What is GDPR?

The UK GDPR (UK General Data Protection Regulation) is a UK law which came into effect on 01 January 2021. It sets out the key principles, rights and obligations for most processing of personal data in the UK, based on the EU GDPR which applied in the UK before that date, with some changes to make it work more effectively in a UK context.

The GDPR places significant additional responsibilities, over and above those defined in the Data Protection Act 1998, on those who collect and process personal data to ensure that providers of personal data understand the lawful basis for the collection and processing of their data. The document which explains this basis is known as a ‘Privacy Policy’. 

Information you give us

For example, when you enrol a student for classes, we will store personal information such as a name, postal address, date of birth, email addresses and telephone numbers. We will keep a record of the classes the student is enrolled in and other transaction details relating directly to the student.

Information given to us by third parties

For example, when the student takes an examination, a 3rd party examining board will send us the students results, which we keep on record. 

Sensitive personal data

Data Protection Law recognises that certain categories of personal information are more sensitive such as health information. We will collect medical information such as allergies, mental health or physical limitations that relates to the care and needs of the student within our classes. 

We only collect data that is relevant to us.

Contract Purposes

When you enrol a student in our classes you are entering into a contract with Allied Schools of Dance. In order to keep this contract we need to process and store your data. 

For example; we may need to contact you by email or telephone in the case of cancellation of a class, or in the case of problems with your payment along with other circumstances. 

Legitimate Business Interests

In certain situations we collect and process your personal data for purposes that are in our legitimate organisational interests. However, we only do this if there is no prejudice to you by using your personal information in his way. For example, we will use your data to send invoices or to make decisions on your child’s progress and to allow us to provide you with a better service. We may periodically send promotional emails about new products, special offers or other information such as workshops, which we think you may find interesting or relevant using the email address which you have provided. We keep internal records for this purpose. 

With Your Explicit Consent

For any situations where the two above are not appropriate, we will instead ask for your explicit consent before using your personal information in that specific situation. For example, we will ask you to complete a consent form for photography and video use, along with consent to remain in contact regarding future events. 

Who we share your information with

There are certain circumstances under which we may disclose your personal information to third parties. 

• Where we are under a duty to disclose your personal information in order to comply with any legal obligation (for example to government bodies and law enforcement agencies).
• We will share your information with festivals and competitions (All England Dance, Royal Berkshire Festival etc), examining boards (BBO, ISTD etc) and Shows (local council for performance licenses). This information is shared in order to enter your child and can be the following but is not limited to: name, date of birth, address. These third party organisations are required by law to hold their own Privacy Policies. 
• We share information within the school amongst staff and our chaperone team in accordance with our Child Protection Policy. 
• We store and use your information on a 3rd party online software that is GDPR compliant. 
  

 You may choose to restrict the collection or use of your personal information:

• If you wish to unsubscribe from our group email communications please look for the unsubscribe link at the bottom of the email.
• If you have specific requests regarding your information please email enquiries@livetodance.co.uk to discuss your requests. 
• If you believe that any information we are holding on you is incorrect or incomplete, please email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.
• You may request details of personal information which we hold about you under the Data Protection Act 2018. If you would like a copy of the information held on you, please email us asking for a subject access request. 

 Allied Schools of Dance will: 

• Appoint a Data Controller responsible for implementation of this Policy. 
• Provide to view online the GPDR Privacy Notice explaining why data is being collected and what will be done with it.
• Ensure that all new students/parents positively ‘opt in’ to their data being collected. 
• Ensure that electronically-held personal data is password-protected and all paper documents are contained in a locked box or file. 
• Retain relevant, non-sensitive data indefinitely for the sole purpose of maintaining a historical record. 
• Remove sensitive data 2 years after a student has left the school. 
• Remove financial data 7 years after a student has left the school in accordance with HMRC. 
• Only collect personal data that is necessary for the running of the School and the safety of the student.

 Consent will be required to take photographs and videos of any student. Consent will be sought in order to use this media in marketing, on our website and on social media. 

Any parent or family member taking photographs at the schools’ events, may only do so with the express permission of the school (or direct permission from other parent/guardian of students that may be filmed in the process) and should be kept only for family use and should not be shared publicly.