Privacy Policy

Last updated: 19 July 2026

This Privacy Policy explains how Constantinos Lyras, trading as Lyras Music School, collects, uses, stores, and protects personal data through the website guitarlessonsnicosia.com

1. Data Controller

The data controller responsible for the processing of personal data through this website is:

Constantinos Lyras
Lyras Music School
37 Andrea Avraamide Street
Nicosia, Cyprus

2. Personal Data We Collect

Information you provide directly

When you contact us, enquire about guitar lessons, or request information about our services, we may collect:

  • Your name
  • Your email address
  • Your telephone number
  • The subject and content of your message
  • Information concerning the lessons or services you are interested in
  • Scheduling and communication information
  • Any other information you voluntarily provide

The telephone number field on the website contact form is optional.

Student and lesson information

When you or your child becomes a student, we may also process information necessary to organise and provide lessons, including:

  • Student and parent or guardian contact details
  • Lesson schedules and attendance information
  • Information about the student’s musical level, experience, and learning requirements
  • Communications concerning lessons
  • Payment, invoice, and receipt information

Please do not provide medical or other sensitive personal information unless it is necessary for the safe or appropriate provision of lessons.

Information collected automatically

When you visit the website, the website server, hosting systems, and security tools may automatically process limited technical information, including:

  • Internet Protocol address
  • Browser and device type
  • Operating system
  • Date and time of access
  • Pages requested
  • Referring website
  • Security, diagnostic, and error information

This information may be processed through server log files for the operation and security of the website.

3. How We Use Personal Data

We may use personal data to:

  • Respond to enquiries and contact requests
  • Provide information about guitar lessons and related services
  • Arrange, administer, and provide lessons
  • Communicate with students, parents, and guardians
  • Manage lesson schedules and attendance
  • Process payments and maintain accounting records
  • Provide customer support
  • Operate, maintain, and secure the website
  • Detect and prevent spam, misuse, fraud, and security incidents
  • Establish, exercise, or defend legal claims
  • Comply with legal, tax, accounting, and regulatory obligations

We do not sell or rent personal data.

4. Legal Bases for Processing

Depending on the circumstances, we process personal data on one or more of the following legal bases:

Steps before entering into a contract

We process contact and enquiry information when you ask about lessons or request information before deciding whether to use our services.

Performance of a contract

We process information necessary to arrange, administer, and provide lessons or other agreed services.

Legitimate interests

We may process information where necessary for our legitimate interests, including:

  • Responding to communications
  • Managing the music school
  • Maintaining lesson and business records
  • Securing and improving the website
  • Preventing spam and misuse
  • Protecting our legal rights

We consider whether these interests are overridden by your rights and interests before relying on this basis.

Legal obligations

We may process and retain information where required by tax, accounting, legal, or regulatory obligations.

Consent

Where processing is based on consent, such as certain optional cookies or marketing communications, you may withdraw your consent at any time.

Withdrawal of consent does not affect processing that took place before consent was withdrawn.

5. Whether Providing Information Is Required

You are not legally required to contact us or provide personal information through the website.

However, some information, such as your name and contact details, may be necessary for us to respond to your enquiry, arrange lessons, or provide the requested service.

If you do not provide the required information, we may be unable to respond or provide the service.

6. Cookies and Similar Technologies

The website may use cookies and similar technologies.

Strictly necessary cookies

Strictly necessary cookies may be used for:

  • Website functionality
  • Security
  • Contact-form operation
  • Spam prevention
  • Remembering privacy or cookie preferences

These cookies do not normally require consent where they are strictly necessary to provide a service requested by the visitor.

Optional cookies

Analytics, advertising, social-media, or other non-essential cookies will only be activated after consent where consent is legally required.

Where a cookie-management tool is available, you may use it to accept, reject, or change your cookie preferences.

You may also control or delete cookies through your browser settings. Disabling strictly necessary cookies may affect some website functions.

7. Contact Forms and Email

When you submit the website contact form, the information you enter is transmitted to us so that we can respond to your request.

Contact-form submissions may also be processed by:

  • The website hosting provider
  • The website email system
  • Contact-form software
  • Spam-prevention or security services

Please do not send confidential or sensitive information through the contact form unless it is necessary.

8. Service Providers and Recipients

Personal data may be processed by trusted service providers that assist with the operation of the website and music school, including:

  • Website hosting providers
  • Email providers
  • Website developers or technical-support providers
  • Website security, backup, and spam-prevention services
  • Accounting or professional advisers
  • Payment or banking providers, where applicable
  • Public authorities where disclosure is legally required

These providers may only process information as necessary to provide their services or comply with applicable law.

We may also disclose information where necessary to protect our rights, investigate unlawful activity, or establish, exercise, or defend legal claims.

9. International Data Transfers

Some website, email, security, or technology providers may process data outside Cyprus or the European Economic Area.

Where personal data is transferred outside the European Economic Area, appropriate safeguards will be used where required, such as:

  • An adequacy decision issued by the European Commission
  • Standard contractual clauses
  • Other legally recognised transfer safeguards

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

In general:

  • Unsuccessful or general enquiries may normally be retained for up to 12 months after the last communication.
  • Student and lesson-administration information may be retained for the duration of the teaching relationship and for a reasonable period afterwards.
  • Invoices, receipts, payment records, and other accounting information may be retained for at least six years or for any longer period required by applicable law.
  • Technical, security, and server logs are normally retained for a limited period unless they are needed to investigate an incident.
  • Information required for a dispute or legal claim may be retained until the matter and any applicable limitation period have ended.

Information may be deleted or anonymised when it is no longer required.

11. Children and Students Under 18

Lyras Music School may provide lessons to children and young people under the age of 18.

Where a student is under 18, we normally expect a parent or legal guardian to contact us, arrange lessons, and provide the necessary personal information.

Children should not submit personal information through the website without the knowledge and permission of a parent or legal guardian.

Where information about a child has been provided without appropriate parental or guardian involvement, please contact us so that the situation can be reviewed and, where appropriate, the information can be deleted.

12. Links to Other Websites

The website may contain links to third-party websites, including social-media platforms, music services, partners, and other external resources.

When you follow an external link, the third party may collect and process information under its own privacy policy.

We do not control and are not responsible for the privacy, security, or content practices of independent third-party websites.

13. Embedded Content

Some pages may contain embedded content such as videos, audio recordings, maps, or social-media content.

Embedded content may behave as though you visited the provider’s website directly. The provider may collect technical information, use cookies, or record interactions with the embedded content.

Where legally required, non-essential embedded content should not be activated until you provide consent.

14. Data Security

We use reasonable technical and organisational measures to protect personal data against:

  • Unauthorised access
  • Accidental loss
  • Misuse
  • Alteration
  • Unauthorised disclosure
  • Destruction

However, no internet transmission, website, email system, or electronic-storage method can be guaranteed to be completely secure.

15. Your Data-Protection Rights

Subject to the conditions and limitations of applicable law, you may have the right to:

  • Request access to your personal data
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal data
  • Request restriction of processing
  • Object to processing based on legitimate interests
  • Receive certain personal data in a portable format
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a supervisory authority

You also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, where applicable.

We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.

To exercise your rights, contact us.

We may request reasonable information to verify your identity before responding.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the website, our services, technology, or legal obligations.

Any updated version will be published on this page with a revised “Last updated” date.

17. Contact Us

For questions about this Privacy Policy or the processing of your personal data, contact us.