Privacy Notice

For the websites pibroch.net, doublepipes.info,  luigilai.com, and lotos-lab.com.

This privacy notice tells you what to expect us to do with your personal information.

• Contact details
  
• What information we collect, use, and why
• Lawful bases and data protection rights
• Where we get personal information from
• How long we keep information
• Who we share information with
• Website cookies
• Security
• How to complain
• Changes to this Privacy Notice

Contact details

Telephone:  +44 78 1000 1377

Email:  barnaby@lotos-lab.com

What information we collect, use, and why

We collect or use the following information to provide services (e.g. workshops and digital learning resources) and goods (e.g. musical instruments, accessories, and books), including delivery:

• Names and contact details
• Addresses
• Date of birth
• Purchase or account history
• Payment details (including card or bank information for transfers and direct debits)
• Health information (including dietary requirements, allergies and health conditions)
• Audio and video recordings
• Information relating to feedback, complaints, or compliments

We collect or use the following information for the operation of customer accounts and service updates or marketing purposes:

• Names and contact details
• Addresses
• Account information, including registration details
• Marketing preferences
• Location data
• Recorded images, such as photos or videos
• Records of consent, where appropriate

We collect or use the following information to comply with legal requirements:

• Name
• Contact information
• Financial transaction information
• Health and safety information
• Health information

We collect or use the following personal information for dealing with queries, complaints or claims:

• Names and contact details
• Payment details
• Purchase or service history
• Customer or client accounts and records
• Financial transaction information
• Correspondence
• Health information

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

• Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here.
• Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here.
• Your right to erasure – You have the right to ask us to delete your personal information. You can read more about this right here.
• Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information. You can read more about this right here.
• Your right to object to processing – You have the right to object to the processing of your personal data. You can read more about this right here.
• Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here.
• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. You can read more about this right here.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us by email to barnaby@lotos-lab.com.

Our lawful bases for the collection and use of your data

Our lawful basis for collecting or using personal information to provide services and goods is legitimate interest. We’re collecting or using your information because it benefits you, our organization, or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

• Service Provision: To effectively deliver the services or goods that customers request. 
• Personalization: To tailor services, offers, and communications to better meet the needs and preferences of individuals. 
• Customer Relationship Management: To maintain and manage relationships with customers, including handling queries, processing requests, and providing support. This can also involve following up on feedback or resolving issues. 
• Marketing and Communication: To send marketing emails or newsletters that may be of interest to individuals, based on their past interactions or expressed preferences. This often involves informing customers about new products, services, or events. 
• Legal and Regulatory Compliance: To comply with legal obligations, such as tax laws or regulations related to consumer protection and data security. 
• Business Operations: To ensure the smooth operation of business activities, including performances, workshops, shipping goods, billing, and customer service. 
• Improvement and Development: To analyze and improve the quality of services and products. For example, feedback and location data can help in refining offerings and enhancing customer experiences. 
• Safety and Well-being: Ensuring the safety and well-being of participants is a primary concern. Health data can help in managing any medical needs or emergencies that may arise. For instance, knowing about allergies, chronic conditions, or medications can enable tutors to respond appropriately in case of a health issue. 
• Accommodation and Dietary Requirements: Health data can be used to accommodate specific needs, such as dietary restrictions due to medical conditions or physical accommodations for disabilities. This ensures that participants are provided with appropriate and safe conditions during a workshop or training course. 
• Emergency Preparedness: In case of a medical emergency, having access to health data can be crucial for quick and effective intervention. This might include contact details for emergency services or specific medical information needed for immediate care. 
• Program Design and Customization: For some courses, especially those involving physical activity or the use of tools, understanding participants’ health conditions can help tailor the program to be appropriate and safe for everyone involved. 
• Legal and Insurance Requirements: In some cases, collecting health data may be necessary to comply with insurance requirements or other legal obligations related to health and safety. 
• Risk Management: Identifying and managing potential risks associated with health conditions can help in minimizing incidents and ensuring that appropriate measures are in place for participants’ safety.

