Privacy Policy

1. Introduction

A & A Music & Art Academy (“we,” “us,” or “our”), located at 1975 East Devon Avenue, Hanover Park, IL 60133, operates the website https://www.aamusicacademy.com (“Site”). This Privacy Policy explains how we collect, use, disclose, and protect personal information about visitors and students (“you”) in compliance with the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other applicable US state privacy laws.

By using our Site, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please discontinue use of the Site.

2. Personal Information We Collect

We collect personal information in the following categories:

3. How We Use Personal Information

We use the personal information we collect to:

• Process lesson enrollments and coordinate schedules
• Respond to inquiries submitted through our contact form
• Process payments via Stripe for lesson packages
• Send enrollment confirmation and scheduling emails via EmailJS
• Analyze Site usage to improve content, navigation, and user experience (Analytics cookies)
• Display relevant advertisements and measure ad performance (Targeting cookies — only with consent)
• Enable lesson booking functionality via Teachworks
• Comply with applicable legal obligations

4. Third-Party Services & Data Sharing

We work with the following third-party service providers. Each provider has its own privacy policy governing how they use data.

We do not sell your personal information to third parties for monetary consideration. We may share identifiers and internet activity with advertising platforms (Google Ads) for the purpose of targeted advertising, which may constitute “sharing” under the CCPA/CPRA. You may opt out at any time — see Section 6.

5. Cookies & Tracking Technologies

We use cookies and similar technologies. We implement Google Consent Mode v2: all analytics and advertising cookies are set to denied by default until you grant consent. Your consent choices are stored in your browser's local storage (not in a cookie) and applied on every subsequent visit.

We also honor the Global Privacy Control (GPC) browser signal. If your browser sends a GPC signal, targeting and marketing cookies are automatically blocked, regardless of any prior consent choice.

You may change your cookie preferences at any time by clicking “Manage Preferences” in the consent banner or the “Do Not Sell or Share My Personal Info” link in the footer.

6. Your California Privacy Rights (CCPA / CPRA)

California residents have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• 1
  Right to Know — You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, purposes, and the categories of third parties with whom we share it.
• 2
  Right to Delete — You may request deletion of personal information we have collected, subject to certain exceptions (e.g., completing a transaction, legal obligations).
• 3
  Right to Correct — You may request that we correct inaccurate personal information we hold about you.
• 4
  Right to Opt-Out of Sale / Sharing — You may direct us to stop selling or sharing your personal information with third parties for cross-context behavioral advertising. See the opt-out options below.
• 5
  Right to Limit Use of Sensitive Personal Information — You may request that we limit the use and disclosure of sensitive personal information (such as precise geolocation or financial account details) to the purposes necessary to provide our services.
• 6
  Right to Non-Discrimination — We will not discriminate against you for exercising any of your privacy rights. You will receive the same quality of service regardless of your choices.

7. Do Not Sell or Share My Personal Information

We may share certain identifiers and internet activity information with advertising platforms (Google Ads) for targeted advertising, which may constitute a “sale” or “sharing” of personal information under California law. You have the right to opt out.

We will process opt-out requests within 15 business days. We also honor the Global Privacy Control (GPC) browser signal as an opt-out of sale/sharing.

8. Other US State Privacy Rights

Residents of the following states have rights under their respective state privacy laws, which are substantially similar to the California rights described in Section 6:

• Virginia (VCDPA) — Right to access, correct, delete, and opt out of sale or targeted advertising.
• Colorado (CPA) — Right to access, correct, delete, data portability, and opt out of targeted advertising and profiling.
• Connecticut (CTDPA) — Right to access, correct, delete, data portability, and opt out of sale and targeted advertising.
• Texas (TDPSA) — Right to know, access, correct, delete, and opt out of sale, targeted advertising, or profiling.

To exercise any of these rights, please contact us at info@aamusicacademy.com or call 630-837-7484. We will respond within 45 days (with a possible 45-day extension upon notice).

9. California Shine the Light (Cal. Civ. Code §1798.83)

California residents may request information about our disclosures of personal information to third parties for direct marketing purposes under California Civil Code Section 1798.83. We do not disclose personal information to third parties for their direct marketing purposes. To make a Shine the Light request, please contact us at info@aamusicacademy.com.

10. Children's Privacy (COPPA)

This Site is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at info@aamusicacademy.com and we will promptly delete it.

Parents or guardians who wish to enroll children under 13 in our classes must submit a parent/guardian consent form. By enrolling a child under 13, the parent or guardian expressly consents to the collection of information described in this Policy.

11. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Payment card data is processed exclusively by Stripe, a PCI-DSS Level 1 certified payment processor. We do not store credit card numbers on our servers.

No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and will notify you of any data breach as required by applicable law.

12. How to Submit a Privacy Request

To exercise your privacy rights, submit a request using any of the following methods:

• Email: info@aamusicacademy.com — please include “Privacy Request” in the subject line
• Phone: 630-837-7484
• Mail: A & A Music & Art Academy, Attn: Privacy Request, 1975 East Devon Avenue, Hanover Park, IL 60133

We will verify your identity before processing requests. We aim to respond within 45 days. For California residents, we will respond within 45 days with up to a 90-day extension upon notice. We will not charge a fee unless your request is excessive or repetitive.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. The “Last Updated” date at the top of this page reflects the most recent revision. Material changes will be announced via a notice on our Site. Continued use of the Site after changes become effective constitutes acceptance of the revised Policy.

14. Contact Us

For privacy questions or to exercise your rights, contact us at:

• A & A Music & Art Academy
• 1975 East Devon Avenue, Hanover Park, IL 60133
• Email: info@aamusicacademy.com
• Phone: 630-837-7484