Last updated: 19 August 2026

​

This Privacy Policy explains how Merce Font, SLU, operating through the Merce Font, MFAcademy and MFCommunity brands (“we”, “us” or “our”), collects, uses, shares, stores and protects personal data when you visit www.mercefont.com or use our related services.

These services include member accounts, memberships, courses and educational content, individual and group lessons, lesson replays, events, community features, store purchases, contact forms and email communications.

1. WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?

​

The data controller is:

Merce Font, SLU
Registered address: Maria Pla 31, AD500 Andorra la Vella, Principality of Andorra
Andorran Tax Registration Number (NRT): L-722335-R
Telephone: +376 655 596
Email: contact@mercefont.com
Website: www.mercefont.com
Jurisdiction: Principality of Andorra

​

We process personal data in accordance with Andorran Law 29/2021 of 28 October, the Qualified Law on Personal Data Protection (LQPD), its implementing regulations, including Decree 391/2022, and, where applicable, the EU General Data Protection Regulation (GDPR).

For any privacy-related question or request, contact us at contact@mercefont.com.

2. PERSONAL DATA WE COLLECT

​

Depending on how you use our website and services, we may collect the following categories of personal data.

Information you provide directly

​

• Identity and contact information, such as your name, email address, country, billing address, telephone number and, where applicable, the details of a parent or legal guardian.

• Account information, such as your member profile, account identifiers, login information handled through Wix, membership status, preferences and communication settings.

• Transaction and billing information, such as the service purchased, amount, currency, payment status, transaction reference, billing details, refunds and invoices. Full payment-card details are processed by our payment providers and are not stored by us.

• Lesson and learning information, such as bookings, attendance, lesson preferences, assignments, practice notes, feedback, progress information, submitted videos or files, and lesson or event replays.

• Audio-visual information, such as your image, voice, screen, chat messages or musical performance when a lesson, event or feedback submission is recorded.

• Community content, such as profile information, posts, comments, questions, reactions and material you choose to share with teachers or other members.

• Communications, including emails, support requests, contact-form submissions, survey responses and other correspondence.

• Marketing and cookie preferences, including whether you have subscribed to promotional communications or accepted optional cookies.

 

Information collected automatically

When you use the website, we and our service providers may automatically collect technical and usage information, such as your IP address, approximate location derived from your IP address, browser and device type, operating system, referring page, pages viewed, date and time of access, session information, interactions, security logs and cookie identifiers.

​

Information received from other sources

We may receive limited information from payment providers, assigned teachers, lesson or event platforms, and other service providers. For example, we may receive payment confirmation, booking status, attendance information or updated account details.

​

We do not intentionally request special-category or highly sensitive personal data. If you voluntarily provide health, accessibility or similar information so that we can adapt a service, we will use it only where necessary and with an appropriate legal basis.

3. WHY WE USE YOUR DATA AND OUR LEGAL BASES

We use personal data only when we have a lawful basis for doing so.

​

Providing and administering services

We use personal data to respond to inquiries, create and administer accounts, memberships, purchases, bookings, lessons, courses, events, community access, feedback and replays. The legal basis is taking steps at your request before entering into a contract and performing our contract with you.

​

Payments, invoices and accounting

We use transaction and billing information to process payments, refunds and invoices and to maintain required accounting records. The legal bases are performance of a contract and compliance with legal obligations.

​

Service communications

We may send purchase confirmations, booking information, account notices, event links, assignments, lesson information and membership updates. The legal bases are performance of a contract and, where relevant, compliance with legal obligations.

​

Recordings and educational feedback

We may process recordings and student submissions to provide lesson replays, workshops and educational feedback included in a service. The legal basis is performance of a contract and, where consent is required, your consent.

​

Marketing communications

We send newsletters, promotions, new-release notices and other marketing only where we have the required consent. You may withdraw your consent at any time by using the unsubscribe link in an email or contacting us.

​

Website analytics and advertising

Subject to your cookie choices, we use Wix Analytics and Google Analytics to understand website use and performance, and Meta Pixel to measure and improve advertising campaigns. The legal basis for non-essential analytics and advertising technologies is your consent.

​

Security and improvement

We use limited technical information to operate, secure, troubleshoot and improve the website and services and to prevent misuse or fraud. The legal basis is our legitimate interest in protecting and administering our business and users, provided that our interests do not override your rights. Legitimate interest is not used as a substitute for consent where cookie consent is required.

​

Legal obligations and claims

We may process personal data to comply with legal obligations, respond to lawful requests and establish, exercise or defend legal claims.

