FINAL Privacy Policy

NOOPOOR SHYAM DANCE SCHOOL PRIVACY POLICY

Noopoor Shyam Dance School (NSDS) is committed to protecting you and your dependents’ personal information. We are committed to providing a safe environment for all our customers, employees, casual and freelance workers and everybody who comes into contact with us, both physically and virtually (online). This Privacy Statement relates to the use of any personal information provided to us online or via application forms, telephone, email exchange, letters or correspondence.

Whenever you provide such information, we are legally obliged to use your information in line with current legislation concerning the protection of personal information, including the The Data Protection Act 2018 (‘DPA 2018’) and General Data Protection Regulation (‘GDPR’).

DATA PROTECTION PRINCIPLES

The legislation sets out various data protection principles. These include that personal information is:

Processed lawfully, fairly and in a transparent manner in relation to individuals.
Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
Used in a way that is adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
Accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay.
Kept in a form which permits identification and for no longer than is absolutely necessary.
Kept safe and secure.
Not transferred outside the European economic area without adequate protection.

YOUR RIGHTS

The legislation conveys various individual rights. These include the following:

The right to be informed
The right of access
The right to rectification
The right to erasure
The right to restrict processing
The right to data portability
The right to object
Rights in relation to automated decision making and profiling

Noopoor Shyam Dance School is the data controller within the meaning of the GDPR. Our contact address is NSDS, 66 Drake Road, Harrow, Middlesex HA2 9EA; Telephone: 0789400702; email: admin@nsdanceschool.com

We may amend this privacy notice from time to time. If we do so, we will advise you and make available the amended privacy notice.

WHAT INFORMATION DO WE COLLECT?

The legislation requires that there is a clear legal basis for processing personal information. In general Noopoor Shyam Dance School relies on the individual’s consent in order to process their data.

When you participate in or sign up to any Noopoor Shyam Dance School classes, activity or workshop, we may collect and store personal information about you. It is a requirement that you provide the personal data we request in order for us to manage and run the school. If you do not provide the information we request, we may not be able to provide professional services to you.

Depending on how you are engaging with us this can consist of information such as:

Contact details: Full name of student and parent contact details (for students below 18 years of age), email address(es), telephone numbers (home and/or mobile), postal address; where applicable, personal information about persons connected to students such as legal guardians/legitimate carers - you must have their authority to provide their information to us.

Additional information: Students’ date of birth (for safeguarding children, examination or competition entries and other legal requirements), details of students’ medical/special and educational needs where applicable (to ensure safe practice when teaching, for examination entries). Records of products and services purchased and contact preferences.

Optional information: (e.g., previous dance history, voluntary feedback). We also may collect information when you voluntarily provide feedback and interact on our social media sites.

Some of the information is required – and used to manage and run the school. Some of the information is optional and is requested to help us better understand our customers’ needs and is used only as needed for the running of the school.

When taking pictures of students in class or filming performances, NSDS asks for parental permission. NSDS may use the images resulting from the photography/video filming, and any reproductions or adaptations of the images for publicity or other purposes to help achieve the organisational aims. This might include (but is not limited to), the right to use them in their printed and online publicity, social media, press releases, funding applications and for progress tracking.

Noopoor Shyam Dance School does NOT share your personal information with third parties, unless clearly stated. We do NOT sell your data, and neither do we buy data from third parties.

WHY WE COLLECT YOUR PERSONAL INFORMATION?

