Last Updated: September 1, 20231 Wattles Street
This Privacy Notice (“Notice”) provides information about how School of Rock and its franchises (“we,” “us,” “our,” or “School of Rock”) process personal information. This Notice applies to personal information we collect through websites that link to this Notice, including schoolofrock.com; in person, such as at a School of Rock lesson, event, camp, or workshop; or through our provision of services you request from us. We may provide you with additional privacy notices and other disclosures to supplement this Notice when we collect personal information.
In general, personal information (also known as personal data) is any information that can identify who you are, either directly (for example, your name) or indirectly through combination with other information we may have about you.
We may revise this Notice from time to time. The “Last Updated” date at the top of this Notice will always reflect when changes were last made.
We may get personal information from the following sources:
• Directly from you. We primarily obtain personal information directly from you – for example, when you ask to schedule a free trial lesson or express interest in franchising opportunities using one of our online forms, sign up for or attend lessons or other events, or communicate with us directly via email or phone.
• Tracking and monitoring technologies. Some personal information about you might be automatically generated when you visit our website, which may have first-party and third-party technology integrations (for example, cookies or pixels) that help to facilitate your online experience and personalize your visit to our website. Additional information about these technologies is available below in the Cookies and Other Tracking Technologies section. We may combine certain information collected through these technologies with other information we obtain about you, which may include data we obtain from external parties.
• External sources. Personal information about you may be provided to School of Rock from vendors we work with, such as ad networks, lead brokers, and data resellers; from referrals from our existing customers; and from our franchises and other business partners.
The following table gives examples of the types of personal information that School of Rock may collect, maintain, and otherwise process about you. Depending on how you interact with us, we may not collect, keep, or use all categories of personal information included in this table.
Note on Sensitive Personal Information. Sensitive personal information is processed in limited circumstances to be able to provide our services to you or your family. We also process sensitive personal information when necessary to ensure the security and integrity of our data and systems; to establish, exercise, or defend legal claims; when needed to operate our business, including maintaining or servicing accounts or providing customer service; to protect the vital interest of an individual (such as in an emergency) or for public health reasons; or where you have otherwise provided your explicit consent. Our processing of sensitive personal information is subject to additional safeguards as required by applicable law.
The following table explains the purposes for which we use personal information and the legal bases that support our processing of your personal information. We also give typical examples of the types of processing activities related to each purpose or legal basis.
We and our vendors may use a variety of tracking technologies, including cookies, that process certain information whenever you interact with our website, such as device identifier, IP address, location, other unique identifiers, pages within the website that you visit, and the length and time of your visit.
A cookie is a small text file saved by your internet browser when you visit a website. Cookies store or provide information to help our website function. Some cookies recognize your device (such as your computer) when you visit our website again, and some cookies can help us understand your use of our website over time. For example, cookies might be used to:
• enhance your experience on our website by improving navigation speed;
• customize your browsing experience on our website by showing you information likely to be more relevant to you; or
• learn about your visit to our website, for example, by collecting information about how you got to our website, which pages on our website you viewed or links you clicked and how you interacted with our content during your visit or over multiple visits.
Cookies vary in how long they are kept on your device. We use both session cookies and persistent cookies on our website. “Session cookies” are temporary cookies that last for only a single browsing session. The information they collect is stored in temporary memory and erased shortly after you leave our website or close your browser. “Persistent cookies” are stored on your device until you take steps to remove them or until a particular cookie’s expiration date (often several months after the cookie is placed on your device). Persistent cookies can record information from each visit you make to our website as long as they remain on your device.
• Consenting to Cookies and Updating Consents. In some locations, we cannot place non-essential cookies without your consent. When we require your consent for cookies, you will be asked for consent when you visit our website. You will have the option to accept all cookies or only essential cookies or make additional choices before confirming your consent. Note that when you consent to cookies on our website, you may withdraw your consent or change your cookie preferences at any time by contacting School of Rock at firstname.lastname@example.org. Essential cookies will continue to be placed without consent.
• Opting Out of Cookies Using Your Browser. You may be able to disable Cookies using your browser settings. Please review your browser’s instructions, or visit All About Cookies (an unaffiliated website) for general information.
