Privacy Policy

DanceTalk Studios is a London-based dance studio operating the website dancetalkstudios.co.uk. For the purposes of data protection law, we are the data controller.

If you have any questions about this policy or how we handle your data, contact us at dancetalkofficial@gmail.com.

Account information - your name, email address, and phone number, provided when you register for an account.

Booking and transaction data - records of classes you have booked or attended, the packages you have purchased, remaining credits, and loyalty programme status.

Authentication data - your password (stored in encrypted form) and session information used to keep you logged in.

Technical data - your IP address, browser type, device information, and pages visited on our website. This data is collected automatically when you use the site.

Communication data - any messages you send to us via email or other channels.

To provide our services - creating and managing your account, processing class bookings and cancellations, managing class packages and credits, and operating the loyalty programme. The legal basis for this processing is the performance of a contract with you.

To communicate with you - sending booking confirmations, class reminders, welcome emails, and loyalty reward notifications. The legal basis is the performance of a contract and our legitimate interest in keeping you informed about your bookings.

To improve our services - understanding how our website is used and identifying areas for improvement. The legal basis is our legitimate interest in improving our services.

To comply with legal obligations - maintaining financial and transaction records as required by law.

We will only send you marketing emails (such as class schedule updates, promotions, or newsletters) with your explicit consent. You can withdraw your consent at any time by using the unsubscribe link in any marketing email or by contacting us directly.

Transactional emails related to your bookings and account (confirmations, reminders, loyalty notifications) are not marketing communications and are necessary for the performance of our services.

Supabase - our database and authentication provider, which hosts your account information, booking records, and package data. Supabase uses encrypted connections, row-level security, and industry-standard infrastructure. Data is stored on servers within the EU/EEA region.

Brevo - our email service provider, used to send transactional and marketing emails. Brevo processes your name and email address for the purpose of delivering emails on our behalf. Brevo is GDPR compliant and acts as a data processor under our instruction.

Vercel - our website hosting provider, which may process technical data (IP addresses, request logs) as part of serving the website.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Passwords are encrypted and never stored in plain text. Access to your data is restricted to authorised personnel only.

We retain your personal data for as long as you hold an active account with us. If your account is inactive for a period of 24 months, we may contact you to confirm whether you wish to keep your account open.

Booking and transaction records may be retained for up to 6 years after your last transaction to comply with financial record-keeping obligations under UK law.

When data is no longer needed, it is securely deleted or anonymised.

We do not sell, rent, or trade your personal data to third parties for their own purposes.

We share your data only with the service providers listed above (Supabase, Brevo, Vercel), who process data on our behalf and under our instruction. These providers are contractually bound to handle your data in accordance with data protection law.

We may also disclose your data where required by law, regulation, or legal proceedings.

Our website uses essential cookies required for the site to function (such as authentication session cookies). These are strictly necessary and do not require consent.

We do not currently use analytics, advertising, or tracking cookies. If this changes, we will update this policy and seek your consent where required.

Right of access - you can request a copy of the personal data we hold about you.

Right to rectification - you can request that we correct any inaccurate or incomplete data. You can also update your name, email, and phone number directly in your account settings.

Right to erasure - you can request that we delete your personal data, subject to any legal obligations we have to retain certain records.

Right to restrict processing - you can request that we limit how we use your data in certain circumstances.

Right to data portability - you can request a copy of your data in a structured, machine-readable format.

Right to object - you can object to processing based on our legitimate interests. You can also object to receiving marketing communications at any time.

To exercise any of these rights, contact us at dancetalkofficial@gmail.com. We will respond to your request within one month.

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. We will notify you of significant changes by email where possible.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

For any questions or requests relating to your personal data, contact us at dancetalkofficial@gmail.com.