IPA determines why and how personal information is used in connection with its educational services and acts as the controller of that information.

We aim to collect only the information reasonably required to operate our services, communicate with families, manage teachers, protect students and comply with our legal and regulatory responsibilities.

Some services are provided through third-party platforms. Those providers may process information on our behalf under their own security, confidentiality and data-processing arrangements.

Identity and contact information

• Parent, guardian or adult student names.
• Student names and ages.
• Email addresses, telephone numbers and WhatsApp contact details.
• General location, area or city information required to arrange lessons.

Lesson and enrolment information

• Instrument, experience level, lesson format and preferred lesson duration.
• Availability, scheduling, attendance, cancellation and rescheduling information.
• Teacher assignments, lesson notes and educational progress records.
• Enquiries, complaints, feedback and communications with IPA.
• Information voluntarily provided to help us understand a student’s learning requirements.

Payment and transaction information

• Invoice amounts, payment dates, payment references and payment status.
• Records relating to credits, cancellations or adjustments.

Where payments are processed through a bank or external payment provider, IPA does not ordinarily receive or retain complete payment-card credentials.

Website and technical information

• Internet Protocol address, browser, device and operating-system information.
• Website activity, page interactions, referral information and approximate location derived from technical data.
• Cookie identifiers and information collected through HubSpot or similar website technologies.

We process personal information only for specific and lawful purposes connected with our services and operations.

• To respond to enquiries and provide information about IPA programmes, prices and availability.
• To arrange trial lessons, enrol students and identify a suitable teacher.
• To schedule, administer and deliver home and online lessons.
• To communicate with parents, guardians, adult students and teachers about lessons.
• To issue invoices, record payments and administer lesson credits.
• To maintain attendance, educational and operational records.
• To manage safeguarding, student welfare, complaints, incidents and service quality.
• To operate, secure, analyse and improve our website and services.
• To send newsletters or promotional communications where the recipient has given the required permission.
• To comply with applicable laws, regulatory requirements and lawful requests from competent authorities.
• To establish, exercise or defend legal rights and contractual claims.

Where we rely on consent, that consent may be withdrawn. Withdrawal does not affect processing already carried out lawfully before the withdrawal.

IPA provides services to children and therefore processes student names, ages, lesson preferences, attendance records and educational information.

Where a student is under 18, IPA requires the explicit consent of the student’s parent or legal guardian for the processing of the child’s personal information for enrolment, tuition, administration and safeguarding purposes. Children’s personal information will be handled in accordance with applicable Qatar data-protection requirements.

We do not knowingly send direct marketing communications to children. Marketing preferences relating to a child’s lessons are managed through the parent or legal guardian.

We limit access to children’s information to those who reasonably require it for enrolment, lesson delivery, administration, safeguarding or another legitimate operational purpose.

IPA does not sell personal information. We may share limited information with the following recipients where reasonably necessary.

• IPA teachers and specialists who require relevant information to prepare for and deliver lessons.
• The Director and other authorised IPA personnel where access is reasonably required for their role.
• HubSpot and other customer-relationship, form, website or communications providers.
• WhatsApp and Meta services where customers choose to communicate with IPA through WhatsApp.
• Website hosting, email, cloud, security and technical providers supporting IPA systems.
• Banks and payment providers involved in processing or confirming payments.
• Professional advisers such as lawyers, accountants, insurers or auditors where required.
• Government, regulatory, judicial or law-enforcement authorities where disclosure is required or permitted by law.

Recipients are given only the information reasonably required for the relevant purpose. Service providers acting on our behalf are expected to protect information and use it only for authorised purposes.

Some technology and communications providers used by IPA operate systems, support teams or data centres outside Qatar. Personal information may therefore be processed or stored in another country.

Where personal information is processed outside Qatar, IPA will handle the processing and any transfer in accordance with applicable Qatar data-protection requirements and will take reasonable steps appropriate to the nature of the information and the service provider involved.

Cross-border processing does not remove IPA’s responsibility to handle personal information in accordance with applicable Qatar law.

IPA may send newsletters, programme announcements, event information or promotional communications where the recipient has actively requested or agreed to receive them.

