Privacy Policy

Data controller

The data controller is Maria Valencia, based in Milan, Italy. For privacy requests, please write to maria@mariavalenciatrumpet.com.

Personal data processed

Depending on how you use the website, we may process the following data:

• name, email address and message content submitted through the contact form;
• student name, username, account email address, optional contact phone number and student nationality selected when creating an online lesson account; for a student under 18, the parent or legal guardian’s name, relationship, adult and parental-responsibility declarations and age-appropriate privacy explanation acknowledgement;
• email address, language preference, subscription date and confirmation status for newsletter subscriptions;
• member email address and one-to-one recording notification preference;
• lesson checkout, order and payment-status metadata, together with the checkout recovery email preference;
• audio, video, screen content and lesson date contained in an optional one-to-one recording;
• versioned recording permission and withdrawal events; for a minor, age group, parent or guardian name, relationship, verification method and authorization date, without storing an identity document or exact date of birth;
• technical data such as IP address, browser information, device information, pages visited, referrer and approximate location generated by Cloudflare and Google Analytics;
• communication metadata needed to deliver emails and manage abuse prevention.

Purposes and legal bases

Personal data is processed for these purposes:

• to respond to messages sent through the contact form, based on the visitor request and pre-contractual or legitimate interest grounds;
• to create and administer the requested online lesson account, contact the adult account manager about the service and apply the relevant account, booking and payment rules;
• to send necessary account, security, order, payment-status, booking, cancellation, credit and refund communications to perform the requested service or take requested pre-contractual steps;
• to send one strictly functional checkout recovery email after an initiated lesson checkout expires, based on legitimate interest in helping the user complete the requested booking; this email contains no discount, promotional offer, cross-selling or profiling and is suppressed when payment succeeds;
• to manage newsletter subscriptions only after double opt-in confirmation, based on consent;
• to send optional one-to-one recording availability and other operational email through Resend, based on delivering the requested service;
• to create and privately deliver a one-to-one lesson recording only after separate, explicit permission; a pending segment is neither delivered nor imported into MariaFiles until confirmation, and a minor also requires prior verified parent or guardian authorization plus the student’s choice for the specific lesson;
• to measure website performance and audience through Google Analytics, based on consent where required by applicable law;
• to protect the website from abuse, spam and security incidents, based on legitimate interest.

Newsletter

Newsletter subscription uses a double opt-in process. Submitting the form sends a confirmation email; the email address is added to the newsletter list only after the confirmation link is used.

You may withdraw consent or unsubscribe at any time by writing to maria@mariavalenciatrumpet.com or by using any unsubscribe method provided in future newsletter emails.

Service and checkout recovery emails

Accepting this Privacy Policy does not constitute blanket consent to communications of any type. Necessary account, security, payment, order, booking, cancellation, credit and refund emails are limited to operating the service requested by the user.

If a lesson checkout expires before payment, Maria Valencia may send one non-promotional recovery email with a link to resume the booking. You may unsubscribe from checkout recovery emails at any time using the personal link in that email. This opt-out does not affect necessary service or security communications.

Optional one-to-one recordings and children

A lesson can take place without being recorded. Where age status is verified—and, for a child, prior guardian authorization is already recorded—a short segment may be marked pending while the student confirms during the same live lesson. Pending content stays with RealtimeKit temporarily and is not imported into MariaFiles or made available. Refusing or withdrawing permission does not remove access to the lesson.

Adults choose separately for each lesson. For every student under 18, Maria Valencia applies a stricter guardian-first rule: recording requires an authorization recorded from the person or people with parental responsibility and the student’s own age-appropriate agreement for that lesson. The student may object or withdraw at any time.

Recordings are used only for private teaching review, imported into MariaFiles and restricted to the relevant student and authorized administrators or teacher. They are not used for advertising, social media, public distribution or AI training without a new, specific legal basis and authorization.

One-to-one recording notifications

Members may receive an operational email when a new one-to-one recording is available in their private members area.

You may unsubscribe from these notifications at any time using the personal unsubscribe link in each recording email. Unsubscribing does not remove recordings or affect access to the members area.

Service providers

The website uses selected service providers that may process data on behalf of the controller:

• Cloudflare, for hosting, security, CDN, Workers, logs and infrastructure services;
• Cloudflare RealtimeKit, to operate the private video lesson and create an optional recording;
• Resend, for sending contact, newsletter, account, Commerce and one-to-one recording availability emails and managing newsletter contacts;
• Google Analytics, for aggregated website analytics and usage measurement.

International transfers

Some providers may process data outside the European Economic Area. Where this happens, transfers are handled through the safeguards offered by the relevant providers, such as contractual protections, data transfer frameworks or other applicable legal mechanisms.

Retention

Personal data is kept only for as long as necessary for the purposes described above:

• contact form messages are normally kept for up to 24 months, unless a longer period is needed to handle the relationship or legal obligations;
• newsletter data is kept until unsubscribe, withdrawal of consent or list cleanup;
• Commerce order and communication metadata is kept for the period needed to provide the service, reconcile payments and refunds, comply with legal obligations and handle disputes; the checkout recovery opt-out is retained while needed to respect the user’s choice;
• recording notification preferences are kept while the member account or related service relationship remains active, including the opt-out needed to respect the member choice;
• private lesson recordings are kept only while they remain useful for the teaching relationship or until a valid deletion request, subject to any overriding legal obligation; necessity and access must be reviewed periodically;
• recording permission, withdrawal and guardian-authorization records are kept as evidence for the period needed to demonstrate compliance and handle requests or disputes, then deleted or anonymized;
• technical logs are kept for the period made available by the relevant infrastructure provider and reviewed only when needed for security or troubleshooting;
• analytics data is retained according to the Google Analytics configuration and provider settings.

Your rights

Where applicable, you may request access, rectification, deletion, restriction, portability or objection to the processing of your personal data. You may also withdraw consent at any time where processing is based on consent.

You can exercise these rights by writing to maria@mariavalenciatrumpet.com. You also have the right to lodge a complaint with the competent data protection authority.

Cookies

Information about cookies and similar technologies is available in the Cookie Policy linked from this website footer.