Privacy Policy

This Privacy Policy explains how Music & Me (English Music Club) collects, uses and protects personal data when you visit musicandme.es, book a class or buy a pass. We follow the EU General Data Protection Regulation (GDPR) and Spain’s Organic Law 3/2018 (LOPDGDD).

Last updated: 19 September 2026.

1. Who is responsible for your data

The data controller is Music & Me – English Music Club, based in Madrid, Spain. For anything related to your personal data, contact us at info@musicandme.es or on (+34) 685 068 053 (also on WhatsApp).

2. What we collect, why, and on what legal basis

  • Free trial and class bookings. Your name, email address, your child’s age range, and the class, venue and date you choose. We use these to reserve your place, send your confirmation email and manage attendance. Legal basis: taking steps at your request before a contract, and performing the contract (Art. 6.1.b GDPR). Museum of Mini (Chamberí) manages its own bookings, so for that venue we send you a voucher and you complete your booking with them.
  • Purchases and your account. Your name, email address, billing details, phone number if you give one, order history and the class credits you hold and use. Card payments are handled by our payment providers; we never see or store your full card number. Legal basis: performing the contract, and our legal obligations for tax and accounting (Art. 6.1.b and 6.1.c).
  • Enquiries. Messages you send us by email, phone or WhatsApp, so we can reply. Legal basis: your request and our legitimate interest in answering it (Art. 6.1.b and 6.1.f).
  • Newsletter and updates. Your email address, only if you choose to subscribe. Legal basis: your consent (Art. 6.1.a). You can withdraw it at any time using the unsubscribe link or by emailing us.
  • Website and security data. Technical data such as your IP address, browser type and the pages you visit, plus cookies (see section 6). Legal basis: our legitimate interest in keeping the site secure and working (Art. 6.1.f), and your consent where the law requires it.

Children’s data. Our classes are for children aged 0–8, but we deal only with parents and guardians. We ask only for your child’s age range so we can place you in the right class. Bookings and purchases should be made by a parent or legal guardian.

3. Who we share your data with

We never sell your data. We share it only with the providers and partners needed to run our service:

  • Hosting. Hostinger hosts musicandme.es and related services.
  • Payments. Stripe and WooPayments process card payments securely on our behalf.
  • Email. Services that deliver our booking confirmations, order emails and, if you subscribe, our newsletter.
  • Partner venues. Little & Latte, Atelier House, Museum of Mini, Colorín Colorado and Osito & Mandarina. Where a venue needs it to run a class or manage its own bookings, we share only the minimum necessary.
  • Authorities. Where the law requires it, for example tax authorities.

Some providers may process data outside the European Economic Area. Where this happens, we rely on the safeguards required by the GDPR, such as the EU–US Data Privacy Framework or standard contractual clauses.

4. How long we keep your data

  • Booking and account data: while you are a client, and afterwards only for as long as needed to handle possible legal claims.
  • Order and invoice data: at least 6 years, as required by Spanish commercial and tax rules.
  • Newsletter: until you unsubscribe.
  • Enquiries: for as long as needed to answer and follow up, then deleted.

5. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, to data portability, and to withdraw consent at any time (without affecting processing done before). To exercise any of them, email info@musicandme.es. We may ask you to confirm your identity and will reply within one month. If you believe we have handled your data incorrectly, you can complain to the Spanish Data Protection Agency (AEPD) at www.aepd.es.

6. Cookies

Cookies are small files stored on your device. On this site:

  • Essential cookies keep your basket, checkout, login and site security working. They do not need consent. We also store your cookie choice in a cookie called “mm_cookie_consent” for 12 months.
  • Order attribution cookies. Our shop (WooCommerce) sets first-party cookies with names starting “sbjs_” that record how you reached us, for example through a search engine or a link, so we can understand which channels bring families to our classes. They do not identify you personally. We only set them if you click “Accept all” (or switch them on under “Settings”) in our cookie banner.
  • Third-party content. Fonts are loaded from Google Fonts, our checkout loads Stripe’s payment scripts, and our newsletter tool is provided by Hostinger. These providers may receive your IP address when their content loads.

You can change or withdraw your choice at any time using “Cookie settings” at the bottom of every page. You can also block or delete cookies in your browser settings, but the basket and checkout need essential cookies to work.

7. Security

We use HTTPS, restricted access and reputable providers to protect your data. No online service is completely risk-free, but we take reasonable steps to keep your information safe.

8. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.