Privacy Policy
Who we are
Tradroom is a private, invite-only portal that Irish traditional music teachers and organisations use to share notation and recordings with their students and to manage classes. The organisation or independent tutor who invited you is the data controller for their students’ information; Tradroom acts as a data processor on their behalf.
What we collect
- Account data: name, email address and a securely hashed password.
- Student data: where applicable, date of birth, contact email/phone and postal address, class enrolments, attendance, and assigned resources. This is treated as sensitive and access is tightly restricted (see below).
- Parent/guardian data: name and contact details, and the consent choices a guardian records for their child.
- Membership data: for Comhaltas branches, membership type and number.
- Technical data: a strictly-necessary session cookie to keep you signed in (see our Cookie Policy).
How access is controlled
Every read of a student’s personal data passes through a single access layer that returns only what your role is entitled to see, and records the access. An organisation administrator sees their own students; a teacher sees the names of students in classes they teach; a guardian sees only their own children; and the Tradroom operators never see individual student data — only the account-holder contact for an organisation or independent tutor.
Legal basis
We process account and student data to deliver the service under our agreement with the controlling organisation or tutor (contract), and to meet our legitimate interest in running a secure platform. Special categories of data are not intentionally collected. For children, processing relies on parent/guardian consent where required.
Who we share it with
We use a small number of trusted processors, and do not sell personal data:
- Neon — PostgreSQL database hosting.
- Amazon Web Services (S3, eu-west-1) — storage of uploaded notation and audio files.
- Resend — transactional email (invites, verification, notifications).
- Vercel — application hosting.
Retention
We keep personal data for as long as the account is active. When an account or organisation is closed, its personal data is deleted, subject to a short backup-retention window. Uploaded files are removed when the resource is deleted or the account is closed.
Children’s data
Tradroom is designed for music education, which includes children. A student who is under 18 must be linked to at least one parent/guardian, who can review their child’s details and give or withdraw consent (for example for photos/recordings or public display) from their portal. Student personal data is never shown on public pages. (Ireland’s digital age of consent is 16.)
Your rights
You have the right to access, correct, erase, restrict, object to, and receive a copy (portability) of your personal data. To exercise any of these, contact the organisation or tutor who invited you, or email us at privacy@tradroom.ie. You can also complain to the Irish Data Protection Commission.
Changes
We may update this policy; the “last updated” date above reflects the latest version.