Privacy Policy

Last updated: 2 April 2026

1. Who We Are

The Malta Contemporary Music Academy ("MCMA", "we", "us") is responsible for processing your personal data as described in this policy. Our contact email is info@mcma.mt.

2. What Data We Collect

We collect the following personal data when you interact with our platform:

  • Application data: name, email, phone, date of birth, ID number, instrument, musical experience, and skill self-assessment.
  • Parent/guardian data: name, email, and phone (for applicants under 16).
  • Subscriber data: name, email, phone, age, and communication preferences.
  • Contact form data: name, email, subject, and message content.
  • Payment data: processed securely by Stripe; we do not store card details.
  • Portal usage data: attendance records, homework submissions, messages, and progress reports.

3. Why We Process Your Data

We use your data for the following purposes:

  • Processing your application and managing your enrolment.
  • Placing you in appropriate ensembles based on your skill level and preferences.
  • Communicating with you about your application, schedule, and academy events.
  • Sending you marketing communications (only with your explicit consent).
  • Improving our services and platform.

4. Legal Basis

We process your data based on:

  • Contractual necessity: to fulfil your enrolment and deliver the programme.
  • Consent: for marketing communications and optional data collection.
  • Legitimate interest: for improving services and internal analytics.

5. Data Sharing

We do not sell your personal data. We share data only with the following categories of processors, all of whom are GDPR-compliant:

  • Supabase: database hosting and authentication.
  • Stripe: payment processing.
  • Resend: transactional and marketing emails.
  • Google Workspace: internal communications and file storage.

6. Data Retention

  • Application data is retained for up to 2 years after the programme ends.
  • Subscriber data is retained until you unsubscribe.
  • Contact messages are retained for up to 1 year.
  • Payment records are retained as required by Maltese tax law.

7. Your Rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Request erasure of your data ("right to be forgotten").
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent at any time (for consent-based processing).

To exercise any of these rights, email us at info@mcma.mt.

8. Cookies

Our platform uses essential cookies for authentication and session management. We do not use third-party tracking cookies. Analytics, if used, are anonymised.

9. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email or the student portal.

10. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta.