Last updated: 20 October 2026
MusicStudio ("we", "us", "our") is committed to protecting the personal data of students, teachers and others who use our platform.
This policy explains what data we collect, why we collect it, who we share it with, how long we keep it, and your rights under the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.
Account data: Your name, email address, password (hashed), phone number if you provide one, and other profile information you provide when registering.
Lesson data: Booking times, lesson notes, homework, practice logs, practice clips, lesson materials and communications between students and teachers. If you book a lesson for someone else, we may also collect the learner's name and age.
Teacher application and profile data: Qualifications, certificates, teaching experience, introduction videos, declarations about teaching children, and records of acceptance of the Teacher Agreement, including the date and relevant technical information.
Teacher tax and identity data: Legal name, date and place of birth where required, address, tax identification numbers, VAT details, and identity or business documents where required for verification or tax reporting. Sensitive documents are stored securely with encryption.
Teacher public profiles: A teacher's public profile, including their display name, photo, introduction video, description, instruments, prices, availability, ratings and reviews, is visible on MusicStudio. As explained in the Teacher Agreement (clause 13.4), profiles may also appear on other music-tuition websites or apps operated by Luteic Limited. MusicStudio is currently the only such platform. Luteic Limited remains the data controller.
Reviews: Reviews you submit may be displayed publicly on the relevant teacher's profile.
Payment data: Payments are processed by Stripe. Your full card details are provided directly to Stripe and are not stored on our servers. We retain transaction records, basic card information such as the card brand and last four digits, payment references and relevant payment status information.
Teacher payouts: Teacher payments are processed through Stripe Connect. Stripe collects and verifies teachers' bank details and identity information. MusicStudio receives account references and verification and payout information but does not store teachers' full bank account details.
Call recordings: Video calls held through MusicStudio, including lessons and teacher onboarding calls, are recorded. Participants are informed before joining. Recordings are stored securely in Ireland and deleted after 30 days.
Lesson recordings are made available to the relevant student account and authorised MusicStudio staff. Recordings of other calls are accessible only to authorised MusicStudio staff. Teachers cannot replay lesson recordings through the platform.
In-lesson whiteboard and chat: We keep separate records of in-lesson whiteboard activity and chat messages to investigate safeguarding concerns or resolve disputes. These records are not used for advertising or profiling.
They can only be accessed by authorised MusicStudio staff when there is a specific concern to investigate and are automatically deleted after 30 days. You may request access to your personal data in these records, subject to the rights of other people.
Emails we send you: We retain copies of emails we send you, including their content, delivery information and engagement metrics, so we can maintain records of communications and resolve queries or disputes.
These records are retained for up to 24 months or until your account is deleted, subject to applicable legal retention requirements.
Messages between students and teachers: Messages sent through MusicStudio, including attachments, are stored so participants can refer to them and so we can investigate safeguarding concerns or disputes.
Automated contact-detail checks: We automatically check messages and communications for contact details and links to external messaging services. This helps us keep communication on MusicStudio and protect users, including children.
Messages may be blocked or relevant information retained for staff review. Records of these checks are kept for up to 24 months and are not used for advertising or profiling. No decision with a legal or similarly significant effect is made solely by these automated checks.
Uploaded files: Uploaded lesson materials, practice clips and identity documents are stored securely.
Help centre and AI lesson notes: We use an external AI service provider to answer help centre questions and assist teachers with writing lesson notes.
When a teacher requests AI assistance, relevant lesson information, including notes and potentially a learner's name, age and previous lesson summary, may be sent to the provider to generate a draft.
Draft lesson notes are not saved to the learner's lesson record unless the teacher chooses to save them. Help-chat questions and associated technical information are retained by MusicStudio for 90 days.
Contact and safeguarding messages: We collect information you submit through our contact forms, including your name, email address, message and relevant technical information.
Analytics: With your consent where required, we use analytics services to understand how visitors use MusicStudio and improve the platform.
When you are logged in, analytics services receive a pseudonymous account identifier rather than your name or email address.
This may include session replay, which records interactions with the website. Session replay is enabled only with analytics consent, masks information entered into forms and excludes booking and payment pages.
Advertising measurement: With your consent, we use advertising measurement tools to understand the effectiveness of our advertising, including whether advertisements lead to registrations or teacher applications.
Technical and location data: We collect IP addresses and basic device and browser information for security, fraud prevention and technical purposes.
We estimate your country from your IP address on our own servers, including to display prices in the appropriate currency and apply relevant cookie settings. Your IP address is not sent to any other company for this. We also note your browser's preferred language. Country data: IP Geolocation by DB-IP (CC BY 4.0).
We also record referral and campaign information about how you found MusicStudio. Advertising click identifiers are stored only where you have accepted marketing cookies.
Embedded videos: Some teacher introduction videos are hosted by external video providers. These videos do not load until you choose to play them. When played, the provider may receive your IP address and use cookies or similar technologies in accordance with its own privacy practices.
MusicStudio account holders must be at least 18 years old.
Children under 18 can take music lessons through MusicStudio, but cannot register their own accounts. A parent or legal guardian must register, manage the account and arrange lessons on their behalf.
When lessons are booked for children, we may collect their names, ages, lesson notes, homework, practice recordings and other information necessary to provide the lessons. This may include video recordings and communications during lessons, as described in this policy.
We use this information to provide lessons, support learning, maintain the safety of the platform and address safeguarding concerns.
Teachers are not permitted to contact children privately outside MusicStudio in connection with lessons arranged through the platform.
Children have their own rights under data protection law, even when a parent or guardian manages their account. Parents and guardians can contact us about their child's personal data, and we will consider requests in accordance with the child's rights and applicable law.
