Privacy Policy

1. Introduction & Controller Identity

Resonant Grove Music Lessons LLC is the data controller for the personal data described in this Privacy Policy. That means we determine why and how your personal data is processed when you interact with our website, request scheduling options, or inquire about lesson availability.

Controller: Resonant Grove Music Lessons LLC
Address: 501 Union St, Suite 545, Nashville, TN 37219, United States
Email: [email protected]
Phone: +1 615 409 2638

If you have questions about privacy, data handling, or cookie choices, contact us using the details above. We do not appoint a Data Protection Officer (DPO) for this website because we do not carry out large-scale processing of special-category data.

2. Personal Data We Collect

The exact personal data we collect depends on how you interact with our site. We aim to collect only what we need to respond to your request, improve the site, and maintain security.

2.1 Identity and contact information

• Name (for example, the name you enter in our contact form).
• Email address.
• Phone number.

2.2 Information you submit in forms

• Lesson preferences (instrument, lesson type, in-studio or online preference, scheduling notes).
• Messages you send us, including goals (for example, technique goals, repertoire focus, performance preparation) and availability.
• Any other information you choose to include in your message.

2.3 Technical and device information

• IP address (which may indicate your approximate location, such as the Nashville area).
• Browser type and version.
• Device information (device model, operating system, language settings).
• Date/time and basic request metadata (for example, pages requested, error logs needed to diagnose issues).

2.4 Usage information

• Pages viewed, time spent on pages, and navigation paths (for example, which lesson pages you viewed before contacting us).
• Referrer information (the site or campaign that brought you to our site, when available).
• Click interactions that help us understand what content is useful.

2.5 Cookies, identifiers, and conversion events

• Cookie identifiers and similar technologies used for essential site operation, analytics, and marketing (described in Section 4 and in our Cookie Policy).
• Conversion-related events, such as a completed contact request, used to measure the performance of our marketing campaigns and improve how we communicate lesson availability in Nashville, TN.

We do not intentionally collect special-category data (such as health information, religious beliefs, political opinions, or similar sensitive categories), financial account details, or government-issued identification numbers through our standard lesson inquiry forms. Please avoid including sensitive personal data in free-text fields.

3. Why We Process Personal Data & Legal Basis

Our processing purposes depend on context. The legal bases below reference GDPR Article 6 because we may receive inquiries from individuals located in the EEA/UK. For U.S. visitors, the same principles apply as a practical explanation of why we use data.

3.1 Contact requests and scheduling

Purpose: to respond to your inquiry, recommend appropriate lesson options (in-studio in Nashville or online), and coordinate scheduling.

• Legal basis: Art. 6(1)(b) (contract steps / pre-contractual measures) when you request lesson information.
• Legal basis: Art. 6(1)(a) (consent) where you explicitly consent to be contacted via our form checkbox.

3.2 Analytics and site improvement

Purpose: to understand how visitors use our website (for example, which lesson pages are most helpful) so we can improve content clarity and navigation.

• Legal basis: Art. 6(1)(a) (consent) for analytics cookies and related analytics processing where required.

3.3 Marketing and advertising measurement

Purpose: to measure campaign effectiveness, show relevant ads to people interested in music lessons in Nashville, and create audiences for remarketing or lookalike targeting (where enabled).

• Legal basis: Art. 6(1)(a) (consent) for marketing cookies and related processing where required.

3.4 Security, fraud prevention, and service integrity

Purpose: to keep the website secure, reduce abuse (spam submissions, automated scraping), and detect technical issues.

• Legal basis: Art. 6(1)(f) (legitimate interests) in protecting our systems and preventing misuse.

3.5 Legal compliance

Purpose: to comply with applicable legal obligations, such as responding to lawful requests and maintaining required records.

• Legal basis: Art. 6(1)(c) (legal obligation).

3.6 Automated decision-making

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals under GDPR Article 22. Any lesson recommendations are made through human review of the information you provide and practical scheduling constraints.

4. Cookies & Tracking Technologies

Cookies are small text files stored on your device. We also use similar technologies such as pixel tags and, in some cases, server-side event forwarding. You can manage your preferences at any time using “Manage cookie preferences” in the website footer.

4.1 Essential cookies (always active)

Essential cookies are required for the site to function and for basic security. They do not require consent in many jurisdictions.