We collect, use and store personal information only as necessary, for the following purposes:

For legitimate interests, to provide you with information about our products, services and activities and to deal with your requests and enquiries, including complaints
To carry out contractual obligations

Contact details: For the running of NSDS and the provision of services to our customers, including lesson and exam planning (e.g.,change of details regarding a class you attend, etc.), registers, invoicing, to remind you of important deadlines and/or renewal notifications and to monitor the quality of our service.
Additional information: Communication of information to instructors in order for them to carry out their roles including in respect of safeguarding and child protection (e.g., medical history for health and safety), communications to examination boards and competition organisers in order to enter students (names and dates of birth)
Optional information: Used where we have had agreed contact with you and may wish to contact you about events, products/ services and/or news (e.g., contact details to communicate NSDS news and information), to carry out activities based on your consent including for quality monitoring, marketing, publicity, (including on our website and social media pages), for fundraising or other purposes, to help NSDS and its students achieve their goals, including photography and videography of students.

To comply with legal obligations including:

To process your application for employment and where applicable your employment once appointed
Compliance with legal and regulatory requirements and related disclosures e.g., work with children and vulnerable groups, HMRC
Exercising your rights under data protection law and making rights’ requests
Verifying your identity under data protection law, other legal and regulatory requirements and related disclosures.
The establishment and defence of legal claims and rights

You have the ‘right to object’ to legitimate interests relating to you, and can withdraw your consent at any time – see ‘Your Rights’. Please note that withdrawal of consent from one activity does not mean withdrawal from other activities you have given consent to. Withdrawal of consent may affect what we can do for you.

WHO WE SHARE YOUR PERSONAL INFORMATION WITH?

NSDS does not share information with anyone unless relevant and unless the law and our policies allow us to do so. NSDS uses personal information and/or shares it with third parties for the following purposes:

As needed for the running of NSDS, including communicating with parents/guardians through social media (e.g., Whatsapp), or other means unless you have specifically objected to this.
To enter students for examinations, competitions and/or performing arts events.
If required to do so by law or to comply with legal process (e.g., Courts or tribunals to comply with legal obligations and for the administration of justice, police and law enforcement agencies, the Information Commissioner’s Office (ICO).
To protect the rights, property, or personal safety of the public emergency services to protect your vital interests.
Other parties connected to you where you have given consent to contact them as referees, legal guardians or legitimate carers.
When sending letters or parcels, we will share your postal address with the delivery service.
Anyone else where we have your consent or as required by law.

HOW LONG WE KEEP YOUR PERSONAL INFORMATION FOR?

We will hold your personal data for as long as necessary to meet the purpose for which it was originally collected. Personal data will be retained as required by law and stored securely. It will then be destroyed and deleted securely, after 7 years.

You have the right to withdraw consent for personal data to be retained at any time, unless the data is required for financial and tax return purposes for the HMRC. To withdraw, contact us using the “How to contact us” details below.

Medical information is sensitive data and held on the grounds of legitimate interest. This data will only be processed and stored by NSDS when completely relevant to ensure yours or your child’s safety whilst participating in our services or activities. This data will be erased after request to be forgotten, or at any time if it becomes irrelevant

YOUNG USERS:

If you are under 18 and you provide us with information on an application form (online or printed), your parent(s)/guardian(s) permission will be required.

WHAT ARE COOKIES AND HOW DO WE USE THEM?

Cookies are text files that websites place on your own equipment (devices such as computer or smartphone) to store information specific to you. This website does NOT use cookies.

WHERE IS THE INFORMATION STORED?

We use secure technologies to help protect your personal information from unauthorised access, use or disclosure. We store personal information you provide on computer systems which have carefully controlled access and are situated in the UK. The security measures described above ensure that all reasonable steps are taken to protect your personal information. However, the nature of the Internet means that an absolute guarantee of security cannot be offered, and, as with all Internet transactions, you should be aware that there may be a small security risk when disclosing information online.

CAN YOU FIND OUT WHAT PERSONAL INFORMATION WE HOLD ABOUT YOU?

You have the right to access certain personal information held about you. If you wish to make a Data Subject Access Request, you can contact us using our “How to contact us” details below.

YOUR RIGHTS:

1) RIGHT TO BE INFORMED

You have the right to be informed about the collection and use of your personal data. This Privacy Notice meets this.

