Privacy Policy


Mar 12, 2026 05:56 AM


Privacy Policy
YOUR PRIVACY, OUR PROMISE
Last updated: 19th January 2026

⸻

1. Who We Are

Stardust Dance Academy (“Stardust”, “we”, “our”, “us”) is a UK-based dance school operating in Northstowe and Cambridge. We are the Data Controller responsible for deciding how and why your personal data is used.

Data Controller: Stardust Dance Academy – Sole Trader
Address: 6 Pedersen Way, Northstowe, Cambridge CB24 1BJ, United Kingdom
Email: team@stardustdanceacademy.com
Telephone: 07933 746 995

If you have any questions about this notice, your data rights, or how we handle your information, you can contact us using the details above.

⸻

2. The Purpose of This Policy

This policy explains:
• What personal data we collect and why
• How we use and store it
• The lawful bases under the UK General Data Protection Regulation (UK GDPR)
• How long we keep your data
• Your rights as a parent, carer, or student

⸻

3. How We Collect Personal Data

We collect personal data directly from you when you:
• Register or book a trial via our Studio Portal
• Complete online forms on our website hosted by Webflow
• Contact us by email, phone, or social media
• Attend our classes, workshops, or events
• Provide media consent forms

We may also receive information from third-party processors who support our administration systems (for example, Studio Pro or Stripe).

⸻

4. The Personal Data We Process

Parents and Guardians
• Full name, email address, and phone number(s)
• Billing and payment details (handled securely by our payment providers)
• Emergency contact information
• Communication preferences

Children / Students
• Full name and date of birth
• Medical or allergy information (Special Category Data)
• Attendance and progress records
• Photographs or videos, where explicit consent has been given

We do not collect or request unnecessary information.

⸻

5. Why We Process Personal Data and Our Lawful Bases

We process personal data for the following purposes:
• Class registration and management
Lawful basis: Contract – necessary to deliver our service
• Health and safety, payments and invoicing
Lawful basis: Vital interests and/or legal obligation
• Website hosting and form collection
Lawful basis: Contract and/or legal obligation
• Communication with parents (email)
Lawful basis: Legitimate interest
• Marketing, social media, and data automation between systems
Lawful basis: Consent (can be withdrawn at any time)
• Website analytics, cookies, and point-of-sale payments
Lawful basis: Consent (via cookie banner)

⸻

6. Special Category Data (Health Information)

We only collect medical or health information necessary to ensure a student’s safety and ability to participate in classes.

Our lawful basis for this processing is:
• Article 9(2)(a): Explicit consent
• Article 9(2)(c): Vital interests where necessary in an emergency

Such data is treated as confidential and accessed only by authorised staff.

⸻

7. Children’s Data
• Children’s data is processed only with the consent of a parent or guardian
• No personal data is collected directly from a child without parental involvement
• Images and videos are used only where media consent has been provided through a separate form

We do not use children’s data for direct marketing.

⸻

8. Data Sharing and Processors

We share personal data only with trusted processors to operate our services, including:
• Studio Pro – class management and enrolment (UK / USA; SCCs and UK Addendum)
• Stripe – payments and invoicing (USA; SCCs and UK Addendum)
• Webflow – website hosting and form collection (USA; SCCs and UK Addendum)
• Google Workspace – email and file storage (USA; SCCs and UK Addendum)
• Mailchimp – email communication (USA; SCCs and UK Addendum)
• Zapier – data automation between systems (USA; SCCs and UK Addendum)
• Square – point-of-sale payments (USA; SCCs and UK Addendum)
• Canva – design and creative assets (USA; SCCs and UK Addendum)
• Slack – internal team communication (USA; SCCs and UK Addendum)

⸻

9. International Data Transfers

Where data is transferred or stored outside the UK, we ensure equivalent protection through:
• The UK International Data Transfer Addendum (IDTA), and/or
• Standard Contractual Clauses (SCCs) approved by the ICO

You may request copies of these safeguards by contacting us.

⸻

10. Data Retention

We retain personal data for the following periods:
• Student and parent records: While enrolled and up to 12 months after withdrawal
• Medical and emergency data: For the duration of enrolment only
• Marketing data: Until consent is withdrawn
• Financial records: 6 years (HMRC requirement)
• Accident and incident reports: Minimum of 5 years
• Photographs and videos: Until consent is withdrawn or the student leaves the school

⸻

11. Security Measures

We take security seriously and implement appropriate measures, including:
• Multi-factor authentication (MFA) for all admin systems
• Encryption and password protection for sensitive files
• Secure cloud storage with controlled access
• Staff confidentiality agreements and annual data protection training

In the unlikely event of a personal data breach, we will notify affected individuals and the ICO in line with our Data Breach Response Procedure.

⸻

12. Your Data Protection Rights

Under UK GDPR, you have the right to:
• Access your personal data
• Rectify inaccurate or incomplete data
• Request erasure where data is no longer necessary
• Restrict processing
• Request data portability
• Object to processing based on legitimate interests
• Withdraw consent at any time where processing is consent-based

To exercise these rights, contact team@stardustdanceacademy.com.
We will respond within one calendar month.

If you remain dissatisfied, you may complain to the Information Commissioner’s Office (ICO):
Wyclcliffe House, Water Lane, Wilmslow SK9 5AF
Website: www.ico.org.uk
Telephone: 0303 123 1113

⸻

13. Cookies and Web Tracking

Our website uses:
• Essential cookies for core functionality
• Non-essential cookies (such as analytics) only with your consent
• Embedded content cookies (for example, YouTube), controlled by third-party providers

See our Cookie Policy for more detail.

⸻

14. Changes to This Policy

We review this policy annually and whenever our processing activities change.

The latest version is always available at:
www.stardustdanceacademy.com/about/privacy