Rachelle Moore · Legato Studio (“Legato Studio”, “we”, “us” or “our”) respects your privacy. This Privacy Policy explains how personal information is handled when you visit this website, submit an inquiry, subscribe to a newsletter, communicate with us, or otherwise interact with Legato Studio.
This policy is designed to provide a clear baseline for visitors in Canada, including Quebec, Ontario and Alberta, as well as visitors whose rights may arise under applicable United States or European privacy laws.
1. Scope and applicable privacy frameworks
This policy applies to personal information handled through the Legato Studio website and related communications. Depending on the circumstances and where you are located, applicable requirements may include Canadian federal privacy law, Quebec private-sector privacy legislation, Alberta's private-sector privacy legislation, applicable Ontario/federal private-sector rules, applicable U.S. state or federal privacy requirements, and the EU/EEA General Data Protection Regulation (“GDPR”) where it applies.
If a mandatory law gives you greater protection than this policy, that law prevails to the extent of the inconsistency.
2. Who is responsible for your information
Legato Studio determines why and how personal information submitted through this website is used for studio operations, lesson and event inquiries, communications and newsletters.
Where a particular law requires a designated privacy officer or person responsible for personal-information protection, privacy requests sent to the contact above will be directed to the person responsible for handling them.
3. Personal information we collect
Information you provide directly
Depending on how you use the site, this may include:
- name, email address, telephone number and mailing/location information;
- lesson inquiry details, preferred instrument, skill level, lesson format and scheduling preferences;
- student age and musical goals where relevant to a lesson inquiry;
- event details such as date, venue, event type, guest count and repertoire requests;
- newsletter subscription information, communication interests and unsubscribe status;
- messages and other information you voluntarily provide.
Technical and security information
The website or hosting infrastructure may process limited technical information required to deliver and secure the service, such as IP address, browser or user-agent information, request timestamps, session/security identifiers, anti-abuse information and server logs.
Information we ask you not to send
Please do not submit highly sensitive information that is not necessary for your inquiry, such as government identification numbers, financial account credentials, medical records or passwords.
4. Why we use personal information
We use personal information only for reasonable and identified purposes, including to:
- respond to lesson, performance and event inquiries;
- communicate about availability, scheduling and requested services;
- provide and administer services requested by clients or prospective clients;
- manage newsletter subscriptions and deliver communications you requested or lawfully receive;
- maintain records needed for studio administration, accounting, dispute resolution or legal obligations;
- protect the website, users and systems against fraud, abuse, unauthorized access and security incidents;
- diagnose technical problems and maintain service reliability;
- comply with applicable legal, regulatory and lawful process requirements.
We do not use personal information for materially unrelated purposes without obtaining any additional consent or other lawful authority required by applicable law.
5. Legal bases where the GDPR applies
Where European data-protection law applies, processing may rely on one or more of the following bases:
- Consent — for example, where you voluntarily subscribe to marketing communications and consent is required.
- Pre-contractual steps or contract — to respond to a service request or provide services you request.
- Legitimate interests — for proportionate website security, fraud prevention, service administration and business communications, where those interests are not overridden by your rights.
- Legal obligation — where information must be retained, disclosed or otherwise processed to comply with law.
Where consent is the legal basis, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
8. Processing and transfers outside your region
Internet services and service providers may process information in Canada or in other jurisdictions. Information processed outside your province, state or country may be subject to the laws and lawful access regimes of that jurisdiction.
Before making a transfer that requires specific contractual, assessment or other safeguards under applicable law, Legato Studio will take the measures required for that transfer. Where GDPR transfer restrictions apply, an applicable lawful transfer mechanism must be used.
9. Retention and deletion
Personal information is retained only as long as reasonably necessary for the purposes described above, to maintain required business or legal records, or to establish, exercise or defend legal claims.
Retention periods depend on the type of record and the reason it is held. When information is no longer required, it will be deleted, anonymized or securely disposed of as appropriate, subject to legal and technical requirements.
Newsletter unsubscribe records may be retained to ensure that an opt-out is respected and that unwanted marketing messages are not resumed.
10. Security and privacy incidents
Legato Studio uses administrative, technical and organizational safeguards appropriate to the nature of the information and the risks involved. No internet or storage system can be guaranteed to be completely secure.
If a privacy or security incident occurs, Legato Studio will assess and respond to it and will provide notifications to affected individuals, regulators or other parties when required by applicable law.
11. Your privacy rights
Depending on the law that applies to you, you may have rights to request access to personal information, correction of inaccurate information, deletion, withdrawal of consent, restriction or objection to certain processing, portability, or information about how data is used and disclosed.
Canada, Quebec, Ontario and Alberta
You may request access to or correction of personal information and may withdraw consent subject to legal or contractual restrictions and reasonable notice. Additional rights and procedures may apply under the privacy law governing the particular activity or province.
European Union / EEA
Where the GDPR applies, rights may include access, rectification, erasure, restriction, portability, objection and rights concerning certain automated decisions. You may also lodge a complaint with the competent data-protection authority. Requests are handled within the time required by applicable law.
United States
Residents of U.S. states with applicable consumer privacy statutes may have rights such as access/confirmation, correction, deletion, portability, and opt-out rights concerning sale, sharing or targeted advertising, subject to statutory scope, exemptions and verification requirements. Because this site does not currently intentionally sell personal information or conduct cross-context behavioural advertising, those opt-out categories may not apply to current processing.
We may need to verify your identity before completing a rights request. We will not discriminate against you for exercising a privacy right protected by applicable law.
12. Newsletter and electronic communications
Marketing and newsletter communications are managed in accordance with applicable electronic-messaging requirements. You can unsubscribe using the unsubscribe mechanism provided in a newsletter or by contacting Legato Studio.
Transactional or service-related communications may still be sent where necessary to respond to an inquiry, administer a requested service, comply with law or otherwise communicate about an existing relationship.
13. Children and minor students
Legato Studio provides music instruction to students of different ages. Parents or legal guardians should submit inquiries and provide necessary personal information for children who are not legally able to provide valid consent themselves.
We do not intentionally request more information about a minor than is reasonably necessary to respond to a lesson inquiry or provide agreed services. Requirements concerning parental consent vary by jurisdiction and will be applied where legally required.
14. Changes to this Privacy Policy
We may update this policy when our practices, technologies or legal obligations change. The “Last updated” date identifies the current version. Material changes will be communicated in an appropriate manner where required.
15. Privacy questions, requests and complaints
To ask a privacy question or exercise an applicable privacy right, contact:
You may also have the right to contact the privacy or data-protection regulator with jurisdiction over your complaint.