2) RIGHT TO ACCESS YOUR PERSONAL INFORMATION AND RECTIFY IT

You have the right to confirm that your data is being processed and to access the information we hold about you. You have the right to have inaccurate data rectified or completed if it is incomplete. You can make these requests in writing you can contact us using our “How to contact us” details below.

3) THE RIGHT TO ERASURE (THE ‘RIGHT TO BE FORGOTTEN’)

You have the right to have your data deleted by us when

Your personal information is no longer necessary for the purposes we originally collected it for
You have informed us that you’ve withdrawn your consent and we do not have any legal grounds to continue to hold your data
You object to direct marketing from us
You object to any of the legitimate interests listed above
We did not collect your information lawfully
Where we must comply with legal and regulatory requirements

We give emphasis to personal information collected from children where they may have joined social media groups and/ or may no longer be a child as they may not have been aware of the risks at the time they may have given consent to us.

Your right to erasure may not apply where we hold your information for one of the following reasons:

to comply with a legal obligation
for the performance of a task carried out in the public’s interest or in the exercise of official authority
to exercise the right of freedom of expression and information
for archiving purposes in the public interest, scientific or historical research or statistical purposes where erasure is likely to render impossible or seriously impair the achievement of these purposes
for the establishment, exercise or defence of legal claims.

4) THE RIGHT TO RESTRICT PROCESSING

You have the right to request that we only store your personal information but not use it. This right only applies where:

you contest the accuracy of your personal information and we are working to verify the accuracy of your information
we did not collect your information lawfully
we no longer need your personal information, but you need us to keep it to establish, exercise or defend a legal claim
you have objected (see “right to object”) to us using your personal information and we are considering whether our legitimate grounds override the nature of the objection.

We will not process your restricted information in any way except to store it, unless:

you give your consent to continue processing it
it is for the establishment, exercise or defence of a legal claim
it is for the protection of the rights of another person (natural or legal), or
it is for reasons of important public interest

5) THE RIGHT TO DATA PORTABILITY

You have the right to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability.

The right to data portability only applies:

to personal data an individual has provided to a controller;
where the processing is based on the individual’s consent or for the performance of a contract; and
when processing is carried out by automated means

We are only able to provide some personal information in CSV format and are unable to provide data portability for data outside this.

6) THE RIGHT TO OBJECT

You have the right to object to:

processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority; you must have an objection on ‘grounds relating to your particular situation’. We will stop processing your personal information unless we can demonstrate compelling legitimate grounds for holding your information after considering your rights and expectations and/or it is for the establishment, exercise or defence of a legal claim
direct marketing (including profiling); we will stop processing your personal information as soon as we receive an objection.

You must have “grounds relating to your particular situation” in order to exercise your right to object to processing for research purposes. If we are conducting research where the processing of personal data is necessary for the performance of a public interest task, we are not required to comply with an objection to the processing.

7) THE RIGHT NOT TO BE SUBJECT TO AUTOMATED DECISION MAKING INCLUDING PROFILING

Automated decisions and profiling are used for marketing based organisations. NSDS does NOT use personal data for such purposes.

HOW TO CONTACT US?

For data protection matters, you can contact us via post at NSDS, 66 Drake Road, Harrow, Middlesex HA2 9EA, via email: admin@nsdanceschool.com or phone: 0789400702.

HOW TO COMPLAIN?

If you have any concerns about our use of your personal information, you can complain to us using our “How to contact us” details above in the first instance. You also have the right to complain to the Information Commissioner’s Office. It has enforcement powers and can investigate compliance with data protection law: ico.org.uk

Changes to our privacy policy

We keep our privacy policy under regular review and we will place any updates on this web page. If updated any substantial changes that affect your rights will be communicated directly to you as far as reasonably practicable. This privacy policy was last updated on 26 October 2020.

If you any questions or comments about this Privacy Policy please email us using the “How to Contact Us” details above.