All personal information we collect may be used by and disclosed to our affiliates, franchises, and business partners. We also disclose personal information to our vendors, including internet activity records; geolocation data; audio, visual, or similar information; employment or professional information; commercial information; and financial details and payment information. These vendors collect, manage, and analyze our customer information and perform services for us, such as sending marketing communications, managing enrollments, payment processing, and improving or maintaining the performance of our website or services. In addition, we may share personal information for the following purposes:
• Co-Branded Services. From time to time we may enter into an arrangement with another company that is not owned by or affiliated with us to provide special programming or features. These arrangements may include business partners, sponsors, and others involved in offering the co-branded services. Any information, including personal information, that you provide through one of these co-branded services may be shared with any others involved in offering the co-branded services. By participating in co-branded services or providing your information in connection with these co-branded services, you permit us to disclose your personal information to others involved in offering the co-branded services. Separate privacy policies may apply to others’ uses of personal information.
• Business Transactions. In the event of a business transaction, we may disclose personal information to prospective or actual purchasers, investors, or successor entities in connection with a contemplated or actual reorganization of our business or in connection with financing, a sale, or other transaction involving the disposal of all or part of our business or assets, including to permit the due diligence required to decide whether to proceed with a transaction.
• Legal Compliance. We may also disclose personal information for legal compliance, law enforcement, and public safety purposes. For example, we may provide personal information to public authorities, including law enforcement as well as government or regulatory bodies, lawful authorities, or other authorized parties to comply with laws, regulations, court orders or legal processes, or other legal obligations or to protect or defend our rights and property or that of others.
This table identifies the categories of likely recipients of your personal information and why they would need to process your personal information:
Our website is not generally intended for, nor targeted to, children under 16, and we expect that parents and guardians will make relevant decisions about whether to enroll their children in any particular program. We do not knowingly request or collect personal information directly from any person under 16 years of age. If we learn that we have received personal information directly from a child under the age of 16, we will delete the personal information in accordance with applicable law.
You can interact with us on social media, for example, by liking or following us or tagging us in one of your posts. Any information you make available through our social media presence may be publicly displayed by us, and the social media platform may receive information about you and your interaction with School of Rock. We also may have access to personal information about you from the social media platform and may be able to track when you interact with us, including when you like one of our posts, follow or tag School of Rock, or share our content through Facebook, Instagram, or other social media.
Please note that if you mention School of Rock, tag us, or comment about or in response to us in your post on social media, we may be allowed to use your post, including by re-publishing all or a portion of it on our social media or website. You should review the terms, policies, and settings of your social media accounts to learn more about their data practices and adjust your settings accordingly.
Any content you choose to share with us directly or through social media may be seen by anyone, and we may not be able to prevent your shared content from being used in a manner that violates your wishes, our policies, or the law. For instance, your content may get republished or archived by search engines, and we cannot control this. We may revise any content you share with us, delete it, or combine it with other information we have collected about you to better understand your interests.
If you want School of Rock to remove any content from our website or other location we control, you may send us an email at email@example.com or call us at +1 866.695.5515.
Our website may offer links to, or features facilitated by, other vendors or online services. For clarity, this Notice does not apply to the practices of other businesses. We provide these external links merely for your convenience, and we have no control over, do not review, and are not responsible for the privacy practices of other businesses.
School of Rock retains your personal information for as long as necessary for the purposes described in this Notice or to achieve the purposes for which the information was collected, or as may be permitted under applicable law. In determining retention periods, we consider factors such as our legal and contractual obligations, as well as the amount, nature, and sensitivity of personal information, the purposes for which we process the personal information, and the potential risk of harm that may result from unauthorized access to the personal information. For more information about our retention policies, please contact us using the contact details at the end of this Notice.
School of Rock has adopted and maintains administrative, technical, physical, and organizational safeguards consistent with relevant legal requirements and industry standards to protect your personal information from loss, theft, misuse, inadvertent destruction, or other unauthorized processing.
We require our vendors and business partners who have access to personal information to comply with contractual obligations to adopt and maintain safeguards similar to those we use to protect personal information when personal information is processed on our behalf.
Updating Personal Information. We rely on the accuracy, integrity, and reliability of your personal information to be able to comply with our business obligations and provide you with the services you request. To help us with this, we expect you to tell us about any changes to your personal information, such as changes to your contact information.
Unsubscribing from Marketing Communications. You may opt out of our marketing communications by following the “unsubscribe” instructions included in any communication from us. Note that unsubscribing from marketing emails will not affect your receipt of transactional communications, such as those regarding your lessons or enrollment in our programs.
