Last updated: 13 September 2026

​

La Voix Studios respects the privacy of its students, parents, guardians, tutors, staff and website visitors. This Privacy Policy explains how we collect, use, store and protect personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Maltese data protection law.

1. Who we are

La Voix Studios provides vocal training, performance opportunities, competitions, events and related studio services in Malta.

For the purposes of data protection law, La Voix Studios acts as the data controller in relation to the personal data described in this policy.

For privacy-related enquiries or requests, please contact:

La Voix Studios
Email: iam@gillianattard.com

2. Personal data we collect

Depending on your relationship with La Voix Studios, we may collect information including names of students, parents or guardians; telephone numbers and email addresses; dates of birth; booking and lesson information; tutor and vocal coach assignments; attendance information; registration and membership information; payment and renewal information; competition and event registrations; communications with us, including WhatsApp messages; photographs, video or other media where appropriate permission has been obtained; and information required to administer our services.

Where a student is a minor, we may process information relating to both the student and their parent or legal guardian.

We aim to collect only the information reasonably necessary for the relevant purpose.

3. How we use personal data

We may use personal data to administer student registrations and studio membership; arrange lessons, assessments and bookings; communicate timetable or schedule information; manage annual registration renewals and payments; send operational reminders and notices; administer competitions, performances and events; communicate with parents, guardians and students; maintain student and payment records; provide customer support; manage tutors, staff and studio operations; comply with accounting, legal and regulatory obligations; and, where permitted, provide information about relevant La Voix Studios activities and opportunities.

4. WhatsApp and automated communications

La Voix Studios may use WhatsApp Business to communicate with students, parents, guardians, staff and other relevant contacts.

Certain operational communications may be supported by automated systems. For example, automation may be used to send reminders, registration renewal notices, event information or staff task notifications.

Our systems may use third-party technology providers including Meta/WhatsApp, Wix, Google Workspace, Make and Cloudflare to facilitate these processes.

Automation is used to assist administration and communication and is not intended to make decisions that produce legal or similarly significant effects on individuals without appropriate human involvement.

5. Legal bases for processing

Depending on the circumstances, we process personal data on one or more of the following legal bases:

• Contractual necessity, where processing is required to provide services that have been requested or purchased.

• Legitimate interests, including administration of the studio, management of lessons and events, maintaining accurate records, communicating with students and parents, and improving our services, provided those interests do not override individuals’ rights.

• Consent, where consent is appropriate or required, including certain communications or uses of photographs and media.

• Legal obligation, where we must retain or process information to comply with applicable laws, financial obligations or regulatory requirements.

Where processing is based on consent, consent may be withdrawn at any time without affecting processing that was lawful before withdrawal.

6. Children’s data

Many La Voix Studios students are under the age of 18. We take additional care when processing children’s personal data.

Where appropriate, registrations, permissions and communications concerning minors are handled through their parent or legal guardian. We seek to process only information that is reasonably necessary to provide our services and safeguard the interests of our students.

7. Payments and financial information

Payment and subscription transactions may be processed through third-party payment providers and website services.

La Voix Studios may retain information confirming that a payment was made, such as the student concerned, payment date, amount and renewal period. We do not intentionally store full payment-card details where these are handled directly by an authorised payment service provider.

8. Service providers and data recipients

We may use trusted service providers to operate our website, communications and administrative systems. These may include Wix for website, bookings and membership functionality; Google Workspace for administrative records and communications; Meta and WhatsApp for messaging services; Make for workflow automation; Cloudflare for secure web infrastructure and message filtering; and payment providers used through our website.

These providers may process personal data on our behalf or, in some circumstances, act as independent data controllers according to their own terms and privacy policies.

We do not sell personal data.

9. International transfers

Some of the technology providers we use operate internationally and may process information outside Malta or the European Economic Area.

Where personal data is transferred internationally, we rely on mechanisms permitted under applicable data protection law, such as adequacy decisions, standard contractual clauses or other appropriate safeguards where required.

10. How long we retain information

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, contractual and administrative requirements.

Different categories of information may therefore have different retention periods. For example, financial and payment records may need to be retained longer than routine communications.

Information that is no longer required will be deleted, anonymised or otherwise securely disposed of where appropriate.

11. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, accidental loss or destruction.

Access to administrative systems and student information is limited according to operational requirements.

12. Your data protection rights

Under the GDPR, depending on the circumstances, individuals may have the right to request access to their personal data; request correction of inaccurate information; request deletion of personal data; request restriction of processing; object to certain processing; request portability of certain data; withdraw consent where processing is based on consent; and lodge a complaint with a supervisory authority.

Requests concerning personal data can be made using the contact details provided in this policy.

Individuals in Malta may also lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC).

13. Cookies and website technologies

Our website may use cookies and similar technologies for functionality, security, analytics and other purposes.

Where required, users will be given appropriate information and choices regarding non-essential cookies.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our services, systems, legal obligations or data-processing activities.

The latest version will be published on our website together with its most recent revision date.