Privacy Policy

Chris Hall, trading as Chris Hall Guitar, is the data controller for the information described here. I’m based in Raskelf, North Yorkshire, and you can reach me about anything privacy-related at chris@chrishallguitar.com.

Depending on how you use the site, that can include:

• Enquiry details— your name, email, phone number and the message you send through the booking or contact forms.
• Account & profile data— for members, your name, email and the password you set (stored securely hashed, never in plain text).
• Guardian contact details— where a student is under 18, the parent or guardian’s name and contact details.
• Lesson notes & uploaded files— notes I write after a lesson and any backing tracks, tabs or recordings shared with you.
• Practice logs— the sessions and minutes you choose to record, and songs on your wishlist.
• Download requests— the email address you give to receive a free PDF resource.

Under UK GDPR I have to have a valid reason (“lawful basis”) for using your data. Mine are:

• Consent— when you submit an enquiry or ask for a download, you’re asking me to respond. You can withdraw consent at any time.
• Contract— to arrange, deliver and keep records of the lessons you book, including notes, materials and scheduling.
• Legitimate interests— to run the tuition business properly: replying to enquiries, keeping the site secure, and sending lesson reminders and the occasional practice summary. I only rely on this where it doesn’t override your rights.

I don’t sell your data, and I don’t use it for third-party advertising.

I keep the toolset small and use trusted providers. Each only processes your data on my instructions:

• Supabase— hosts the database, accounts and file storage that power the members’ area.
• Resend— sends transactional email such as enquiry replies, invitations and lesson reminders.
• Vercel— hosts the website and provides privacy-friendly, aggregated analytics.
• Google— only if you choose to connect calendar sync, to add your lessons to your calendar. It’s entirely optional.

Some of these providers may process data outside the UK. Where that happens, it’s covered by appropriate safeguards such as the UK’s International Data Transfer Agreement or equivalent terms.

I keep data only as long as I genuinely need it. Enquiries that don’t turn into lessons are cleared out within around 12 months. While you’re a student, I keep your account, lesson notes and materials so they’re there when you need them. If you stop having lessons and ask me to, I’ll delete your account and associated data, keeping only what I’m legally required to (for example, basic records needed for tax).

Under UK GDPR you have the right to:

• Access a copy of the personal data I hold about you.
• Rectifyanything that’s inaccurate or incomplete.
• Eraseyour data where there’s no overriding reason for me to keep it.
• Object toor restrict how I use it, and withdraw any consent you’ve given.

To exercise any of these, just email me at chris@chrishallguitar.com and I’ll sort it within one month. If you’re ever unhappy with how I’ve handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk — though I’d always rather you came to me first.

I teach students of all ages, including under-18s, and I take particular care with their data. Where a student is a minor, I ask for a parent or guardian’s consent before lessons begin, and the guardian’s contact details are the main point of contact.

I keep what I collect about young students to a minimum. For example, I record only a year of birthrather than a full date of birth — enough to know a student’s age group, no more. A parent or guardian can ask to see, correct or delete their child’s data at any time using the contact details above.

This site keeps cookies to the essentials. The members’ area uses strictly necessary authentication cookies to keep you securely signed in — without them, logging in wouldn’t work. For usage stats I use Vercel’s privacy-friendly analytics, which measures page visits in aggregate without tracking you across other sites or building an advertising profile. There are no third-party advertising or social-media tracking cookies.