Our lawful bases for collecting or using personal information for the operation of customer accounts and guarantees are:

• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organization or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
• Contractual Necessity: When customers create accounts, the processing of their personal data is necessary to fulfill the terms of the contract. This includes managing account details, processing orders, handling returns or claims, and providing customer support. 
• Consent: In cases where additional or optional data processing is involved. For instance, if a customer agrees to receive promotional materials or agrees to additional services related to their account.
• Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Our lawful basis for collecting or using personal information for service updates or marketing purposes is:

• Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Our lawful bases for collecting or using personal information for research or archiving purposes are:

• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
• Advancing Knowledge and Innovation: Research often aims to advance knowledge in various fields, improve products or services, and foster innovation. Collecting personal information can be essential for conducting studies that contribute to scientific, academic, or practical advancements. 
• Public Benefit: Research and archiving can serve the public good by contributing to policy development, public health, education, or other societal benefits. This can include understanding trends, solving complex problems, or preserving historical records. 
• Improving Services: For organizations that engage in research to enhance their offerings, collecting data helps in understanding user needs, preferences, and behaviors. This leads to better service design, more effective solutions, and improved customer satisfaction. 
• Historical and Cultural Preservation: Archiving personal information can be crucial for preserving historical records and cultural heritage. This includes maintaining records for future generations to access and study. 
• Compliance with Legal Obligations: In some cases, there may be legal requirements to retain certain types of data for research or archiving purposes. This includes compliance with regulations related to record-keeping or historical preservation. 
• Supporting Long-Term Studies: Some research projects span extended periods, requiring the retention of data for longitudinal studies. This helps in tracking changes over time and understanding long-term effects or trends.
• Transparency: Participants will be informed about the nature of the research or archiving and how their data will be used. Only the data necessary for the research or archiving purpose is collected and used.

Our lawful bases for collecting or using personal information for dealing with queries, complaints, or claims are:

• Contractual necessity – we have to collect or use the information so we can enter into or carry out a contract with you. Processing personal data may be necessary to address and resolve issues related to a product, contract, or service agreement. All of your data protection rights may apply except the right to object.
• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organization, or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
• Dealing with queries, complaints, or claims to manage and resolve these matters effectively. This includes maintaining good customer relationships, ensuring quality control, and improving services.

Where we get personal information from

• Directly from you

How long we keep information

Your personal information will be retained by Lotos Lab and its service providers in a secure environment, will be kept confidential, and will only be used in connection with the purposes for which it is submitted, or as otherwise explained in our Terms and Conditions, or as necessary for us to comply with our legal obligations.

The period for which we hold your data will differ depending on the type of information and the reason why we collected it.  For example, course registration forms will usually only be kept for a period of six months post course, whereas data relating to a financial transaction will be retained for a period of seven years, in line with the requirements of the UK government (HMRC).

Who we share information with

Others we share personal information with

• Organisations we need to share information with for safeguarding reasons
• Suppliers and service providers

Website cookies

Cookies are simple text files that typically contain two pieces of information: a site name and unique user ID. When you visit a site that uses cookies for the first time, a cookie is downloaded onto your computer. The next time you visit that site, your computer checks to see if it has a cookie that is relevant (that is, one containing the site name) and sends the information back to the site. The site then ’knows’ that you have been there before, and in some cases, tailors what pops up on screen to take account of that fact. As a rule, cookies will make your browsing experience better. However, you may prefer to disable cookies on this site and on others. The most effective way to do this is to disable cookies in your browser. We suggest consulting the Help section of your browser or taking a look at the About Cookies website which offers guidance for all modern browsers.

Security

Lotos Lab takes appropriate security measures to ensure that we keep your information secure, accurate and up to date, and that we only keep it for as long as is reasonable and necessary. We follow generally-accepted best practice industry standards to protect the personal information submitted to us during transmission and once we receive it.  However, the transmission of information over the internet is never completely secure, so while we do our best to protect personal information, we cannot guarantee the security of information transmitted to Lotos Lab’s websites.

How to complain

If you wish to lodge a complaint about Lotos Lab’s use of your data you can contact us at barnaby@lotos-lab.com. You have a right as an individual to refer your complaint to the ICO if you think that there is a problem with the way Lotos Lab is handling your data:

https://www.ico.org.uk/make-a-complaint

Changes to this Privacy Notice

We review this policy on a regular basis. This Privacy Notice was last reviewed on 17 September 2025