Open Up Music is the Registered Charity (no. 1167028) behind the National Open Youth Orchestra, Open Orchestras and the Clarion® accessible instrument. The National Open Youth Orchestra (NOYO) is also a working name for Open Up Music.
In this document, when you see the words ‘we’, ‘us’ or ‘our’, they refer to Open Up Music, the National Open Youth Orchestra or Open Orchestras.
In addition to NOYO and Open Orchestras, Open Up Music is involved in research and development of the Clarion and related software.
We respect your right to privacy on- and offline and understand that you want to keep control of your personal information. That’s why we are committed to protecting any information you share with us in compliance with the General Data Protection Regulation (GDPR) and Data Protection Act 2018 (DPA 2018).
The contact person for this policy is:
Helen Stevens - Head of Operations - helen@openupmusic.org
Privacy policy for the Clarion app
Why we collect this information
Your control over data related to you
Privacy policy for our websites
Personal data - information we collect
Children and young people’s data - safeguarding and consent
Our legal bases for using your information
Sending your information to other countries
Disclosure of information - personal data sharing
Your acceptance of this policy
Any updates we may make to this policy in the future will be published on this page.
Last reviewed: July 2025
Last updated: July 2024
Policy first created: June 2018
The Clarion app part of Open Orchestras and Clarion Education is available via the App Store for iPads and the Microsoft Store for Windows devices.
The app is created and operated by Open Up Music. We comply with current data regulations within the UK including GDPR.
The app connects to our API Server for Open Orchestras and Clarion Education sign-in, sign-out and for downloading and uploading content (e.g. patterns, sounds). The app also connects to our CDN Server for downloading media (e.g. images, sounds).
When the app connects to our servers, we collect certain data. This document outlines what data is collected and how it is used.
The purpose of this policy is to explain how we collect and manage your personal data, as a user of our websites:
The overall purpose of our websites is to provide information about the activities of Open Up Music.
In this Privacy Policy we also explain how we manage the personal and sensitive data of individuals who engage with Open Up Music activities.
‘Personal data’ means information that identifies you as a person. This can include your name, address, email address, mobile number and other information that relates to you, as well as IP addresses and other technical information.
In some cases, it can include ‘sensitive data’, meaning information that may include data about physical or mental health or condition, age or ethnicity.
Through our website we collect the following personal information:
Audience group | Categories of personal data | Purpose for processing | Legal basis for processing |
Website user | Website analytics: IP address, geographical location, browser type, operating system, length of visit | To measure the effectiveness of our website and inform improvements to the website | Legitimate interest: to communicate our core services online |
Newsletter Subscriber | First name, surname, email address | To respond to and support your enquiry | Legitimate interest: to communicate with existing - and potential - clients |
Fundraising information Subscriber | First name, surname, email address | To respond to and support your enquiry | Legitimate interest: to communicate with existing - and potential - clients |
Contact enquiry | First name, surname, email address, contact number | To respond to and support your enquiry | Legitimate interest: to communicate with existing - and potential - clients |
Through our website we collect the following personal information:
Audience group | Categories of personal data | Purpose for processing | Legal basis for processing |
Applicants to NOYO and Open Orchestras | Application information: the categories of information are captured in specific application forms | To enable individuals to apply for Open Up Music programmes | Legitimate interest: to engage with prospective musicians and partners |
Within the context of processing invoices and payments, or for tax purposes, we may also collect financial information (e.g. bank account or credit card information).
In some instances, we will have received information about you from third parties for a specific purpose. This will only happen if you have given them permission to share your information.
We are committed to ensuring equality to all, irrespective of gender, disability, ethnicity, marriage, sexual orientation, religion or belief, or social-economic background.
To do this, we may need to monitor the data trends of those applying to work with us or to participate in our programmes.
Sensitive personal information e.g. ethnicity, gender or disability is anonymised before being used for equal opportunities monitoring and reporting.
Sensitive data will only be used for other purposes if it is essential for us to deliver our service to you effectively, and if we have lawful bases to do so, as outlined in this Privacy Policy.
We aim to collect the minimum of personal information needed to provide an effective service.
We will never sell, distribute or intentionally make your personal information public.
We have systems in place to safeguard your personal data. We have implemented appropriate technical and organisational security measures to protect the data you share with us from loss and preserve its security and confidentiality.
Access to written and electronic personal data is restricted and has a level of security, e.g. is password protected and encrypted depending on the sensitivity of the data.
We collect data about children and young people from age 8 up to 25 only if we have a lawful basis and will choose the basis that provides the highest level of protection for them.
We will not knowingly collect or use the personal data of children under 16 through them browsing our websites. Personal data about children under 16 is collected through their parent or guardian.
We collect and process information about you only where we have legal bases for doing so. The legal bases will depend on the individual services you use and how you use them.
In some cases, we are processing your personal information because you have given us consent to do so.
Information will be presented in a clear way and we will ensure that when seeking consent from young people, they are supported through the decision-making process by us and/or their parents and guardians where legitimate.
In cases where you have consented to our use of your personal information for a specific purpose, you have the right to change your mind at any time. To withdraw consent, please email info@openupmusic.org.
Media consent will be sought prior to any use of media we gather including, but not limited to, video, audio, photography etc. Material will only be used for as long as consent has been given, and in respect of the consent given.