• _site_session: maintains basic session continuity and security.
• cookie_consent: stores your cookie category choices so we can respect them on future visits.

Retention: session to 12 months for essential cookies, depending on the cookie.

4.2 Analytics cookies (consent required where applicable)

Analytics cookies help us understand site usage patterns. When enabled, we may use Google Analytics 4 (GA4) with IP anonymization where supported.

• _ga: GA4 user identifier (typical retention: 2 years).
• _ga_XXXXXXXXXX: GA4 session state (typical retention: 2 years).

Data retention setting: typically 14 months in GA4 for event-level analytics data.

4.3 Marketing cookies (consent required where applicable)

Marketing cookies are used for personalized advertising, remarketing, and conversion measurement. When enabled, we may use tools such as Google Ads tags and the Meta Pixel.

• _gcl_au: Google Ads conversion linker (typical retention: 90 days).
• _fbp: Meta Pixel browser identifier (typical retention: 90 days).
• _fbc: Meta Pixel click identifier (typical retention: 90 days when a click ID is present).

4.4 Beyond cookies

Some advertising and analytics features rely on pixel tags or server-side event forwarding. When enabled, these may transmit device and event metadata (such as IP address, user agent, and conversion events) to measurement partners. For server-side integrations, we may transmit hashed identifiers (for example, a hashed email) where supported by a partner to improve matching accuracy. Hashing is a security measure; it does not make data anonymous, and it is still treated as personal data where applicable.

For additional details about cookies (including a cookie table), see our Cookie Policy.

5. Consent and Your Choices (EEA/UK)

Users in the EEA and UK receive a consent notice under GDPR/UK GDPR. Analytics and marketing cookies activate only after explicit, informed, freely given consent (GDPR Art. 6(1)(a)). Your choice is recorded in the cookie_consent cookie for up to 12 months.

You can withdraw consent at any time by using “Manage cookie preferences” in the footer or by clearing cookies in your browser. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

6. Sharing With Advertising & Service Partners

We may share limited personal data with service providers and advertising partners to operate the site, measure performance, and deliver relevant marketing. We do not sell personal data in the ordinary sense. Some U.S. privacy laws use broader definitions of “sale” and “share,” which are addressed in Section 14 (California) and Section 15 (Virginia).

6.1 Google LLC

If enabled by cookie consent, Google services may receive cookie IDs, usage data, and conversion events for analytics and advertising measurement (for example, GA4, Google Ads tags, and related tools). Google’s privacy information is available at: https://policies.google.com/privacy.

6.2 Meta Platforms

If enabled by cookie consent, Meta services may receive page view and conversion events, cookie identifiers, and limited device information for remarketing and conversion attribution (for example, via the Meta Pixel and related tools). Meta’s privacy information is available at: https://www.facebook.com/privacy/policy.

6.3 Cloudflare

We may use Cloudflare for content delivery and security protections (such as DDoS mitigation). Cloudflare may process IP addresses and request metadata for security and performance. Cloudflare’s privacy information is available at: https://www.cloudflare.com/privacypolicy/.

We do not permit these providers to use site data for their own independent commercial purposes beyond providing services to us, subject to their contractual terms and platform policies.

7. International Data Transfers

Our business is located in the United States, and some of our service providers are also based in the United States or process data on U.S. infrastructure. If you access our site from the EEA/UK/Switzerland, your data may be transferred outside your jurisdiction.

Where required, we rely on appropriate transfer mechanisms, which may include the EU-U.S. Data Privacy Framework (DPF) and its UK Extension (where applicable) and/or Standard Contractual Clauses (EU 2021/914) as a fallback. Additional safeguards may include technical and organizational measures designed to protect data in transit and at rest.

8. Data Retention

We retain personal data only for as long as needed to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Contact form submissions and inquiry records: typically up to 2 years from the last interaction.
• Analytics data (when enabled): typically 14 months in analytics platform settings.
• Marketing cookies (when enabled): retained according to cookie lifetime (commonly 90 days for certain identifiers) unless you withdraw consent sooner.
• Email correspondence: for the duration of the relationship plus up to 1 year, depending on context.
• Server and security logs: typically up to 90 days, unless needed to investigate abuse or incidents.
• Cookie consent record: up to 3 years for audit purposes (where applicable).
• Legal and tax records: retained as required by applicable law (often 6 to 10 years for certain records).

