Privacy Policy

How we handle your personal data

1. Data controller

The Music School (TMS)
Email: [email protected]
Phone: +33 6 21 62 14 90
France contact point: Marseille (13008), France.

2. Data collected

We collect in particular:

  • Account data: name, email address, username, login identifiers.
  • Learning activity: progress, practice journal, content published on My Stage, completed exercises.
  • Technical data: server logs, IP address, browser type, authentication session cookies.
  • Billing data: submitted at Paddle checkout (name, address, country, transaction history).
  • Contact data: messages sent via the marketing site contact form (name, email, phone, message).

3. Purposes

  • Contract performance: providing the service, managing subscription and user account.
  • Legitimate interest: security, fraud prevention, service improvement, customer support.
  • Legal obligation: retention of certain accounting and tax data via Paddle.
  • Consent: where required (e.g. analytics cookies on the marketing site, marketing communications — not enabled by default).

4. Recipients

Your data may be processed by the following providers, as necessary for their services:

  • Hosting: virtual private server (VPS) for the TMS application and sites.
  • File storage: Cloudflare R2 (Cloudflare, Inc., United States).
  • Payments: Paddle.com Market Ltd (United Kingdom) — independent controller for billing data collected at checkout.
  • Email: transactional email provider.
  • Authentication: Google OAuth if you choose that login method.
  • Anti-spam: Google reCAPTCHA Enterprise on the marketing site contact form.
  • Analytics: Google Analytics (marketing site only, with your consent).

Data may be processed outside the EU with appropriate safeguards (standard contractual clauses where applicable).

5. Retention

  • Active account: for the contractual relationship, then limited archiving.
  • Billing data: per legal requirements and Paddle policy.
  • Technical logs: limited duration (generally 90 days, unless security incident).
  • Contact form: as long as needed to handle your request.

6. Your rights (GDPR)

Access, rectification, erasure, restriction, objection, and portability where applicable — contact [email protected].

You may lodge a complaint with the CNIL (France) or the competent authority in your country.

For payment data processed by Paddle, you may also contact Paddle in accordance with their privacy policy.

7. Cookies

Application (app.themusic.school): strictly necessary authentication cookies (HttpOnly session).

Marketing site (themusic.school): no advertising cookies. Analytics cookies (Google Analytics, anonymised) are only loaded with your explicit consent. The contact form uses Google reCAPTCHA Enterprise. You can manage preferences via the cookie banner shown on your first visit.

8. Security

TMS implements appropriate technical and organisational measures to protect your data (encryption in transit, access control, backups). However, no transmission over the Internet is completely secure.

9. Minors

The service may be used by minors under the responsibility of a parent or legal guardian. When subscribing, the payment method holder must be an adult or have the required authorisation.

10. Changes

This policy may be updated. The last updated date appears at the bottom of this page. In case of material changes, we will inform you when required by law.

Last updated: 3 July 2026