When processing relies on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

​

Some information is necessary to create an account, process a purchase, arrange a lesson or provide another requested service. If you do not provide the required information, we may be unable to provide that service. Providing data for marketing or optional cookies is voluntary.

4. LESSONS, RECORDINGS, REPLAYS AND STUDENT SUBMISSIONS

We may record certain lessons, workshops, livestreams or events to provide educational feedback or a replay included in the relevant service. We will inform participants before recording begins or before they register for a service where recording is an essential feature.

A recording may contain a participant’s name, image, voice, performance, screen, chat messages or other contributions. Access to a replay may be limited to the relevant student, teacher, membership group or registered participants, depending on the service.

We do not use a student’s recording, image, voice, testimonial or performance in public advertising or promotional content without separate permission where required.

​

If a purchased service includes continuing or lifetime replay access, the relevant recording and associated information may be retained for as long as necessary to provide that promised access, subject to the applicable service terms, legal obligations and any valid request to erase the data.

​

Students may also submit recordings, documents or other material for feedback. They should submit only material they are entitled to share and avoid including unnecessary personal information about other people.

5. COMMUNITY AREAS AND CONTENT SHARED WITH OTHERS

Information you post in community areas may be visible to other members and, depending on the area’s settings, potentially to website visitors. Please do not post sensitive information or personal data that you do not want others to see.

We may moderate, restrict or remove community content to enforce our rules, protect users, comply with legal obligations or address complaints.

If you delete your account, we will delete or anonymize your community content where reasonably possible. Content quoted or copied by other users may remain outside our control.

6. COOKIES, ANALYTICS AND SIMILAR TECHNOLOGIES

We use essential cookies and similar technologies that are necessary for security, account login, purchases, bookings, consent management and the operation of the website. These technologies do not require consent where they are strictly necessary.

​

Subject to your consent, we use Wix Analytics and Google Analytics to understand website use and performance and Meta Pixel to measure and improve advertising campaigns. These tools may process information such as cookie or device identifiers, IP address, browser and device data, pages viewed, interactions, referral information and campaign data.

​

Non-essential analytics, advertising and personalization technologies are activated only after you have made an affirmative choice through our cookie banner or preference centre.

​

You can accept, reject or customize optional cookies. You can change or withdraw your choice at any time by clicking the Privacy Settings icon displayed on the website. This icon reopens the cookie preference centre.

​

Continuing to browse the website is not treated as consent. Optional cookies must not be activated before consent.

​

For more information, see our Cookie Policy:
www.mercefont.com/cookie-policy

7. WHO MAY RECEIVE YOUR DATA?

We do not sell or rent personal data.

We disclose personal data only when necessary for the purposes described in this Policy. Recipients may include:

​

• Wix.com and its affiliated services, for website hosting, CMS, forms, member accounts, bookings, events, community functions, security and related website services.

• Wix Analytics, for website traffic and performance measurement after the required consent.

• Wix Payments, for payment processing, transaction management, fraud prevention and payment compliance.

• PayPal, for payment processing, transaction management, refunds, fraud prevention and payment compliance.

• ActiveCampaign, for email-list management, transactional or marketing communications, segmentation and automation.

• Teachers and contractors working with MFAcademy, for lessons, feedback and student support. Access is limited to information required for their assigned students or responsibilities.

• Zoom, for online lessons, workshops, events and, where applicable, recordings.

• Google Workspace, for business email, communications, documents and administration.

• Notion, for internal tracking of identifiable students’ work, progress and related business administration.

• Make, for automating the transfer of new-member and membership information between services used to administer MFAcademy and MFCommunity.

• Dropbox, for cloud storage and delivery of educational score files. Student records are not intentionally stored there, but Dropbox may receive technical data when a shared file or link is accessed.

• Google Analytics, for website analytics and performance measurement after the required consent.

• Meta Pixel and related Meta measurement services, for advertising measurement, audience analysis and campaign improvement after the required consent.

• Wix’s cookie-consent provider, currently Usercentrics for Wix, for presenting privacy choices, storing consent preferences and maintaining consent records.

• Professional advisers and public authorities, where necessary for accounting, legal advice, dispute management, regulatory compliance, tax obligations or lawful requests.

​

Payment providers may also process data as independent controllers for their own legal, fraud-prevention and compliance purposes. Their own privacy notices apply to that processing.

​

Where teachers, contractors or service providers process data on our behalf, they are required to use it only for the agreed purpose and to apply appropriate confidentiality and security obligations.

8. INTERNATIONAL DATA TRANSFERS

Some providers may process personal data outside Andorra, including in the European Union or European Economic Area, Israel, the United States and other countries in which they or their approved subprocessors operate.