Marketing permission is separate from the information required to administer an enquiry or deliver lessons. Refusing marketing permission will not prevent a student from accessing IPA services.

Marketing consent is not obtained through pre-selected boxes. A recipient may withdraw permission at any time by using the unsubscribe method included in the communication or by contacting:

Administrative messages concerning an enquiry, payment, scheduled lesson, cancellation, safeguarding matter or active service are not promotional marketing and may still be sent where necessary.

Promotional photographs and video

IPA may invite students or families to provide separate permission for photographs, video or other media to be used on the IPA website, social-media accounts or promotional materials.

Promotional consent is optional and is not a condition of enrolment. Refusing or withdrawing promotional-media consent will not affect a student’s access to lessons.

Lesson recordings

Lessons are not routinely recorded. Where a recording is required for a specific authorised purpose, such as an examination, audition, performance or another legitimate educational purpose, IPA will obtain the appropriate consent before recording.

Any recording required in connection with a safeguarding, evidential or legal matter will be handled in accordance with applicable law.

Any authorised recording will be accessed only by those who reasonably require it for the relevant purpose and will not be retained for longer than reasonably necessary.

Lesson recordings will not be published or used for promotional purposes without separate express permission. Where the student is under 18, any such permission must be provided by the student’s parent or legal guardian.

The IPA website may use cookies and similar technologies to operate the site, maintain security, remember preferences, understand website use and manage enquiries through HubSpot.

Essential technologies

Some technologies are necessary for the website to function securely and correctly. These may operate without a separate marketing choice.

Analytics and marketing technologies

Where non-essential analytics or marketing technologies are used, IPA will provide information and appropriate controls as required. Visitors may also manage cookies through their browser settings.

Disabling certain technologies may affect some website features, but refusing non-essential tracking will not prevent access to the main information on the website.

IPA retains personal information only for as long as reasonably necessary for the purpose for which it was collected and for any applicable legal, accounting, safeguarding, contractual or dispute-resolution requirements.

Information may be retained for longer where reasonably necessary to comply with law, preserve evidence, protect a student or respond to a legal claim. Information that is no longer reasonably required will be deleted, anonymised or otherwise disposed of appropriately.

IPA takes reasonable administrative, organisational and technical measures appropriate to its size and operations to protect personal information against accidental loss, unauthorised access, use, alteration or disclosure. Measures may include controlled account access, password protection, reputable systems, appropriate access restrictions and confidentiality requirements.

Measures may include controlled user access, password protection, secure systems, limited internal access, provider due diligence, staff confidentiality requirements and secure deletion practices.

No website, email service, messaging platform or electronic storage system can be guaranteed to be completely secure. IPA will assess and respond to suspected incidents and will make any notifications required by applicable law.

Subject to applicable law and relevant exceptions, an individual may request:

• Information about whether and how IPA processes their personal information.
• Access to personal information held about them.
• Correction of inaccurate or incomplete information.
• Deletion or cessation of processing where legally applicable.
• Withdrawal of consent where processing is based on consent.
• An end to direct-marketing communications.
• Information about recipients or categories of recipients with whom information has been shared.
• An explanation or review where they believe information has been handled improperly.

IPA may request reasonable information to verify identity and authority before responding. A parent or guardian may make an appropriate request concerning a child for whom they are legally responsible.

Some information may need to be retained despite a deletion request where IPA has a continuing legal, financial, safeguarding or dispute-resolution obligation.

Privacy questions, requests or complaints should first be sent to IPA using the contact details below.

We aim to acknowledge a formal complaint within five business days and provide a substantive response within fifteen business days. A more complex matter may require additional time, in which case we will provide an update where reasonably possible.

Where an individual remains dissatisfied, they may also raise the matter with the competent data privacy authority in the State of Qatar.

IPA may update this policy to reflect changes in its services, technology, suppliers, operating practices or legal obligations.

The latest version will be published on this page with an updated revision date. Where a change materially affects how personal information is used, IPA may provide an additional notice through an appropriate communication channel.

Contact IPA regarding this policy, personal information or a privacy request using the following details.