Privacy Policy

Castle Street Dance Studios Ltd Privacy Policy

Castle Street Dance Studios Ltd (“CSDS”) takes the security and use of your personal data very seriously. This policy outlines how we collect, use, store, and protect personal information in accordance with the General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable laws.

1. Scope and Consent

This Privacy Policy covers all personal data processed by CSDS including that collected through our website, email communications, registration processes, and third-party software used in the course of our business. By submitting personal data to us, you agree to the practices described in this policy.

2. Data Collection

We collect personal data via forms, email, registration documents, software, and our website. This includes:

Personal Identification Information: Name, date of birth, postal address, email, phone numbers.
Sensitive Personal Data: Medical information, allergies, emergency contacts, images, video footage.
Technical Data: Browser type, IP address, and device information.
Usage Data: Website usage, interactions, and preferences.

We only collect data necessary to:

Administer school services and communication.
Ensure the health, safety, and safeguarding of all pupils.
Facilitate classes, exams, performances, payments, and events.
Comply with legal obligations.

3. Lawful Basis for Processing

Our lawful bases for processing your data include:

Contractual Necessity – to deliver our services.
Legal Obligation – safeguarding and tax regulations.
Legitimate Interests – to improve our services.
Consent – particularly for the use of images and videos.

4. Data Retention

Personal data is stored only for as long as necessary.
Contact and medical data for enrolled students is retained for the duration of enrolment plus 60 days.
Data may be anonymised for statistical or reporting purposes.

5. Data Storage and Security

Personal data is stored securely using password-protected and encrypted systems.
Paper records are stored in locked cabinets and only accessed by authorised staff.
Online communication is protected by SSL encryption.
Staff are trained in data protection and confidentiality procedures.
An internal Data Breach Policy is in place to handle any breach swiftly.

6. Sharing Your Data

We do not sell or trade your data. We share data only when necessary with:

Examining boards (ISTD, RAD)
Theatre venues (Wycombe Swan, Elgiva)
Software partners (Thinksmart Software, Xero, Google, Zoom, Microsoft)
Local councils and safeguarding bodies
Photography & videography partners (e.g. Carmel Jane Photography)

All third parties are required to comply with UK GDPR and have appropriate data protection policies.

7. Marketing and Imagery

Photos and videos are taken during classes and events with prior consent. These may be used for:

Social media
Promotional materials
Website content
Newsletters

You may withdraw consent for imagery at any time by emailing info@csds.co.uk.

8. Website Cookies

Our website uses cookies to analyse user behaviour and enhance the user experience. You can manage your cookie preferences in your browser settings.

9. Online Class Disclaimer

Participation in online classes is at your own risk. By joining, you:

Confirm your space is safe and suitable.
Accept full responsibility for your child’s participation.
Acknowledge CSDS is not liable for injuries or damage occurring in your home.

10. Your Rights

You have the right to:

Access your personal data
Correct inaccuracies
Request deletion of your data
Withdraw consent
Object to processing
Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, contact: info@csds.co.uk

ICO Contact:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
https://ico.org.uk

11. Updates to This Policy

This policy may be updated periodically to reflect legal or operational changes. Updates will be posted on our website. Continued use of our services implies acceptance of these terms.

Castle Street Dance Studios Ltd
51 Green Hill, High Wycombe, Buckinghamshire, HP13 5QF
E: info@csds.co.uk
T: 07792 518455

Last Updated: 25/06/2025

Cookie Name	Expiration Time	Description
_ga	2 years	Used to distinguish users.
_gid	24 hours	Used to distinguish users.
_gat	1 minute	Used to throttle request rate. If Google Analytics is deployed via Google Tag Manager, this cookie will be named _dc_gtm_<property-id>.
AMP_TOKEN	30 seconds to 1 year	Contains a token that can be used to retrieve a Client ID from AMP Client ID service. Other possible values indicate opt-out, inflight request or an error retrieving a Client ID from AMP Client ID service.
_gac_<property-id>	90 days	Contains campaign related information for the user. If you have linked your Google Analytics and Google Ads accounts, Google Ads website conversion tags will read this cookie unless you opt-out. Learn more.
_hjClosedSurveyInvites	365 days	Hotjar cookie. This cookie is set once a visitor interacts with a Survey invitation modal popup. It is used to ensure that the same invite does not re-appear if it has already been shown.
_hjDonePolls	365 days	Hotjar cookie. This cookie is set once a visitor completes a poll using the Feedback Poll widget. It is used to ensure that the same poll does not re-appear if it has already been filled in.
_hjMinimizedPolls	365 days	Hotjar cookie. This cookie is set once a visitor minimizes a Feedback Poll widget. It is used to ensure that the widget stays minimizes when the visitor navigates through your site.
_hjDoneTestersWidgets	365 days	Hotjar cookie. This cookie is set once a visitor submits their information in the Recruit User Testers widget. It is used to ensure that the same form does not re-appear if it has already been filled in.
_hjMinimizedTestersWidgets	365 days	Hotjar cookie. This cookie is set once a visitor minimizes a Recruit User Testers widget. It is used to ensure that the widget stays minimizes when the visitor navigates through your site.
_hjIncludedInSample	365 days	Hotjar cookie. This session cookie is set to let Hotjar know whether that visitor is included in the sample which is used to generate funnels.
_hjShownFeedbackMessage	365 days	This cookie is set when a visitor minimizes or completes Incoming Feedback. This is done so that the Incoming Feedback will load as minimized immediately if they navigate to another page where it is set to show.