Privacy & cookie information

First-party base statistics

The production site uses the shared first-party /collect/ route to record a limited base visit event for page reach and technical operation. This base event is cookieless and runs independently of whether a visitor accepts, rejects, dismisses or ignores optional cookie choices. Local-development traffic is excluded where supported.

Request and server data

Hosting systems may process the requested URL, date and time, browser information, referring page, approximate network information and error details for delivery, security and troubleshooting. Retention follows operational need and server configuration.

Enquiries

The local trial-message tool works in the visitor’s browser and does not submit its fields to this site. If a visitor separately contacts the academy by phone, WhatsApp or email, that provider and the recipient process the information sent. Do not include sensitive credentials or payment-card details.

Cookies and optional services

The core website does not require an account. Optional advertising, personalization or third-party tracking must remain off until configured with an appropriate disclosure and consent mechanism. A future preference control may store a first-party choice, but it must not suppress the approved base statistics event.

Children

Content discusses children’s lessons, but enquiries should be made by a parent, guardian or appropriate adult. The website does not knowingly request information directly from children.

Contact

Privacy questions can be sent to server@thetinymusicacademy.com.

Purpose and data minimisation

Information is processed only to deliver pages, understand basic reach, troubleshoot failures and respond to messages that a visitor chooses to send through an external contact route. The site does not require a visitor profile, public account, student portal or payment account. Base statistics should not contain message text, instrument choice or the locally generated trial brief.

Security and retention

Reasonable technical controls can reduce risk but no internet transmission or storage system is guaranteed secure. Operational logs and first-party statistics should be retained only as long as needed for security, reliability and aggregate analysis, then deleted or aggregated according to the production configuration. Access should be restricted to people responsible for the website and infrastructure.

Third parties and links

When a visitor opens a telephone, WhatsApp, email or map link, the selected service may receive device, account or network information under its own terms. The website should not imply that rejecting optional cookies controls those external services. No third-party advertising cookie or analytics SDK is included in this local build.

Choices and requests

Visitors may browse without completing the trial-message fields. A person asking about information previously sent through an external channel should identify that channel and approximate date so the responsible recipient can assess the request. The website cannot retrieve or erase information held solely by an unrelated communications provider.

Changes to this notice

This notice should be revised before enabling accounts, online payment, advertising personalization, embedded social content or a new form backend. A date changes only after a substantive review.

Last reviewed: 22 September 2026