Privacy Policy
Oct 22, 2026 08:35 PM
Privacy Policy
YOUR PRIVACY, OUR PROMISE
Last updated: 19th January 2026
⸻
1. Who We Are
Stardust Dance Academy (“Stardust”, “we”, “our”, “us”) is a UK-based dance school operating in Northstowe and Cambridge. We are the Data Controller responsible for deciding how and why your personal data is used.
Data Controller: Stardust Dance Academy – Sole Trader
Address: 6 Pedersen Way, Northstowe, Cambridge CB24 1BJ, United Kingdom
Email: team@stardustdanceacademy.com
Telephone: 07933 746 995
If you have any questions about this notice, your data rights, or how we handle your information, you can contact us using the details above.
⸻
2. The Purpose of This Policy
This policy explains:
• What personal data we collect and why
• How we use and store it
• The lawful bases under the UK General Data Protection Regulation (UK GDPR)
• How long we keep your data
• Your rights as a parent, carer, or student
⸻
3. How We Collect Personal Data
We collect personal data directly from you when you:
• Register or book a trial via our Studio Portal
• Complete online forms on our website hosted by Webflow
• Contact us by email, phone, or social media
• Attend our classes, workshops, or events
• Provide media consent forms
We may also receive information from third-party processors who support our administration systems (for example, Studio Pro or Stripe).
⸻
4. The Personal Data We Process
Parents and Guardians
• Full name, email address, and phone number(s)
• Billing and payment details (handled securely by our payment providers)
• Emergency contact information
• Communication preferences
Children / Students
• Full name and date of birth
• Medical or allergy information (Special Category Data)
• Attendance and progress records
• Photographs or videos, where explicit consent has been given
We do not collect or request unnecessary information.
⸻
5. Why We Process Personal Data and Our Lawful Bases
We process personal data for the following purposes:
• Class registration and management
Lawful basis: Contract – necessary to deliver our service
• Health and safety, payments and invoicing
Lawful basis: Vital interests and/or legal obligation
• Website hosting and form collection
Lawful basis: Contract and/or legal obligation
• Communication with parents (email)
Lawful basis: Legitimate interest
• Marketing, social media, and data automation between systems
Lawful basis: Consent (can be withdrawn at any time)
• Website analytics, cookies, and point-of-sale payments
Lawful basis: Consent (via cookie banner)
⸻
6. Special Category Data (Health Information)
We only collect medical or health information necessary to ensure a student’s safety and ability to participate in classes.
Our lawful basis for this processing is:
• Article 9(2)(a): Explicit consent
• Article 9(2)(c): Vital interests where necessary in an emergency
Such data is treated as confidential and accessed only by authorised staff.
⸻
7. Children’s Data
• Children’s data is processed only with the consent of a parent or guardian
• No personal data is collected directly from a child without parental involvement
• Images and videos are used only where media consent has been provided through a separate form
We do not use children’s data for direct marketing.
⸻
8. Data Sharing and Processors
We share personal data only with trusted processors to operate our services, including:
• Studio Pro – class management and enrolment (UK / USA; SCCs and UK Addendum)
• Stripe – payments and invoicing (USA; SCCs and UK Addendum)
• Webflow – website hosting and form collection (USA; SCCs and UK Addendum)
• Google Workspace – email and file storage (USA; SCCs and UK Addendum)
• Mailchimp – email communication (USA; SCCs and UK Addendum)
• Zapier – data automation between systems (USA; SCCs and UK Addendum)
• Square – point-of-sale payments (USA; SCCs and UK Addendum)
• Canva – design and creative assets (USA; SCCs and UK Addendum)
• Slack – internal team communication (USA; SCCs and UK Addendum)
⸻
9. International Data Transfers
Where data is transferred or stored outside the UK, we ensure equivalent protection through:
• The UK International Data Transfer Addendum (IDTA), and/or
• Standard Contractual Clauses (SCCs) approved by the ICO
You may request copies of these safeguards by contacting us.
⸻
10. Data Retention
We retain personal data for the following periods:
• Student and parent records: While enrolled and up to 12 months after withdrawal
• Medical and emergency data: For the duration of enrolment only
• Marketing data: Until consent is withdrawn
• Financial records: 6 years (HMRC requirement)
• Accident and incident reports: Minimum of 5 years
• Photographs and videos: Until consent is withdrawn or the student leaves the school
⸻
11. Security Measures
We take security seriously and implement appropriate measures, including:
• Multi-factor authentication (MFA) for all admin systems
• Encryption and password protection for sensitive files
• Secure cloud storage with controlled access
• Staff confidentiality agreements and annual data protection training
In the unlikely event of a personal data breach, we will notify affected individuals and the ICO in line with our Data Breach Response Procedure.
⸻
12. Your Data Protection Rights
Under UK GDPR, you have the right to:
• Access your personal data
• Rectify inaccurate or incomplete data
• Request erasure where data is no longer necessary
• Restrict processing
• Request data portability
• Object to processing based on legitimate interests
• Withdraw consent at any time where processing is consent-based
To exercise these rights, contact team@stardustdanceacademy.com.
We will respond within one calendar month.
If you remain dissatisfied, you may complain to the Information Commissioner’s Office (ICO):
Wyclcliffe House, Water Lane, Wilmslow SK9 5AF
Website: www.ico.org.uk
Telephone: 0303 123 1113
⸻
13. Cookies and Web Tracking
Our website uses:
• Essential cookies for core functionality
• Non-essential cookies (such as analytics) only with your consent
• Embedded content cookies (for example, YouTube), controlled by third-party providers
See our Cookie Policy for more detail.
⸻
14. Changes to This Policy
We review this policy annually and whenever our processing activities change.
The latest version is always available at:
www.stardustdanceacademy.com/about/privacy