Privacy policy

Who we are

You Can Dance Academy (“YCDA”, “we”, “us”) provides dance classes and a member website and mobile app for enrolled families. This policy explains how we handle personal data when you use our public website, member portal, or app.

Questions about privacy: youcandanceacademyuk@gmail.com.

What this covers

This policy applies to visitors, members (parents and carers), invited support contacts, and staff who use YCDA digital services. Booking and payment for classes are handled through the YCDA member portal unless we tell you otherwise.

Lawful bases (UK GDPR)

We process personal data only where we have a lawful basis, including:

• Contract — running your member account, class access, and communications you expect as part of membership.
• Legitimate interests — security, fraud prevention, improving our services, and sending relevant class updates (balanced against your rights).
• Consent — optional browser notifications, push alerts where you enable them, and marketing only if we ask and you agree.
• Legal obligation — where we must keep records for safeguarding, tax, or law enforcement requests.

Who we share data with

We do not sell your personal data. We share it only with service providers that help us operate YCDA, under contracts that require them to protect your information:

• Email delivery (e.g. Resend) — class and account messages.
• Push notifications (Expo) — alerts on the mobile app when you opt in.
• Hosting and infrastructure — where the website and app are deployed.
• Payment processors — when card pay is enabled (their terms apply).

Children’s information

Dancer profiles (name, age, class, emergency contact, and optional access needs) are added by the parent or main account holder. We use this information for safeguarding, class planning, and communication. We do not knowingly offer public social features to children through our portal.

How long we keep data

We keep account and class-related data while you are an active member and for a reasonable period afterwards for safeguarding and legal purposes. Session login tokens expire automatically. You may ask us to delete or correct data subject to legal and safeguarding requirements.

Your rights

Under UK data protection law you may have the right to access, rectify, erase, restrict, or object to certain processing, and to data portability where applicable. You may also complain to the ICO (ico.org.uk).

Members can submit requests in the portal under Your data rights, or email us. We aim to respond within one month. See our Compliance & data rights page for full detail.

Security

We use HTTPS, hashed passwords, secure session handling, and access controls on member content (including private videos). No method of transmission over the internet is 100% secure; please use a strong password and keep your device secure.

Changes

We may update this policy from time to time. The “Last updated” date at the top of each legal page shows when it was last revised. Continued use of our services after changes means you accept the updated policy.