Privacy Policy


PRIVACY POLICY

REVIEWED MAY 2025

GDPR stands for General Data Protection Regulation and replaces the previous Data Protection Directives that were in place. It was approved by the EU Parliament in 2016 and comes into effect on 25th May 2018.

GDPR states that personal data should be ‘processed fairly & lawfully’ and ‘collected for specified, explicit and legitimate purposes’ and that individual’s data is not processed without their knowledge and are only processed with their ‘explicit’ consent. GDPR covers personal data relating to individuals. South Sutton Ballet School is committed to protecting the rights and freedoms of individuals with respect to the processing of children’s, parents, visitors and staff personal data.

The Data Protection Act gives individuals the right to know what information is held about them. It provides a framework to ensure that personal information is handled properly.

South Sutton Ballet School is registered with ICO (Information Commissioners Office).

GDPR includes 7 rights for individuals

1) The right to be informed

For our own purpose of invoicing, receipts, payment requests, class enrollment information and any other critical regarding your attendance at our school we need to collect the following data. Full name of parent/guardian, 2 contact phone numbers, email address. We need to know children’s full names, address, date of birth and any SEN requirements.

South Sutton Ballet School is required to hold data on its teachers; names, addresses, email addresses, telephone numbers, date of birth, DBS checks.

South Sutton Ballet School stores data in a password encrypted system.

South Sutton Ballet School is a registered school for dance examinations with Royal Academy of Dance and as so, is required to collect and manage certain data. For the purpose of this organisation we are required to know children’s full names, Date of Birth, classification of ethnicity along with any SEN requirements. We only provide these details with the organisation at point of entry into examination. Data is then stored by them and their privacy policies can be viewed here. Data is transferred electronically.

https://www.royalacademyofdance.org/cookies-and-privacy

 

2) The right of access

At any point, an individual can make a request relating to their data via a Data Subject Request which can be provided. South Sutton Ballet School will provide a response (within 1 month). South Sutton Ballet School can refuse a request if we have a lawful obligation to retain data, but we will inform the individual of the reasons for the rejection. The individual has the right to complain to ICO if they are not happy with the decision.

3) The right to erasure

You have the right to request the deletion of your data where there is no compelling reason for it’s continued use. However, South Sutton Ballet School has a legal duty to keep children’s and parents details for a reasonable time *.

*South Sutton Ballet School etain these records for 6 years after a student has left the school, children’s accident and injury records for 19 years (or until the child reaches 21 years), and 22 years (or until the child reaches 24 years) for Child Protection records.

4) The right to restrict processing

Parents, visitors and staff can object to South Sutton Ballet School processing their data. This means that the records can be stored but must not be used in any way, for example exam reports or for communications (advertising and newsletters).

5) The right to data portability

South Sutton Ballet School requires data to be transferred from one IT system to another; such as from South Sutton Ballet School to dance associations for examinations. As noted above, these recipients use secure file transfer systems and have their own policies and procedures in place in relation to GDPR.

6) The right to object

Parents, visitors and staff can object to their data being used for certain activities like marketing or research.

7) The right not to be subject to automated decision-making including profiling

Automated decisions and profiling are used for marketing based organisations. The South Sutton Ballet School does not use personal data for such purposes.

Storage and use of personal information

Up until May 2025, all data (child’s full name, date of birth and emergency contact number) will be collected via email and then stored in password protected software. From June 2025, all data will be collected via Class for Kids software which is all password protected. Information taken from the files about individuals is confidential and these records are deleted after the retention period.

South Sutton Ballet School collects a large amount of personal data every year, including names, email addresses of those on the waiting list or people who have contacted us about our classes. These records are deleted if the child/adult does not attend the class, unless permission has been given for them to remain on a mailing list.

GDPR means that South Sutton Ballet School must;

•Manage and process personal data properly

•Protect the individual’s right to privacy

•Provide an individual with access to all personal information held on them

If you have any questions, please free to contact myself,

Becci beccifearn@hotmail.co.uk