Privacy Policy

Melody Makers Music & Fine Arts Centre LLC-SO (trade licence 130222), referred to as “Melody Makers”, “we”, or “us”, operates the website melodymakers.ae, the admin platform adm.melodymakers.ae, and all related services. Our studio is at C 110, Karama Center, Kuwait Road, Al Karama, Dubai, United Arab Emirates.

For any privacy-related questions, contact us at info@melodymakers.ae or call +971 4 335 1221.

This policy explains what personal information we collect when you visit our website, book a trial lesson, enrol a student, purchase a coding bundle or other paid programme, create a customer account, send us a message, or attend classes in our studio. It applies to both children and the adults acting on their behalf.

We collect the following categories of personal data:

• Contact details – name, email address, phone number, WhatsApp number.
• Student information – name, age or date of birth, instrument or class preferences, attendance history, examination records.
• Account credentials – if you create a customer account on melodymakers.ae, we store your email address and short-lived sign-in tokens. We do not store passwords on the website; sign-in is handled by sending a one-time link to your email (“magic link”).
• Purchase and order data – bundles purchased, prices, dates, order references, refund history.
• Payment data – card number, expiry, CVC, and billing address are entered on a checkout page hosted by Stripe and never reach our servers. We only receive a tokenised reference, the last four digits of the card, the card brand, and the country of issuance.
• Communication data – messages you send via WhatsApp, Facebook Messenger, Instagram Direct, email, or our website forms, along with our replies.
• Website usage data – pages visited, referral source, browser type, device type, IP address, approximate location. Collected via cookies and analytics tools.
• Marketing preferences – whether you have opted in to receive newsletters, promotions, or class updates by email or WhatsApp.

We use personal data to:

• Respond to enquiries and trial lesson requests.
• Manage student enrolments, attendance, scheduling, and certifications.
• Process payments, issue receipts, and handle refunds.
• Create and operate customer accounts, including sending magic-link sign-in emails.
• Send essential service emails (purchase confirmations, schedule changes, exam results, password-free login codes).
• Send marketing communications, only with your consent. You can opt out at any time.
• Detect, prevent, and address fraud, abuse, or security issues.
• Comply with our legal and tax obligations under UAE law.
• Improve our website, classes, and customer experience.

We process personal data on the following grounds, consistent with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021):

• Contract – to deliver the classes, bundles, and services you have purchased or enrolled in.
• Legitimate interest – to operate our business, secure our systems, and improve our services in ways you would reasonably expect.
• Consent – for marketing communications, cookies that are not strictly necessary, and any sensitive information you choose to share.
• Legal obligation – to comply with UAE tax, accounting, and educational reporting requirements.

Card payments for coding bundles and other online purchases are processed by Stripe Payments Europe Limited and its UAE-licensed affiliates. When you check out, you are redirected to a Stripe-hosted page. Stripe collects and stores your card details under its own privacy policy and PCI DSS controls. We never see or store the full card number or CVC.

We receive only a payment confirmation, the order amount, a tokenised identifier, the last four digits of the card, the card brand, and the country of issuance. Stripe's privacy notice is available at stripe.com/privacy.

Order confirmations, magic-link sign-in emails, schedule updates, and other service emails are delivered via Resend (sent on our behalf using authenticated DKIM, SPF, and DMARC records on the melodymakers.ae domain). Resend acts as a data processor under our instructions and stores message metadata for delivery and abuse-prevention purposes.

We operate automated messaging on WhatsApp, Facebook Messenger, and Instagram to answer common questions about classes, schedules, and trial bookings. Replies are generated by AI assistants under our supervision and may be reviewed by our staff to improve quality. You can ask to speak to a human team member at any time by replying “human” or contacting us directly on +971 4 335 1221.

We use cookies and similar technologies to keep you signed in, remember your preferences, secure your session, and understand how visitors use our site. We use Google Analytics and Google Tag Manager to collect anonymised usage data. You can control cookies through your browser settings; blocking strictly necessary cookies may prevent parts of the site (such as customer sign-in) from working.

We do not sell your personal information. We share data only with:

• Payment processors – Stripe, for card payments.
• Email and messaging providers – Resend (transactional email), WhatsApp Business, Meta Messenger.
• Hosting and analytics – DigitalOcean, Cloudflare, Google Analytics.
• Examination boards – Trinity College London and ABGMVM, when you register for examinations.
• Professional advisors – accountants, auditors, lawyers, where reasonably necessary.
• Legal authorities – if required by UAE law, court order, or regulatory request.

All third parties are bound by confidentiality obligations and are permitted to use your data only for the purpose for which we share it.

Some of our service providers (Stripe, Resend, Cloudflare, Google) process data outside the United Arab Emirates. Where personal data is transferred internationally, we rely on the providers' standard contractual protections and their own UAE-compliant safeguards.

We retain personal data for as long as needed to deliver our services and to meet our legal, tax, and accounting obligations. As a guide:

• Student and family records: while you are an active student plus 7 years (UAE accounting retention).
• Payment and refund records: 7 years from the date of the transaction.
• Marketing contact lists: until you unsubscribe.
• WhatsApp, Messenger, and Instagram message logs: up to 24 months.
• Website analytics: 26 months (Google Analytics default).

You may request deletion of your data at any time, subject to records we are required by law to keep.

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. The website uses HTTPS encryption end-to-end, customer sessions use signed tokens, and access to student and family records is restricted to authorised staff on a need-to-know basis. No system is perfectly secure; if a breach affects you, we will notify you and the relevant UAE authorities as required by law.

Many of our students are children. We collect a child's information (name, age, class preferences, attendance, performance notes) only with the consent of a parent or legal guardian, and solely to deliver our educational services. We do not knowingly collect personal information from a child without parental involvement, and we do not target advertising at children.

Photographs or videos of children in class or at performances are only published with explicit written parental consent and can be withdrawn at any time by writing to info@melodymakers.ae.

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, subject to legal retention.
• Withdraw consent for marketing communications.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.
• Lodge a complaint with the UAE Data Office if you believe your rights have been infringed.

To exercise any of these rights, email info@melodymakers.ae with the subject line “Privacy request”. We will respond within 30 days.

We may update this privacy policy from time to time. Material changes will be flagged at the top of this page and, where appropriate, communicated by email. The “Last updated” date above always reflects the current version.

See also our Terms of Use and Refund Policy.

For any questions about this privacy policy or how we handle your data:

• Email: info@melodymakers.ae
• Phone: +971 4 335 1221
• WhatsApp: +971 50 696 3044
• Address: C 110, Karama Center, Kuwait Road, Al Karama, Dubai, United Arab Emirates