Privacy Policy.

This policy is provided in good faith and should be reviewed by a qualified adviser to confirm it meets your obligations before publication.

Legato Academy is the data controller for personal data collected through this website. We are a piano tuition studio based in Cardiff, Wales, and you can contact us at hello@legato.academy. This policy covers all personal data collected via our website and booking processes.

We collect the following through our enquiry and booking forms:

• Name (first and last)
• Email address
• Phone number
• Lesson interest and preferred delivery mode
• Student age (optional)
• Preferred lesson days (optional)
• Message (optional)

No card or financial data is collected on this website. Payment is handled separately and directly — never through this site.

We process your data to respond to your enquiry and to take the steps you've asked for before arranging lessons. Our lawful bases under UK GDPR are our legitimate interest in answering enquiries and taking pre-contractual steps at your request.

We use your details solely to respond to enquiries, arrange and confirm trial bookings, and communicate with you about lessons. We never sell your data, and we don't share it with third parties for marketing.

We keep enquiry data only for as long as needed to respond and, if you become a student, to administer your lessons. Enquiries that don't proceed are deleted within a reasonable period.

Where a student is under 18, a parent or guardian submits the form and provides consent on the student's behalf. We treat children's data with particular care.

Under UK GDPR you have the right to access, correct, erase, restrict or object to the processing of your data, and to data portability. To exercise any of these, email us at hello@legato.academy and we'll respond within the statutory timeframe.

We use only the essential cookies needed for the site to function. If we introduce analytics in future, we'll update this policy and seek consent where required.

Data is transmitted over encrypted HTTPS connections, and access is restricted to those who need it to respond to your enquiry.

We may update this policy from time to time. The current version, with its "last updated" date, is always published here.

For any data protection query, email us at hello@legato.academy.