Privacy Policy

Effective date: 10-23-25

1) Who we are
Shedthemusic, LLC (“Shedthemusic”, “we”, “us”, “our”) provides curriculum and membership resources for educators.
Business address: 3234 Sunnyside Ave, Brookfield, IL 60513, USA.
Privacy contact: privacy@shedthemusic.net (or via the contact form on our website).

2) Scope
This policy explains what information we collect, how we use it, who we share it with, and your choices. It applies to our website, membership areas, support channels, and related services (together, the “Services”).

No student personal information: Our Services and purchasing flows are designed so that we do not collect or store personally identifiable information (PII) about students. Student access is provided using shared, generic usernames per school (see §7).

3) The data we collect (staff/admin & general users)
We collect the minimum information needed to run our Services and support schools:

  • Account & access data (educators/school staff): name, school email, role, school/organization, membership status, and login activity.

  • Support/communications: messages you send us, your contact details, and any files you voluntarily attach.

  • Order/billing (region-specific): see §9 for AU/NZ vs other regions.

  • Technical/usage data: IP address, device/browser type, pages viewed, timestamps, and similar event logs.

  • Cookies/analytics: essential cookies for site operation; limited analytics to understand service performance (see §8).

We do not intentionally collect sensitive categories (e.g., health, biometrics) and we do not sell personal information.

4) What we don’t collect (students)

  • No student accounts with PII.

  • No direct student identifiers (e.g., student names, personal emails, DOBs).

  • No student assessments, behavior, or well-being records.

5) Why we use information (lawful bases)

We process information to:

  • Provide, secure, and maintain the Services (performance of a contract/legitimate interests).

  • Manage educator memberships and authorize access (contract/legitimate interests).

  • Provide support, training, and service communications (contract/legitimate interests).

  • Comply with legal, tax, accounting, and security obligations (legal obligation).

  • Improve content and site performance (legitimate interests; see §8 for controls).

Where consent is required (e.g., non-essential cookies), we’ll request it and you may withdraw at any time.

6) How long we keep information

We retain data only as long as needed for the purposes above, or as required by law. When no longer needed, we delete or de-identify it according to our data retention practices. You can request deletion—see §12.

7) Student access model

To protect student privacy:

  • Shared, generic usernames are provided per school for student access to certain resources.

  • These credentials are administered by the school and do not contain student PII.

  • We do not require student email addresses, names, or other direct identifiers.

8) Cookies & analytics

  • We use essential cookies (security, session management, access control).

  • We may use limited analytics to understand site performance (e.g., page views, error rates).

  • You can control non-essential cookies via your browser settings and, where offered, cookie consent tools.

9) Payments & regional differences
Australia & New Zealand

  • All purchases in AU/NZ are handled exclusively by our authorised reseller, MusicEdNet.

  • Payment information for AU/NZ orders is collected and processed directly by MusicEdNet. Shedthemusic does not process or store payment card data for AU/NZ transactions.

  • For AU/NZ privacy and payment details, please refer to MusicEdNet’s terms and privacy notices.

Other regions

  • Where we accept direct card payments, processing is handled by Stripe. Card data is submitted directly to Stripe and is not stored on Shedthemusic systems.

10) Service providers, sub-processors & resellers
We use vetted third parties to help us operate the Services. We require appropriate data protection commitments and restrict use to our instructions.

Sub-processors (processors engaged by Shedthemusic)
ProviderPurposeData TypesLocation(s)Squarespace, Inc.Website hosting/CMS & operational analyticsSite usage metadata, contact form submissions from staff/admins (no student PII)US/EU (per provider)MemberSpace, Inc.Membership & access control for educator/staff accounts Staff/admin name, school email, role, subscription status (no student PII)US (per provider)Stripe, Inc. (outside AU/NZ only)Payment processing Billing contact info; tokenized card data (no full card stored by us)Global (per provider)

Resellers / Independent Controllers (not our processors)
OrganisationRegionPurposeData TypesNotesMusicEdNet Pty LtdAU/NZExclusive reseller & payment processor for AU/NZStaff/admin order & billing details necessary for quotes/invoices; no student PII shared by usActs as independent seller/controller for AU/NZ transactions. See MusicEdNet’s privacy terms.

We will update this section if our providers change in a way that materially affects your data.

11) International transfers
Your information may be processed in the United States and other locations where our providers or MusicEdNet (for AU/NZ transactions) operate. Where required, we implement appropriate safeguards for international transfers (e.g., Standard Contractual Clauses or equivalent mechanisms).

12) Your rights & choices
Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing.

  • To make a request, contact privacy@shedthemusic.net.

  • We may need to verify your identity and confirm school affiliation before acting on a request.

  • For AU/NZ transactions handled by MusicEdNet, please contact MusicEdNet directly for payment-related data requests.

You can also:

  • Opt out of non-essential cookies via your browser or consent tools.

  • Opt out of marketing emails at any time (unsubscribe link in each message).

13) Security
We use administrative, technical, and physical safeguards to protect information, including: secure hosting, access controls, MFA for privileged access, encryption in transit, data minimization, and regular security reviews with our service providers. No method of transmission or storage is 100% secure, but we work to protect information against unauthorized access, use, or disclosure.

14) Children’s privacy
Our Services are intended for use by educators and schools. We do not knowingly collect student PII, and we provide shared, generic student credentials managed by schools to avoid collecting student identifiers.

15) Changes to this policy
We may update this policy from time to time. If changes are material, we will provide a reasonable prior notice via the website or account notices. The “Effective date” at the top will reflect the latest version.

16) Contact us
Questions, requests, or complaints: privacy@shedthemusic.net or write to us at the address in §1.
For AU/NZ payment or reseller matters, contact MusicEdNet directly.