Privacy Policy

Privacy Policy (GDPR Compliant)

Effective Date: 24th June 2025

The North Wales Academy of Music and Drama ("we", "our", or "us") is committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable laws.

1. Data Controller

The data controller is:
North Wales Academy of Music and Drama
LL30 2YG
Email: hello@nwamad.co.uk
Phone: 07786672863

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

• Contact information: name, phone number, email, address

• Demographic data: date of birth, age, gender (if relevant)

• Student registration information: course details, guardian contact

• Website usage data: IP address, browser type, cookies (see section 8)

3. Special Category and Child Data

• We may collect limited special category data, such as health or accessibility information, only where necessary and with explicit consent.

• For children under 18, personal data will only be collected and processed:

  • With parental or guardian consent (as required under GDPR Article 8)

  • For legitimate educational, enrolment, safeguarding or communication purposes

• We do not knowingly process personal data of children without appropriate authorisation.

4. Legal Basis for Processing

We rely on the following lawful bases under GDPR:

• Consent – when you opt in to receive marketing communications

• Contract – for managing enrolment and services

• Legal obligation – for safeguarding and compliance purposes

• Legitimate interests – to improve services, security, and communication

5. How We Use Personal Data

We may use your data to:

• Provide educational services

• Administer enrolments and payments

• Respond to queries or support requests

• Send updates, event announcements, or marketing (with your consent)

• Ensure the safety and welfare of our students

6. Data Sharing and Transfers

We may share your data with trusted third-party service providers (e.g. web hosting, email platforms, payment processors) under data processing agreements that ensure GDPR compliance.
We do not sell your personal data.
If data is transferred outside the UK, it will be protected by appropriate safeguards.

7. Data Retention

We will retain your personal data only as long as necessary for the purposes for which it was collected, or as required by law.
When no longer needed, data is securely deleted or anonymised.

8. Cookies and Tracking Technologies

We use cookies to enhance your browsing experience and collect anonymised usage data. You can control cookie settings through your browser or our cookie banner.

9. Your Data Protection Rights

Under the UK GDPR, you have the right to:

• Access your personal data

• Correct or delete inaccurate data

• Withdraw consent at any time (where applicable)

• Object to or restrict processing

• Data portability (in applicable cases)

• Lodge a complaint with the Information Commissioner’s Office (ICO)

10. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact:
Data Protection Officer
North Wales Academy of Music and Drama
hello@nwamad.co.uk

We are exempt from registering with the Information Commissioner’s Office (ICO) because we only process personal data that is necessary to establish or maintain membership or support, to provide or administer activities for individuals who are members or have regular contact with the organisation, and we limit our processing to only the personal information required for these specific purposes.