9. Your Rights (GDPR & UK GDPR)

If you are located in the EEA or UK, you may have the following rights, subject to applicable conditions and exceptions:

• Right of access (Art. 15).
• Right to rectification (Art. 16).
• Right to erasure (Art. 17).
• Right to restriction of processing (Art. 18).
• Right to data portability (Art. 20).
• Right to object (Art. 21).
• Right to withdraw consent at any time (Art. 7(3)).
• Right to lodge a complaint with a supervisory authority (Art. 77).

To exercise rights, email [email protected]. We generally respond within 30 days, and we may extend by up to 60 days for complex requests.

Supervisory authorities (examples): UK Information Commissioner’s Office (ICO): https://ico.org.uk/. European Data Protection Board (EDPB): https://edpb.europa.eu/.

10. Children’s Privacy

This website is not directed at individuals under 16. We do not knowingly collect personal data from children under 16 without verifiable parental or guardian consent. If you believe a child has provided personal data through this site, contact us and we will take steps to delete it promptly.

Music lessons for teens may be available with a parent or guardian involved in scheduling. In those cases, the parent or guardian should submit the inquiry, or provide consent where required.

11. Do Not Track Signals

This website does not respond to Do Not Track (DNT) browser signals. Some third-party providers may offer their own DNT handling; you can review their settings and policies for more information.

12. Data Deletion Requests

To request deletion of your personal data, email [email protected] with the subject line “Data Deletion Request.” For security, we may request additional information to verify your identity before completing the request.

We aim to complete deletion requests within 30 days where applicable. We may retain limited information where required by law or where needed to establish, exercise, or defend legal claims.

13. Business Transfers

If Resonant Grove Music Lessons LLC is involved in a merger, acquisition, asset sale, financing, reorganization, bankruptcy, or similar event, personal data may be transferred to a successor entity or other third party as part of that transaction. If such a transfer materially changes how personal data is used, we will provide notice through our website.

14. California Privacy Notice (CCPA/CPRA)

This section applies to California residents and supplements the rest of this Privacy Policy. Over the past 12 months, we may have collected the categories of personal information listed below, depending on how you interact with our site.

14.1 Categories collected and disclosed

• Identifiers (such as name, email address, phone number, IP address, cookie IDs). Disclosed to service providers and, if enabled, advertising partners.
• Internet or network activity (such as pages visited, interactions, referrer). Disclosed to analytics and advertising providers if enabled.
• Inferences (such as interests based on site navigation). Disclosed to advertising partners if enabled for targeted advertising.

14.2 Sale and sharing

We do not sell personal information as traditionally defined. We may share personal information for cross-context behavioral advertising when marketing cookies are enabled. California residents may opt out of the sale or sharing of personal information for targeted advertising using our cookie preferences panel (accessible via “Manage cookie preferences” in the footer) or by adjusting browser settings.

14.3 Your California rights

• Right to know what personal information we collect, use, disclose, and share.
• Right to delete personal information (subject to exceptions).
• Right to correct inaccurate personal information.
• Right to opt out of sale/sharing for targeted advertising.
• Right to non-discrimination for exercising privacy rights.

To submit a request, email [email protected] with the subject line “California Privacy Request.” We may need to verify your identity. Authorized agents may submit requests with written proof of authorization.

15. Virginia Privacy Notice (VCDPA)

If you are a Virginia resident, you may have rights to access, correct, delete, and obtain a copy of your personal data, and to opt out of targeted advertising. We do not sell personal data. We do not engage in profiling that produces legal or similarly significant effects.

To exercise your rights, email [email protected] with the subject line “Virginia Privacy Request.” If we deny your request, you may appeal by emailing with the subject line “Appeal of Refusal — Privacy Request.” We will respond to appeals within 60 days as required.

16. Nevada Privacy Notice

Nevada residents may submit a verified opt-out request by emailing [email protected] with the subject line “Nevada Do Not Sell Request.” We do not currently sell personal information under Nevada Revised Statutes Chapter 603A.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. If we make material changes, we will post a notice on our website at least 14 days before the changes take effect. The “Last Updated” date at the top of this page will reflect the most recent revision.

18. Contact

For questions about this Privacy Policy or our privacy practices, contact:

Resonant Grove Music Lessons LLC
501 Union St, Suite 545
Nashville, TN 37219, United States
Email: [email protected]
Phone: +1 615 409 2638