Data Protection & Privacy
The Music Box is the Data Controller for the purposes of UK GDPR. Data is processed for administration, safeguarding, emergency contact, and communication purposes.
We process data under contractual necessity (membership administration), safeguarding legal obligations, and consent (photography and media use).
All information is stored securely under UK GDPR. Only designated safeguarding leaders, chaperones, and first aiders will have access. Parents may request to review or amend information at any time.