Privacy Policy
How we handle personal data — in plain English, the UK way.
Last updated: June 2026
LessonLoop Ltd (“LessonLoop”, “we”) provides music-school management software. This policy explains what personal data we process, why, and the rights you have under UK GDPR and the Data Protection Act 2018. We are the data controller for our own account and website data, and a data processor for the pupil, guardian and lesson data a studio stores in LessonLoop.
What we collect
- Account data — names, email addresses and roles of studio staff.
- Studio data — pupils, guardians, lessons, attendance, invoices and messages a studio enters or generates.
- Payment data — handled by Stripe; we store references, never full card numbers.
- Usage & device data — privacy-light analytics to improve the product.
How we use it
To provide and secure the service, process payments, send the messages a studio chooses to send, provide support, and meet legal obligations. We do not sell personal data.
Sub-processors
We use a small set of trusted providers to run LessonLoop. Each is bound by a data-processing agreement:
- Supabase — application database, authentication and storage (EU region).
- Cloudflare — website hosting, CDN and security.
- Netlify — application hosting.
- Stripe — payment processing.
- Resend — transactional and studio email delivery.
- Anthropic — provides the large-language-model that powers LoopAssist, our in-app assistant. Prompts necessary to answer a request are processed transiently and are not used to train models.
- 360dialog / Meta — WhatsApp delivery, only where a studio enables it.
Your rights
You have the right to access, correct, export or erase your personal data, to restrict or object to processing, and to lodge a complaint with the ICO. Studio data deletion requests are actioned through the studio that controls the data. To exercise any right, email privacy@lessonloop.net.
Retention & security
We keep personal data only as long as needed to provide the service or meet legal obligations, and delete or anonymise it thereafter. Data is encrypted in transit and at rest, with row-level security isolating every studio’s data.
Contact
LessonLoop Ltd, United Kingdom — privacy@lessonloop.net.