Privacy Policy

1. Key terms

• Personal Data: any information about an identifiable person.
• Data Principal (Data Subject under GDPR): the person the data is about. For a child, this includes the parent or guardian.
• Data Fiduciary (Data Controller under GDPR): SURIX, which decides why and how data is processed.
• Child: a person under 18 under the DPDP Act. Under COPPA, extra protections apply to children under 13.

2. Who this Policy covers

• Visitors to the SURIX web application.
• People who book a demo or submit an enrolment form, and their parents/guardians.
• Enrolled Students and their parents/guardians.
• Trainers and Student Coordinators, for platform use (employment records may be covered separately).
• It does not cover third-party sites or services we link to, which have their own policies.

3. Information you give us

• Name, date of birth (to confirm age and minor status), email, phone/WhatsApp number, country, city and time zone.
• Parent/guardian name, relationship, email and phone, and their consent record, for Students under 18.
• Course, level, learning goals and preferred days and times.
• Messages you send through Help Centre, chats, Community and Music Feed.
• Practice recordings, Sing Along takes, Collab Studio layers and submissions you choose to save.
• Event registrations, such as Open Stage performance details.
• Profile photos you or SURIX upload.

4. Information created while you learn

• Your permanent Student ID, enrolment, class schedule, attendance and reschedule history.
• Lesson summaries, academic progress, assessments and certificates released by SURIX.
• Monthly tuition records: fee, amount received, reference and payment status (Super Admin only; you can see your own records).
• Raag Lab practice reviews you choose to keep. These store pitch results only, never audio.

5. Microphone, camera and audio

• Pitch detection in Raag Lab, tuners and Scales & Chords runs inside your browser. Audio is not uploaded unless you choose to record and save a take.
• Saved recordings are kept in private storage and shown only to you, your assigned Trainer and authorised SURIX staff, through short-lived secure links.
• Unfinished Sing Along drafts and your recording delay setting stay on your own device until you save or clear them.
• Live classes and events stream through Agora. Classes may be recorded for child safety and quality checks.
• We never use a recording, photo or testimonial for marketing without separate, explicit consent, and you can opt out at any time without affecting your classes.

6. Information collected automatically

• Device, browser and operating system type, IP address and approximate country.
• Sign-in session data needed to keep you securely signed in.
• Your country is used only to show the right currency and to check group-class eligibility, never to track your movements.

7. Information from others

• Payment partners (for example Razorpay) confirm payment status, amount, currency and transaction reference. We never receive your full card, CVV or banking credentials.
• Agora provides technical connection data for live sessions.
• If you message us on social media, we may receive your public profile name.

8. Children's data

• We collect only what is needed to teach a child safely.
• For Students under 18, a parent or legal guardian must give verifiable consent before we process the child's data, including at demo booking and enrolment.
• We do not track, profile or show targeted advertising to children.
• For US children under 13, we follow COPPA: parents may review, correct or delete their child's data and refuse further collection.
• Member chats and Community posts may be monitored by SURIX staff to protect minors.
• Parents may contact us at privacy@surixmusicacademy.com at any time.

9. How we use your information

• To book demos, review applications, create accounts and assign Trainers and groups.
• To schedule classes, send reminders and run live classes and events.
• To record attendance, progress, certificates and achievements.
• To manage monthly tuition and show payment reminders.
• To provide Library resources and practice tools for your course and level.
• To answer Help Centre requests and keep the platform safe and secure.
• To meet legal, tax and accounting duties and prevent fraud.
• To send marketing or use performances in promotion, only with your consent.

10. Consent and legal basis

• In India we rely mainly on your consent, given by a clear action such as ticking a box. You may withdraw it at any time; this does not affect processing already done.
• Under UK/EU GDPR we rely on: contract (to deliver your classes), consent (marketing and promotional use), legitimate interests (security, fraud prevention, improvement) and legal obligation (tax and accounting).
• To withdraw consent, email privacy@surixmusicacademy.com. Some Services, such as live classes, cannot be provided without basic contact details.

11. Who we share information with

We never sell personal data. We share it only as needed with:

• Your assigned Trainer, Student Coordinators and the Super Admin, on a need-to-know basis.
• Agora, for live video classes and events.
• Our secure cloud hosting, database and file storage providers, which run the web application.
• Zoho Mail, for sign-in, reminder and notification emails from notifications@surixmusicacademy.com.
• WhatsApp Business and SMS providers, for service messages.
• Payment partners such as Razorpay.
• Authorities, where required by law or court order.
• A successor business, in a merger or restructuring, with equal protection.
• Other members see only limited musical details you share in Community, Music Feed or events, such as your name, photo and course.

12. Cookies and browser storage

• We use essential cookies and browser storage to keep you signed in, remember that you accepted these terms, save your tool settings and keep unsaved drafts on your device.
• We do not place advertising trackers inside the Student, Trainer or staff dashboards.
• You can clear cookies and storage in your browser settings, but some features may then stop working and you may be asked to accept the terms again.

13. Your rights

• India (DPDP Act): access a summary of your data, correct or erase it, raise a grievance, nominate someone to act for you, and withdraw consent. You may also approach the Data Protection Board of India.
• UK/EU (GDPR): also data portability, objection to processing, restriction of processing, and complaint to your local supervisory authority, such as the UK ICO.
• To use these rights, email privacy@surixmusicacademy.com. We respond within the time required by law.

14. How long we keep data

• We keep data while you are enrolled and for a reasonable period afterwards for support and records.
• Tax, payment and accounting records are kept as Indian law requires.
• On a valid erasure request we delete or anonymise your personal data, except where we must keep it by law. Permanent ID numbers are never reissued to anyone else.

15. Security

• Role-based access so each person sees only what their role allows.
• Encrypted connections, private file storage and short-lived secure links for recordings and photos.
• Audit records for sensitive changes such as attendance corrections and account actions.
• No system is completely secure. If a breach affects you, we will notify you and the authorities within the time required by law.

16. International transfers

• Some providers may store data outside India. We follow the DPDP Act's transfer rules and will update this Policy if any country is restricted.
• Data of UK, EU and other international Students is processed in India and by our providers. We take reasonable steps to protect it and are formalising safeguards such as Standard Contractual Clauses as we grow.

17. Changes to this Policy

We may update this Policy as our Services or the law change. The updated date will be shown here, material changes will be notified, and fresh consent will be requested where required.

18. Governing law

This Policy is governed by the laws of India. The courts at Chennai, Tamil Nadu have exclusive jurisdiction, without removing mandatory rights under your local law.

19. Grievance details

• Email: privacy@surixmusicacademy.com
• Phone: +91-7708002210