Other Privacy Rights Requests. In accordance with applicable law and subject to some restrictions, you may have the right to know what personal information we process about you and to review, access that personal information, delete it, transfer the personal information in a machine-readable format, and/or restrict or object to or opt out of our processing of such personal information. If you would like to exercise any of your privacy rights, you or someone you authorize can contact us using the contact details at the end of this Notice. To prevent unauthorized requests related to your personal information, we take steps to verify that you are the person that is the subject of the requested personal information, which may include asking you for additional details to match to the information we maintain about you. We will not discriminate against you for exercising your privacy rights.
School of Rock will honor any rights in your personal information provided to you by applicable law unless an exception or restriction prevents us from fully honoring your request. If we cannot fulfill your request in whole or in part, we will explain why in our response to you. Please note that it is our policy not to disclose any information in response to a privacy rights request that may adversely affect the privacy of other persons unless legally required to do so.
If at any time, you believe that personal information about you has been processed in violation of this Notice, you may report your concern to us using the contact details at the end of this Notice. In certain jurisdictions, you may have the right to file a complaint with a data protection authority if you believe our processing of your personal information violates your rights under applicable data protection or privacy law. Although School of Rock has not independently verified its accuracy, a list of data protection authorities is maintained by the International Association of Privacy Professionals.
Opting Out of the Sale or Sharing of Personal Information
Some of the ways in which we share personal information with our advertising and marketing vendors for targeted advertising or disclose it to our business partners for their commercial purposes or for our benefit may give you a right to opt out of our use of your personal information for these purposes. For example, we share personal information, such as identifiers and internet activity records, with our advertising and marketing partners for targeted advertising purposes. Targeted advertising helps us connect you with the programs and content most likely to be of interest to you. If you reside in a state with a comprehensive privacy law that is in effect, you may have the right to opt out of our sale of personal information and/or our sharing of personal information for cross-context behavioral or targeted advertising. If you wish to opt out, contact us by email at firstname.lastname@example.org or by calling us at +1 866.695.5515.
California Limit the Use or Disclosure of Sensitive Personal Information
School of Rock does not use sensitive personal information in a way that permits the limitation of our use or disclosure of such information under California’s privacy laws.
California Right to Know
California residents have the specific right to ask us to tell you the following information about our use of your personal information:
• Categories of personal information we collect and our purposes for doing so;
• Categories of sources from which we collect personal information and why;
• Categories of recipients to whom we disclose personal information and why, including a list of categories of personal information disclosed for a business purpose and a list of categories of personal information sold or shared for targeted advertising purposes; or
• The specific pieces of your personal information we have collected.
California’s Shine the Light Law.
California residents may ask us to provide them with (1) a list of certain categories of personal information that we have disclosed to other parties for their direct marketing purposes during the immediately preceding calendar year, and (2) the identity of those other parties. California residents may make one such request per calendar year. To make a Shine the Light request, you may contact us by email or postal mail using the information provided in the contact details at the end of this Notice. In your request, please state that you are a California resident and provide a current California mailing address for our response.
Please note that your Shine the Light law rights are distinct from your rights under California privacy law and must be exercised separately.
School of Rock is the data controller for personal information we receive through our website and those of our franchises as well as personal information collected when you visit a location in person. You may contact us by email at email@example.com or by calling us at +1 866.695.5515.
Any personal information you provide through our website is being provided by you directly to School of Rock in the United States. School of Rock, through its worldwide operations and franchises, may transfer any personal information obtained through other means to the United States, where we are headquartered, or to any other country where we or our business partners, franchises, or vendors operate. The data protection and privacy laws in these countries may offer a different level of protection than the laws in your jurisdiction.
We take appropriate measures in compliance with applicable law to protect any personal information that we transfer to another location, including safeguards legally required to protect personal information during transfer and other processing outside the country where it was collected. When required by applicable law, we will obtain your consent to the transfer and processing of your personal information outside of your country of residence.
By submitting your personal information to us, you permit the processing of your personal information in any jurisdiction in which we operate. A full list of these jurisdictions can be found through our "Find a Location" link on our website.
For more information about cross-border transfers, including details about where your personal information is processed, by whom, and the purposes for such processing, please contact us using the information provided at the end of this Notice.