Skip to content
Kirsten Brents Music Studio

Privacy Policy

Last updated: October 30, 2026

Kirsten Brents Music Studio operates www.kbrentsmusicstudio.com and the Studio Portal at portal.kbrentsmusicstudio.com. This policy covers our website, inquiry and booking forms, and studio account, scheduling and billing services.

Information we collect and how we use it

  • Contact and enrollment: student and parent or guardian names, email addresses, phone numbers, addresses, lesson interests, availability and messages you submit. We use these to answer inquiries, arrange lessons, enroll students and communicate with families.
  • Studio records: schedules, attendance, lesson notes, make-up credits, tuition charges, invoices and payment history. We use these to teach and administer lessons, calculate balances and send lesson and billing reminders.
  • Accounts and security: account identifiers, sign-in records, password hashes if you set a password, and two-step authentication settings. We use these to authenticate users, enforce permissions and protect accounts.
  • Technical information: IP addresses, browser and device information, request logs, and form source or campaign information when provided. We use these to operate the services, prevent abuse, troubleshoot problems and understand how families find our forms.

Google sign-in and Google user data

Google sign-in is an optional way to access an existing family portal account. We request only openid, email and profile permissions. Google provides an account identifier, your email address and its verification status, and basic profile claims such as your name. We use the identifier and verified email to find or link your studio account and authenticate you. Staff sign-in uses the studio's identity service, Keycloak, with Google Workspace to verify staff identity and access.

The portal stores the Google provider identifier and its link to your studio account in our account database, along with the account's email and display name. Sign-in claims are processed during authentication and temporary protected sign-in cookies may contain identity information. We do not retain Google access or refresh tokens or call Google APIs after sign-in. We do not request access to Gmail messages, Google Calendar events, Drive files or Google contacts. We never receive your Google password.

Google user data is used only for authentication, account linking and security. We do not sell it, use it for advertising, or use it to develop or train artificial intelligence or machine learning models. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Sharing and service providers

Authorized studio staff access information needed for teaching, scheduling, billing and account support, subject to their permissions. Providers that host and secure our services, maintain our database and backups, or deliver messages process information needed for those services. These include Azure for the public website, Cloudflare for portal delivery and security, Supabase for the portal database, and our email and messaging services. Google processes sign-in information when you choose Google sign-in; staff authentication also passes through Keycloak.

Helcim handles online payments. Details entered in its hosted payment form go to the processor; the portal keeps transaction references, status and, when applicable, saved-payment tokens rather than full card numbers or bank credentials. Forms still hosted by My Music Staff send the information you enter to that provider for inquiries or enrollment. Google Maps embeds may receive technical information such as your IP address when loaded. Each provider's own privacy policy also applies.

We do not sell personal information or share Google user data for advertising. We disclose information when you direct us to, when needed to provide the services described here, or when required by law or necessary to address fraud, abuse or threats to safety.

Storage and protection

Portal account and studio records are stored in our database and backups. We protect data in transit with HTTPS, restrict staff access by role and privilege, require two-step verification for staff, and use protected authentication cookies and encrypted backups. Portal passwords are hashed. No internet service or storage system can guarantee absolute security.

Retention and deletion

We retain personal information while needed to provide lessons and account services, maintain accurate financial records, resolve disputes and meet legal obligations. Google account links are retained until unlinked or the account is deleted. When information is no longer needed, we delete or anonymize it; backup copies remain until those backups expire under the backup rotation. Financial or other records we must retain may remain after account closure, with access restricted.

To request a copy, correction or deletion of your information or Google account link, email kirsten.brents@kbrentsmusicstudio.com. We may verify your identity first and will explain any records we must retain.

Your choices and disconnecting Google

You can browse the studio website and portal introduction without signing in. In your portal account settings, set a password before unlinking Google if it is your only sign-in method. You can also revoke the connection in your Google Account connections. Disconnecting Google stops its use for future sign-in; it does not automatically delete lesson or billing records. Contact us to request deletion of those records.

Cookies and browser storage

The portal uses cookies for sign-in sessions, external sign-in verification and security, and browser storage for preferences such as appearance. Blocking required cookies can prevent sign-in. Embedded forms, maps and payment services may use their own cookies or storage.

Students and children

Parents or guardians should submit inquiries and manage enrollment for children. Student information is used for music instruction and studio administration. A parent or guardian may contact us to review, correct or request deletion of their child's information.

Changes and contact

We will post changes here and update the date above. If our use of Google user data changes, we will update this policy, provide notice and obtain consent when required before using data for a new purpose. For privacy questions, contact Kirsten Brents Music Studio at kirsten.brents@kbrentsmusicstudio.com or (832) 760-4011.