We do not knowingly permit anyone under 18 to register an independent MusicStudio account.
We process personal data under the following lawful bases:
Contract: To provide the services you sign up for, including accounts, bookings, lessons, communications, payments, teacher payouts and related administration.
Legal obligations: To comply with financial, accounting, tax and regulatory requirements, including EU platform reporting obligations under DAC7, and to respond to lawful requests from public authorities.
Legitimate interests: To operate and secure MusicStudio, provide lessons booked for children, protect students and teachers, prevent misuse, maintain records, investigate safeguarding concerns, resolve disputes, improve our services and provide requested assistance, including AI-assisted lesson notes.
This includes call recordings, in-lesson chat and whiteboard records, contact-detail checks, security logs, email records and relevant technical information.
Where we rely on legitimate interests, we consider those interests against the rights and freedoms of individuals, particularly children. You may object to processing based on legitimate interests as explained below.
Consent: For analytics and marketing cookies, session replay, advertising measurement and related tracking where consent is required. You can withdraw consent at any time.
We share personal data with service providers where necessary to operate MusicStudio. These include providers of hosting and storage, payments, video calling and recording, communications, security and spam protection, AI services, website analytics, advertising measurement and location detection.
Payments and teacher payouts are handled through Stripe, which also acts as an independent data controller for certain identity verification, fraud prevention and regulatory purposes.
We share relevant lesson information with the teachers, students and account holders involved in those lessons.
We may also share information with public authorities, including Revenue, where required by law.
International data transfers: Some of our service providers process personal data outside the European Economic Area, including in the United States.
Where required, we rely on recognised legal safeguards, including adequacy decisions, the EU–US Data Privacy Framework for participating organisations, or European Commission Standard Contractual Clauses.
You can contact us for further information about these safeguards.
We do not sell your personal data.
We use cookies and similar technologies to operate and improve MusicStudio.
They fall into three categories:
Where prior consent is required, including in the EU/EEA, UK and Switzerland, analytics and marketing cookies are disabled until you accept them. The same applies where we cannot determine your location.
Rejecting optional cookies is as easy as accepting them.
In other regions, such as the United States, analytics cookies may be enabled by default where permitted by law, while marketing cookies require your acceptance. We also recognise Global Privacy Control signals as an opt-out.
You can change or withdraw your cookie preferences at any time using the Cookie settings link at the bottom of our website.
When you withdraw consent, we stop the relevant optional tracking, notify applicable services of the change where supported, and take steps to remove associated cookies and advertising identifiers under our control.
Under GDPR, you have the right to:
These rights are subject to applicable legal conditions and exceptions. For example, we may need to retain certain financial records after an account is deleted.
We normally respond to requests within one month, subject to any extension permitted by law.
You can exercise your rights by contacting us through our contact form.
We retain personal data only for as long as necessary for the purposes described in this policy or to meet applicable legal obligations.
Account and profile information is generally retained while your account remains active.
Our principal retention periods are:
| Information | Retention period |
|---|---|
| Call recordings | 30 days |
| In-lesson whiteboard and chat records | 30 days |
| Copies of emails sent to you | 24 months |
| Records of automated contact-detail checks | 24 months |
| Payment error codes | 12 months |
| Help-chat questions | 90 days |
| Security, error and sign-in logs | 90 days |
| Web server access logs | 14 days |
| Financial and tax records | At least 7 years, as required by applicable law |
When you delete your account or request deletion, we normally complete the process within one month.
This includes deleting your account, profile, messages, reviews, practice clips, practice logs, uploaded files, photographs and associated records, except where continued retention is legally required or otherwise permitted under data protection law.
Where financial or booking records must be retained, we remove or anonymise personal information that is no longer required.
Certain information may need to be retained to comply with legal obligations, investigate disputes, respond to regulatory requests or establish, exercise or defend legal claims.
Where a teacher has earned money through MusicStudio, Irish and EU tax and accounting rules may require us to retain certain records after their account is deleted.
These requirements may include DAC7 platform reporting, Form 46G where applicable, and general financial and VAT record-keeping obligations.
The information retained is limited to what those obligations require and may include:
These records are stored securely, accessible only to authorised personnel for tax, accounting and audit purposes, and are not used for advertising or profiling.
They are retained for seven years after account deletion, unless a different period is required by applicable law.
If a teacher has never earned money through MusicStudio, DAC7 earnings-reporting obligations will not ordinarily require us to retain such payment records, although other legal retention requirements may apply.
IP addresses and browser information are generally retained in security, error and sign-in logs for 90 days, and in web server access logs for 14 days.
Records of acceptance of the Teacher Agreement, including relevant technical information, are retained as evidence of acceptance while the account exists.
Information submitted through contact forms is retained for as long as needed to address the enquiry or related matters.
Referral and campaign information associated with an account is retained until account deletion, unless a shorter period applies or continued retention is legally required.
We maintain encrypted backups of our database and uploaded files in Ireland.
Backups are retained for 90 days, with superseded copies deleted within a further 30 days. Information deleted from the live platform may therefore remain in encrypted backups for up to approximately four months before permanent removal.
If you have questions about this policy or wish to exercise your data protection rights, please contact us through the Contact Us form on MusicStudio.com.
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC), the supervisory authority for data protection in Ireland.
Website: www.dataprotection.ie
The data controller responsible for your personal data is Luteic Limited, trading as MusicStudio, a company registered in Ireland.
Registered office: 77 Camden Street Lower, Dublin 2, D02 XE80, Ireland
Company registration number: 779344
VAT registration number: IE4382912SH
Data protection contact: via our contact form