​

Where personal data is transferred internationally, we use a transfer mechanism recognized by applicable data-protection law. Depending on the destination and provider, this may include a finding of adequate or equivalent protection, approved standard contractual clauses, another legally recognized safeguard or a legally permitted exception.

​

We also consider the nature of the data, the purpose of the transfer, the provider’s security measures and the rights available to individuals.

You may contact us at contact@mercefont.com for additional information about the safeguards relevant to your personal data.

9. HOW LONG WE RETAIN DATA

We keep personal data only for as long as necessary for the purpose for which it was collected.

​

• Inquiry and support correspondence is generally retained for up to two years after the matter is resolved, unless a longer period is needed for an ongoing relationship or claim.

• Account, membership, booking and learning records are retained while the account or service relationship remains active and afterward for the period reasonably necessary to handle requests, disputes and applicable legal claims.

• Lesson and event recordings are retained for the access period associated with the relevant service. Recordings connected to continuing or lifetime replay access may be retained while that access commitment remains in effect.

• Community content is retained while it remains published or the account is active, after which it may be deleted or anonymized where reasonably possible.

• Transaction, invoice, tax and accounting records are retained for the period required by applicable Andorran law.

• Marketing data is retained until you unsubscribe or withdraw consent. We may retain minimal suppression information so that we can respect your opt-out request.

• Cookie and analytics data is retained for the periods stated in the Cookie Policy and cookie preference centre.

​

After the applicable period, data is deleted, anonymized or securely blocked where retention is required by law. Residual copies may remain temporarily in protected backups until overwritten in the ordinary backup cycle.

10. HOW WE PROTECT YOUR DATA

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, misuse or destruction.

​

Depending on the system and risk, these measures may include encrypted transmission, access controls, account authentication, limited staff or teacher permissions, secure service providers, backups, confidentiality obligations, software updates and incident-response procedures.

​

No online service or storage system can be guaranteed to be completely secure. If a personal-data breach occurs, we will investigate it and notify the competent authority and affected individuals where required by law.

11. YOUR DATA-PROTECTION RIGHTS

Subject to the conditions and exceptions established by applicable law, you may have the right to:

​

• Access the personal data we hold about you and receive a copy.

• Correct inaccurate or incomplete personal data.

• Request deletion of your personal data.

• Restrict how your personal data is processed.

• Object to processing based on legitimate interests or to direct marketing.

• Receive certain data in a structured, commonly used and machine-readable format and request portability where applicable.

• Withdraw consent at any time where processing is based on consent.

• Receive information about safeguards used for international transfers.

• Lodge a complaint with the competent data-protection authority.

​

To exercise your rights, email contact@mercefont.com and describe your request. We may request information reasonably necessary to confirm your identity and protect your data from unauthorized disclosure.

​

Exercising these rights is normally free of charge. We will respond without undue delay and generally within one month, subject to any extension permitted by law for complex or numerous requests.

​

You may also lodge a complaint with:

 

Agència Andorrana de Protecció de Dades (APDA)
C/ Doctor Vilanova, 15–17
Nova Seu del Consell General, planta -5
AD500 Andorra la Vella, Principality of Andorra
Website: www.apda.ad
Email: apda@apda.ad
Telephone: +376 808 115

12. CHILDREN AND STUDENTS UNDER 16

Our educational services may be used by minors when arranged or authorized by a parent or legal guardian.

​

Where a student is under 16 and processing depends on consent, including consent for optional cookies or marketing, that consent must be given or authorized by the student’s legal representative.

​

Parents or legal guardians should create or supervise the relevant account, purchase and communication where appropriate. They may contact us regarding personal data relating to a minor for whom they are legally responsible.

13. AUTOMATED DECISIONS

We may use basic segmentation and automation to send relevant account, membership, event or marketing communications.

We do not make decisions based solely on automated processing that produce legal effects or similarly significant effects on you.

14. EXTERNAL AND AFFILIATE LINKS

Our website may contain links to third-party websites, stores, social networks or affiliate products. Those third parties control their own websites and privacy practices. We encourage you to review their privacy notices before providing personal information to them.

15. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes to our services, providers or legal obligations.

​

The current version will always be published on this page with its latest revision date. If a change materially affects how we use personal data, we will provide additional notice where appropriate and request new consent where legally required.

16. CONTACT

For questions about this Privacy Policy or the way we process personal data, or to exercise a data-protection right, contact:

​

Merce Font, SLU
Maria Pla 31
AD500 Andorra la Vella
Principality of Andorra

Email: contact@mercefont.com
Telephone: +376 655 596