Privacy Policy

Michael Karl Studio, LLC d/b/a MK Performing Arts is a performing arts studio at 1640 Roswell Street Southeast, Suite G, Smyrna, GA 30080. We provide private lessons, classes, camps, educational theatre, and university preparation in person and through live online instruction.

This policy covers the public MK Performing Arts website and the MK Performing Arts platform, including Studio Flow and University Prep. Privacy questions can be sent to hello@mkperformingarts.com or (770) 615-6572.

We collect information needed to operate MK Performing Arts services, including account details, contact information, student and family profiles, staff profiles, scheduling records, attendance details, billing records, messages, uploaded files, support requests, and platform activity.

If you connect third-party services such as QuickBooks, Stripe, Google Calendar, Twilio, Clerk, or email delivery tools, we process the information needed to connect those services and provide the requested platform features.

Payment card numbers and card security codes are entered directly into our payment processor and are not stored on MK Performing Arts systems. We receive and keep transaction records such as the amount, date, outcome, and the last four digits of the card.

MK Performing Arts uses necessary technology to operate and secure the website, remember this browser's privacy choice, and provide forms requested by visitors. These necessary technologies cannot be switched off.

MK Performing Arts operates an opt-out model for optional measurement. Google Analytics cookie storage, Google advertising cookie storage, and MKPA advertising-attribution storage are ON by default when you first arrive, and they stay on until you turn them off. To turn them off, open Privacy choices — on the public website, use the persistent Privacy choices control or the Privacy choices link in the site footer; when signed in to the platform, use the Privacy choices link in the navigation menu. Your choice is remembered on that browser for 90 days.

We do not treat a browser's Do Not Track or Global Privacy Control signal as an automatic opt-out, because there is no common industry standard for responding to them. Use the Privacy choices control to opt out. If you tell us in writing at hello@mkperformingarts.com, we will apply your opt-out to your account records as well.

MK Performing Arts uses Google's Advanced Consent Mode. When optional storage is denied, Google tags may send limited measurements without analytics or advertising cookies. These measurements may communicate consent status, timestamps, browser or device information, referrer information, a random value generated for a page load, whether a current or previous page included ad-click information, and key-event signals such as a verified form completion. Google may use these signals for aggregate reporting and modeling.

MK Performing Arts enables ad-data redaction. When advertising storage is denied, exact Google ad-click identifiers are removed from Google Ads and Floodlight requests, and page URLs containing those identifiers are redacted. URL passthrough is not enabled. The browser and website hosting layer necessarily handle the landing-page URL when a visitor first arrives, before an on-page privacy choice can be made.

Advertising personalization remains denied through this privacy control, including when a visitor permits advertising measurement.

Unless a visitor has turned Analytics off in Privacy choices, MK Performing Arts also keeps its own count of public-website visits. Each record contains a random visit identifier generated in the browser for that sitting; the public MK Performing Arts page path without its query string, checked against the addresses MK Performing Arts publishes, with any other address recorded only as its section or as "other page"; the originating website's host; approved UTM and Google click-identifier values; whether the device is a phone, tablet, or computer; the browser name; the country and state or region reported by our hosting provider; how long the page was open; how many pages were opened during that sitting; whether that browser had opened the website before; and whether a signed-in session was present, which is how MK Performing Arts separates its own staff from the public. It does not contain a name, an email address, a telephone number, an IP address, a full browser user-agent string, a page title, a search query, or any address a visitor typed that is not a page MK Performing Arts publishes. Turning Analytics off stops this count for that browser and clears the two values it keeps there.

These visit records are kept for no longer than 90 days and are then deleted automatically. Day-by-day totals are kept afterwards so MK Performing Arts can compare one season with another. Those totals are counts only and describe no visitor.

Unless a visitor has turned Advertising measurement off in Privacy choices, MK Performing Arts may create first-party attribution records containing a random attribution-session identifier; an exact Google click identifier such as GCLID, GBRAID, or WBRAID; approved UTM source, medium, campaign, campaign ID, term, and content values; the public MK Performing Arts page path without its query string; and the originating website's origin. Native MKPA inquiry forms may also include these approved source details in the resulting lead record. Unknown query parameters and full query strings are not copied by MKPA's browser source-tracking code.

When a visitor sends an inquiry through a native MKPA form, a hashed (scrambled) copy of the email address and phone number entered on that form may be shared with Google Ads to measure whether an advertisement led to the inquiry; turning off Advertising measurement in Privacy choices stops this.

When a visitor submits the applicable private-lesson Jotform, MK Performing Arts may verify the submission and join its submission and conversion-receipt identifiers to the attribution record. The shadow attribution ledger does not copy the visitor's name, email address, telephone number, student answers, or notes from Jotform. Jotform separately processes the information the visitor chooses to submit through its form.

The verified form receipt and stable conversion identifier are kept separately from the optional attribution ledger. They prevent one inquiry from being counted repeatedly and support MK Performing Arts' business record of the inquiry.

