This Privacy Policy explains how personal information is collected and stored.

“DÉVELOPPÉ ACADEMY OF DANCE/WE” respect your right to privacy and are committed to securing and maintaining it. We only collect, store and process your personal information in line with current laws and regulations.

What information is collected?

New Student Registration Paper Forms: Opt in/opt out disclaimer student application form which is a signature based form. This form collects personal information (Data Subject) as listed below:

Names of students/parents/guardians:

Date of Birth of Students

Gender

Medical/ allergies

Religion (RAD examination entry form option)

Ethnic origin (RAD examination entry form option)

Email address

Home address

Phone numbers/mobiles

Media rights (media platforms website photographs/promotional materials such as posters/show recordings)

3RD Party –Royal Academy of Dance

The Royal Academy of Dance is our 3rd party. RAD examination forms at the time of candidate entry are processed in order to identify each candidate and parents/guardians permissions for examination and certification purposes. Candidate Identification numbers are provided. Examination Results are recorded.

How information is used:

This information is used directly/indirectly in order to register/identify a student/person. Identification is necessary for the registration of the student in the activity undertaken and for safety protection purposes as are parent/guardian confirmations of opt in opt out options and contact details.

Contact notifications use personal data to address issues directly involving the student/class.

Information provided is also used in the processing of invoices. All information is therefore used to perform a specific activity.

How and how long information is stored:

All information is deleted when a student leaves automatically so information is not kept any longer than needed. The exception to this is the tax/invoice payment record, or any legal claims and proceedings until concluded and no further appeals are possible where the law states it is kept for 7 years.

All information is stored in a locked secure environment whether it is paper documents or is secured on a computer in the UK. We use security measures to prevent electronic access.

We destroy all waste securely through a 3rd party.

Your rights over your information:

Right to be informed/transparency about what your information is used for:

This Privacy Policy details why we collect your personal details and how the information is used.

Right to access your information:

Subject Access Request (SAR) - Requests to access personal information held at any time for verification/processing should be made in writing.

Right to correct your information:

Rectification - If you believe any information held is inaccurate or may need altering or is incomplete (changes in address/phone numbers) the easiest way to correct is via the student Registration Form available on request.

Right to delete personal information also known as erasure unless there is a legal reason to keep it:

(Right to be Forgotten) All information is deleted when a student leaves automatically so information is not kept any longer than needed. The exception to this is the tax/invoice payment record, or any legal claims and proceedings until concluded and no further appeals are possible where the law states it is kept for 7 years.

Royal Academy of Dance examination results also have to be kept for a period of time.

Right to restriction of processing:

To restrict the processing of your personal information so data is stored but not processed any further (3rd party.)

Right to minimise data:

Only store and process data which is really necessary

Right to portability:

To move (electronically where applicable) copy or transfer data for own purposes/another controller)

Our website:

Our website uses links to other websites (Royal Academy of Dance). Other links are 3rd party websites and we do not control the content or their policies and assume no responsibility for the 3rd party.

We use an external company to maintain the technical operations of our website.

This company is a data processor and we are the data controller. We provide information/images to this company who provide technical and organizational measures to protect it being misused, processed in other ways, lost, accidently or illegally destroyed.

Connecting to social networks:

We give the option of connecting through both Facebook and Twitter on our website (although currently not used)

The internet is not a 100% secure environment. Please think carefully what information you share. We advise you not to share any confidential information.

Children’s information:

Children under the age of 13 years must not share any personal information.

Consent: You have the right to object or withdraw consent at any time.

In the event of a data breach,

Loss or theft of data/equipment storing data;

Unauthorised access of data by a 3rd party/person;

Human Error;

Hacking or cyberattack;

Alteration of personal data without permission;

Information obtained via deception;

A 3rd party can have a data breach which can affect data subjects.

GDPR forces companies to inform relevant authorities within 72 hours giving full details of the breach and the action taken to ensure it doesn’t happen again.

www.ico.org.uk