and duration are set out in the Cookie Policy. You can change your analytics choice at any time using the “Cookie settings” control in the footer.

Complaints

Please contact Drum Break first so any concern can be addressed. You may also complain to the UK Information Commissioner’s Office.

Changes to this notice

This notice will be reviewed when the website, suppliers or use of personal information changes.