Privacy notice
Last updated: 10 May 2026
Who we are
Music Tech Studio is operated by Mike Lehnert, a Music Technology teacher. For the purposes of UK GDPR and the Privacy and Electronic Communications Regulations 2003 (PECR), Music Tech Studio is the data controller for personal data collected through this site.
Contact: privacy@musictechstudio.co.uk
What we collect
- Student name and cohort
- Email address (optional, for account recovery)
- Grade data — assessment scores, mark history, teacher feedback
- Essay submissions and audio recordings
- Quiz responses and retrieval-practice data
- A login token used as a pseudonymous identifier
Why we collect it (legal basis)
For students at Sherborne School, we process personal data on the basis of:
- Legitimate interests — running curriculum-aligned learning resources, providing feedback, tracking progress.
- Consent — for optional analytics cookies.
Who we share it with (sub-processors)
We use a small number of trusted infrastructure providers to run the site:
- Vercel (Frankfurt, EU) — hosting
- Supabase (EU region) — database and authentication
- PostHog (Frankfurt, EU) — anonymous analytics, only with your consent; events are tied to your pseudonymous student token, not your name
- Resend — email delivery for grade and feedback notifications
- Anthropic (US, with EU data processing terms) — automated essay marking and feedback generation
We do not sell or rent your personal data, and we do not share it with advertisers.
How long we keep it
- Active student data — kept for the duration of A-Level studies
- After leaving school — deleted within 12 months
- Anonymous analytics — 12 months
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data deleted (where there's no legitimate reason to keep it)
- Restrict or object to how we use it
- Receive a copy of your data in a portable format
- Withdraw consent at any time
To exercise any of these, email privacy@musictechstudio.co.uk. You also have the right to complain to the UK Information Commissioner's Office.
Cookies
Essential — Supabase auth session (required to log in).
Optional (with consent) — PostHog analytics cookie. Set at .musictechstudio.co.uk so a single choice covers all our subdomains.
Changes to this notice
We update this page when we change how we handle data. The "last updated" date at the top reflects the most recent change.