When QuickBooks is connected, MK Performing Arts uses authorization tokens and company identifiers to sync accounting information selected by the platform, such as expense and transaction data used for business reporting. We do not sell QuickBooks data.

The owner can disconnect QuickBooks from the integrations area of the platform. Disconnecting removes the active connection in the MK Performing Arts app, but records already imported for business reporting may remain unless deletion is requested and legally permitted.

We share information with service providers only as needed to operate the platform. These providers may include hosting, database, authentication, payment, messaging, email, calendar, accounting, storage, analytics, and support services.

We may also disclose information if required by law, to protect rights and safety, to prevent fraud or abuse, or as part of a business transfer involving MK Performing Arts.

The platform may contain information about students, including minors, because MK Performing Arts provides performing arts education, coaching, scheduling, and related services. Parent, guardian, staff, and authorized administrator access is controlled through assigned roles.

Users should only enter information they are authorized to provide and should not share account access with others.

We use administrative, technical, and organizational safeguards designed to protect platform information, including encrypted connections, access limited by assigned role, and separate permissions for staff and family accounts. No internet service can be guaranteed to be completely secure.

Payment card details are handled by our payment processor rather than stored by us. Uploaded files are private by default and are served only to people whose role permits access.

We keep information only for as long as it is reasonably needed for the purpose it was collected, for our legitimate operational and recordkeeping needs, or for as long as the law requires. The periods below are our normal practice.

You may request help updating account information, correcting records, disconnecting integrations, or asking about stored information by contacting MK Performing Arts.

Marketing messages, if any, may include opt-out instructions. Transactional and service messages may still be sent when needed to operate your account or services.

You can reopen Privacy choices at any time: on the public website, use the persistent Privacy choices control or the Privacy choices link in the site footer; when signed in to the platform, use the Privacy choices link in the navigation menu. Withdrawing Advertising measurement stops future MKPA attribution for that browser, changes Google's consent signals to denied, clears known MKPA attribution storage and first-party Google measurement cookies where the browser permits, and requests deletion of shadow touch and joined-attribution records associated with that browser's attribution session.

Withdrawing Analytics stops MK Performing Arts' own website-visit count for that browser and clears the two values the count keeps there. Visit records already written hold no name, address, or telephone number and are deleted automatically within 90 days.

Changing this preference cannot delete third-party cookies that MK Performing Arts cannot access, an inquiry already submitted to Jotform, MK Performing Arts business records needed to respond to or deduplicate that inquiry, or aggregate or modeled statistics already produced by Google. Contact hello@mkperformingarts.com for a broader information request.

MK Performing Arts teaches children and teenagers, so a large part of what we hold concerns minors. Our account model is built around the parent or guardian: for a student under 18, the parent or guardian normally owns the account, holds the billing relationship, and accepts the enrollment agreement on the student's behalf.

A student must be at least 13 years old to hold their own sign-in to the MK Performing Arts platform. We do not knowingly allow a child under 13 to create a platform account, and a child under 13 should not send us information directly. Where a student is under 13, their parent or guardian uses the account and we collect the child's information from the parent rather than from the child.

We do not use a child's profile or activity for personalized or behavioral advertising, and we do not sell children's information. If we learn that a child under 13 has provided information to us through the platform in a way we did not intend, we will delete it.

A parent or guardian may contact hello@mkperformingarts.com to review the information we hold about their child, ask us to correct it, ask us to delete it, or withdraw a permission they previously gave. Lesson recording and promotional media are separate, optional permissions and are never required in order to take lessons.

Our Child Safety Policy explains the rules our staff follow when working with students, including one-on-one and online lessons, and how to raise a concern.

You may ask us for a copy of the personal information we hold about you or your child, ask us to correct it, ask us to delete it, or ask us to stop using it for marketing. Send the request to hello@mkperformingarts.com or call (770) 615-6572 and tell us what you are asking for. We will confirm we have received it, verify that the request comes from the account holder or a parent or guardian, and respond within 45 days. If we need longer, we will tell you why.

We do not charge for these requests and we will not treat you differently for making one. Some information must be kept even after a deletion request — for example billing records we are required to retain for tax purposes, and signed agreements that remain relevant to a claim. We will tell you if that applies.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. Advertising personalization is switched off across our measurement system for every visitor, whether or not they opt out.

This policy is written to meet the California Online Privacy Protection Act, which asks commercial websites to post a policy describing the categories of personal information collected, the categories of third parties it may be shared with, how a consumer can review and request changes to their information, how we tell you about changes, and the policy's effective date. Those disclosures appear in the sections above and in the Do Not Track statement under Cookies, Analytics, and Advertising Measurement.

MK Performing Arts is a small business and does not currently meet the thresholds that make the California Consumer Privacy Act apply. We nonetheless offer the access, correction, and deletion requests described above to everyone, wherever they live.

We may update this Privacy Policy from time to time. The updated date at the top of this page shows the latest revision. If we make a change that materially affects how we handle information already collected, we will give notice through the platform or by email before the change takes effect.