Privacy Policy

This Privacy Policy explains how Rebecca Stokes Dance Academy (“RSDA”, “we”, “us”, “our”) collects, uses, stores and protects personal information when you use our website, create an account, or book classes. We are committed to protecting your privacy and handling your data — and your children’s data — responsibly and in line with the UK GDPR and the Data Protection Act 2018.

1. Who we are

Rebecca Stokes Dance Academy is the “data controller” for the personal data we hold. You can contact us about this policy or your data at any time:

• Email: rsdaleicester@outlook.com
• Phone: 07595 341671
• Address: Stoney Stanton Village Hall, Stoney Stanton, Leicestershire

2. What information we collect

Depending on how you use our site, we may collect:

• Parent/guardian details: name, email address, phone number and (where provided) home address.
• Child/student details: name, age, date of birth, and — where you choose to provide it — medical history, allergies and any special needs relevant to safe participation.
• Account information: your login email and an encrypted (hashed) password.
• Booking & payment information: the classes booked, dates and amounts. Card details are entered directly with our payment provider (Stripe) and are never seen or stored by us.
• Safeguarding form responses: the enrolment & safeguarding form (completed via Microsoft Forms).
• Messages: anything you send us via the contact form or your account.
• Technical data: basic information stored in your browser (local storage) to keep you logged in and remember your preferences.

3. How we use your information

• To manage class bookings, attendance and your account.
• To take payment for classes (via Stripe) and keep records of who has paid.
• To keep children safe — holding medical/allergy information and safeguarding records so staff can respond appropriately.
• To communicate with you about bookings, classes, timetable changes and renewals.
• To meet our legal and safeguarding obligations.

4. Our legal basis

We rely on the following lawful bases under UK GDPR:

• Contract — to provide the classes you book and manage your account.
• Legal obligation — to meet safeguarding and child-protection duties.
• Legitimate interests — to run the academy, keep records and communicate with you.
• Consent — for any optional uses (such as marketing or, where applicable, photography), which you can withdraw at any time.

Medical and health information is “special category data”. We collect and use it only with your explicit consent and solely to keep your child safe during classes.

5. Children’s data

Information about children is provided by a parent or guardian. We only collect what we need to deliver classes safely and to meet our safeguarding responsibilities, and we keep it secure.

6. Who we share it with

We do not sell your data. We share limited information only with trusted providers who help us run the academy:

• Stripe — to process card payments securely (PCI-DSS compliant).
• Microsoft Forms — to collect safeguarding/enrolment form responses.
• Our email provider — to send booking confirmations and notifications.
• Our website host — where the site and data are stored.

We may also disclose information where required by law or to protect a child’s safety.

7. Payment security

All card payments are handled by Stripe. Your card number is entered directly on Stripe’s secure checkout — we never receive or store your full card details.

8. How long we keep it

We keep personal data only for as long as needed to provide our services and meet legal/safeguarding obligations, after which it is securely deleted. If you close your account or ask us to remove your data, we will do so unless we are required to retain certain records.

9. Your rights

Under UK data protection law you have the right to: access your data; have it corrected; have it erased; restrict or object to its use; data portability; and to withdraw consent at any time. To exercise any of these, contact us at rsdaleicester@outlook.com.

If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

10. Cookies & local storage

Our website uses your browser’s local storage to keep you signed in, remember your basket and store your preferences. We do not use third-party advertising cookies. Payment pages provided by Stripe may set their own cookies to operate securely.

11. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords and restricted access to admin tools.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the “last updated” date shown above.

13. Contact us

For any questions about your privacy or this policy, contact Miss Becky at rsdaleicester@outlook.com or 07595 341671.