Parental/guardian permission is obtained prior to filming or photographing children under 16 and young people up to the age of 25 who lack the capacity to make informed decisions themselves.
If you have consented to us contacting you with our news and information, we will give you the chance to opt out of receiving them every time we send them.
We use your information when this is necessary for our legitimate interests, except when your interests and fundamental rights override our legitimate interests.
Specifically, we have a legitimate interest in:
When relying on ‘legitimate interests’, we take responsibility for identifying the risks and consequences of the processing and put appropriate safeguards in place.
Where we are using your information because we have a legitimate interest to do so, you have the right to object to that use - but in some cases, this may mean you are no longer able to access our services.
We will need to use your information in order to perform our obligations under a contract with you. For example, we need your name and contact details so that we can send you tickets for a performance that you want to attend.
We may also use your personal data to enforce our terms and conditions and payment procedures and collection.
We need to process your data to comply with a legal obligation, including our health and safety obligations.
We may disclose your personal data if required to do so by a law enforcement court or government agency or in the good faith that such action is necessary to comply with a legal obligation, or to protect ourselves against legal liability.
We may use your personal information to act in urgent circumstances to protect your or someone else’s personal safety.
If we intend to use any personal data in any manner which is not consistent with this Privacy Policy, you will be informed prior to or at the time of which we collect the data; or we will obtain your consent prior to such use.
All our third-party data processors have been carefully chosen as service suppliers who also practise responsible data handling. We believe that each has in place appropriate protections to ensure the security of the data we store or process with them and have clear policies for how they treat that data. But if in doubt, you should review their individual Privacy Policies.
Processor | Purpose | Privacy information |
Basecamp | Project management | |
Beacon | CRM system | |
Gmass | Mail merge | gmass.co/blog/gmass-privacy-information-what-data-does-our-server-store |
Website analytics, Gmail, data storage | ||
Learnworlds | Online training | |
Mailchimp | Email marketing | |
Microsoft | Email services | |
Raisely | CRM system | |
Stripe | Payment services | |
Wix | Website | |
Wordpress | Website |
We may send your information to countries which do not have the same level of protection for personal information as there is in the UK. For example, we may:
Like many organisations, we sometimes engage other people or companies to perform certain charity-related functions such as training, ticketing fulfilment, maintaining databases and processing payments - or to work with us as delivery partners.
We may provide them with information, including personal data, in connection with their performance of such functions. These organisations are only allowed to use your personal information for the specific purpose they have been contracted for.
When sharing your data with contractors or delivery partners, a GDPR-compliant contract in writing will be in place between us and them, which clearly sets out the subject matter of the processing and its duration - as well as the nature and purposes of processing, the types of personal data, any special categories of data, and the obligations and rights of both parties.
By using our websites, social media pages; enquiring or applying for an audition or to join our programme; or by contacting us in relation to our activity or providing your information voluntarily, you consent to our collection and use of the information you provide in the way(s) set out in this policy. If you do not agree to this policy please do not use our sites, social media pages or services.
This privacy policy applies only to Open Up Music, The National Open Youth Orchestra and Open Orchestras. The Open Up Music, National Open Youth Orchestra and Open Orchestras websites may contain links to third party websites neither operated nor controlled by us. Links to third party websites do not imply that we endorse or have reviewed their privacy policies.
If you are visiting our website from outside the UK, please be aware that you are sending information, including personal data, to the UK. We will hold and process your personal data and non-personal data in accordance with privacy laws in the UK and this privacy policy.
We may retain your personal data for as long as you participate in our programmes or you agree to such retention. We may also retain personal data and non-personal data for an additional period as permitted or required by law.
When we delete your personal data, it may still exist in backups or archives, and in the case of media activity, elsewhere on the internet and on social media channels when you consented to sharing (e.g. in online news articles).
A breach is considered any loss, alteration, unauthorised disclosure of, or access to, personal data.
We are committed to disclosing any personal data breaches that might adversely affect your rights and freedoms without undue delay so that you can take appropriate action. Any notifiable breaches will also be reported to the UK’s Information Commissioner’s Office within 72 hours. This includes breaches affecting the third-party services identified in this Privacy Policy, where personal data is being held on our behalf.
Cookies are temporary files stored in web browsers by a website to help track usage and enable services that rely on a persistent identity. You can control which cookies to accept, block and remove at any time by adjusting browser settings.
We may use cookies to enhance the performance and functionality of our websites e.g. for the playback of embedded YouTube videos. Without them, certain functionality may become unavailable.
We do not use the information gathered through cookies to advertise to you.
Most web browsers allow some control of most cookies through the browser settings.
To find out more about cookies, including how to see what cookies have been set, visit aboutcookies.org or allaboutcookies.org.
Find out how to manage cookies on popular browsers:
To find information relating to other browsers, visit the browser developer's website.
To opt out of being tracked by Google Analytics across all websites, visit tools.google.com/dlpage/gaoptout.
The General Data Protection Regulation (2018) gives you the right to know what personal data we hold, to have it updated if it is inaccurate, or removed entirely if you no longer consent to our use of it.
We will endeavour to respond to any such requests within one month confirming receipt and outlining what follow-up actions will be taken and when.
If you have any questions about our Privacy Policy, you can contact us:
By phone: 0117 235 0362
By email: info@openupmusic.org
By post: Open Up Music
Streamline
436-441 Paintworks
Bristol
BS4 3AS