PRIVACY NOTICE
Last updated November 16, 2025
Thank you for choosing to be part of our community at The MusicSquared Foundation, Inc., doing business as The New York Performing Arts Academy (“The NYPAA,” “we,**” “us,” or “our”). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this Privacy Policy or our practices, please contact us at service@thenypaa.org.
When you visit www.thenypaa.org, or use any of our related services, programs, events, or communications (collectively, the “Services”), you trust us with your information. We take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, how it is protected, and what rights you have.
If you do not agree with any part of this Privacy Policy, please discontinue use of the Services.
TABLE OF CONTENTS
-
What Information Do We Collect?
-
How Do We Use Your Information?
-
Will Your Information Be Shared With Anyone?
3A. Text Messaging Privacy Policy (SMS) -
Do We Use Cookies and Other Tracking Technologies?
-
Do We Use Google Maps?
-
How Long Do We Keep Your Information?
-
How Do We Keep Your Information Safe?
-
What Are Your Privacy Rights?
-
Controls for Do-Not-Track Features
-
California Privacy Rights
-
Do We Make Updates to This Policy?
-
How Can You Contact Us?
-
How Can You Review, Update, or Delete Your Data?
1. WHAT INFORMATION DO WE COLLECT?
Information Automatically Collected
Some information—such as your IP address, device type, browser type, operating system, referring URLs, pages visited, and usage statistics—is collected automatically when you interact with the Services.
This information:
-
does not reveal your specific identity;
-
is used for security, analytics, and service improvements;
-
may be collected through cookies, log files, and similar tools.
We may also collect location information if you enable it.
2. HOW DO WE USE YOUR INFORMATION?
We process your information to support legitimate business interests, fulfill our contractual obligations, comply with legal requirements, or with your consent.
We may use personal information to:
-
Create and manage accounts
-
Send program, event, and administrative communications
-
Send marketing or promotional emails (you may opt out anytime)
-
Process enrollments, orders, and payments
-
Administer contests or promotions
-
Enable user-to-user communication
-
Improve the Services, conduct analytics, and monitor usage trends
-
Protect against fraud, abuse, and security threats
-
Comply with legal obligations or respond to legal requests
-
Provide customer support and respond to inquiries
We may also use de-identified or aggregated data for research and analysis.
3. WILL YOUR INFORMATION BE SHARED WITH ANYONE?
We share information only when necessary and only under lawful bases, including:
-
Consent – you have given explicit permission
-
Legitimate Interests – necessary for business operations
-
Performance of a Contract
-
Legal Obligations – subpoenas, investigations, government requests
-
Vital Interests – to prevent harm or illegal activity
We may share your information with:
-
Service providers (payment processors, hosting, analytics, email/SMS delivery, customer support tools)
-
Business partners offering relevant services
-
Third-party advertisers (non-identifying data only)
-
Successor organizations in the event of a merger, acquisition, or restructuring
We do not sell your personal information to third parties.
3A. TEXT MESSAGING PRIVACY POLICY (SMS)
(New section added for compliance)
When you opt in to receive SMS/text messages from The NYPAA, we collect your mobile number and related consent solely for service-related communications such as appointment reminders, class updates, enrollment notifications, and account alerts.
We protect your SMS data as follows:
-
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
-
All categories of information otherwise shared under this Privacy Policy exclude SMS opt-in data and consent.
-
Messaging data is used only to send messages through our SMS service providers.
-
Providers may process your number exclusively to transmit SMS messages—not for their own use.
Opting Out of SMS Messages
You may remove yourself from future SMS communications at any time by:
-
Replying STOP
-
Emailing service@thenypaa.org
Once you opt out, you will no longer receive SMS messages unless you opt in again.
4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
Yes. We may use cookies, pixels, tags, and similar tools to:
-
Improve website functionality
-
Personalize user experience
-
Track analytics
-
Enable advertising features
You may decline cookies through your browser settings. Some website features may not function properly if cookies are disabled.
5. DO WE USE GOOGLE MAPS?
Yes. We use Google Maps APIs to provide location-based information or mapping features.
Your use of these features is subject to Google’s Privacy Policy and Terms of Service.
6. HOW LONG DO WE KEEP YOUR INFORMATION?
We retain personal information only as long as necessary to:
-
fulfill the purposes described in this Privacy Policy, or
-
comply with legal, tax, and accounting requirements.
Inactive account information may be retained for up to two years unless otherwise required by law.
When no longer needed, information is securely deleted or anonymized.
7. HOW DO WE KEEP YOUR INFORMATION SAFE?
We implement administrative, technical, and physical safeguards designed to protect your information. These include encryption, access controls, secured servers, and monitoring.
However, no method of transmission over the internet is 100% secure. Use the Services at your own risk and always within a secure environment.
8. WHAT ARE YOUR PRIVACY RIGHTS?
You have the right to:
-
Access, review, or update your account information
-
Request deletion of your account
-
Opt out of marketing communications
-
Restrict certain processing activities
-
File a complaint if you believe your rights are violated (EEA residents only)
To exercise your rights, contact service@thenypaa.org.
9. CONTROLS FOR DO-NOT-TRACK FEATURES
Most browsers include a Do-Not-Track (DNT) setting. Because no uniform standard exists, we currently do not respond to DNT signals.
If standards become legally required, we will update this Privacy Policy accordingly.
10. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA & “SHINE THE LIGHT”)
California residents may request:
-
Categories of personal information disclosed for marketing purposes
-
The identity of third parties receiving such information
-
Removal of publicly posted personal content (for minors with registered accounts)
Submit requests to service@thenypaa.org.
11. DO WE MAKE UPDATES TO THIS POLICY?
Yes. We may update this Privacy Policy to remain compliant with laws and best practices.
Changes are effective immediately upon posting the updated “Last Updated” date.
We encourage you to review this policy regularly.
12. HOW CAN YOU CONTACT US?
Email: dpo@thenypaa.com
Phone: 212-932-3000
Address:
The MusicSquared Foundation, Inc.
1441 Broadway, Suite 3085
New York, NY 10018
United States
13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
To request review, correction, or deletion of your personal information, submit a request at the link provided on our website or email us at service@thenypaa.org.
We will respond within 30 days or as required by law.
