Noopoor Shyam Dance School (NSDS) is committed to protecting you and your dependents’ personal information. We are committed to providing a safe environment for all our customers, employees, casual and freelance workers and everybody who comes into contact with us, both physically and virtually (online). This Privacy Statement relates to the use of any personal information provided to us online or via application forms, telephone, email exchange, letters or correspondence.
Whenever you provide such information, we are legally obliged to use your information in line with current legislation concerning the protection of personal information, including the The Data Protection Act 2018 (‘DPA 2018’) and General Data Protection Regulation (‘GDPR’).
DATA PROTECTION PRINCIPLES
The legislation sets out various data protection principles. These include that personal information is:
The legislation conveys various individual rights. These include the following:
Noopoor Shyam Dance School is the data controller within the meaning of the GDPR. Our contact address is NSDS, 66 Drake Road, Harrow, Middlesex HA2 9EA; Telephone: 0789400702; email: firstname.lastname@example.org
We may amend this privacy notice from time to time. If we do so, we will advise you and make available the amended privacy notice.
The legislation requires that there is a clear legal basis for processing personal information. In general Noopoor Shyam Dance School relies on the individual’s consent in order to process their data.
When you participate in or sign up to any Noopoor Shyam Dance School classes, activity or workshop, we may collect and store personal information about you. It is a requirement that you provide the personal data we request in order for us to manage and run the school. If you do not provide the information we request, we may not be able to provide professional services to you.
Depending on how you are engaging with us this can consist of information such as:
Contact details: Full name of student and parent contact details (for students below 18 years of age), email address(es), telephone numbers (home and/or mobile), postal address; where applicable, personal information about persons connected to students such as legal guardians/legitimate carers - you must have their authority to provide their information to us.
Additional information: Students’ date of birth (for safeguarding children, examination or competition entries and other legal requirements), details of students’ medical/special and educational needs where applicable (to ensure safe practice when teaching, for examination entries). Records of products and services purchased and contact preferences.
Optional information: (e.g., previous dance history, voluntary feedback). We also may collect information when you voluntarily provide feedback and interact on our social media sites.
Some of the information is required – and used to manage and run the school. Some of the information is optional and is requested to help us better understand our customers’ needs and is used only as needed for the running of the school.
When taking pictures of students in class or filming performances, NSDS asks for parental permission. NSDS may use the images resulting from the photography/video filming, and any reproductions or adaptations of the images for publicity or other purposes to help achieve the organisational aims. This might include (but is not limited to), the right to use them in their printed and online publicity, social media, press releases, funding applications and for progress tracking.
Noopoor Shyam Dance School does NOT share your personal information with third parties, unless clearly stated. We do NOT sell your data, and neither do we buy data from third parties.
We collect, use and store personal information only as necessary, for the following purposes:
For legitimate interests, to provide you with information about our products, services and activities and to deal with your requests and enquiries, including complaints
To carry out contractual obligations
To comply with legal obligations including:
You have the ‘right to object’ to legitimate interests relating to you, and can withdraw your consent at any time – see ‘Your Rights’. Please note that withdrawal of consent from one activity does not mean withdrawal from other activities you have given consent to. Withdrawal of consent may affect what we can do for you.
NSDS does not share information with anyone unless relevant and unless the law and our policies allow us to do so. NSDS uses personal information and/or shares it with third parties for the following purposes:
HOW LONG WE KEEP YOUR PERSONAL INFORMATION FOR?
We will hold your personal data for as long as necessary to meet the purpose for which it was originally collected. Personal data will be retained as required by law and stored securely. It will then be destroyed and deleted securely, after 7 years.
You have the right to withdraw consent for personal data to be retained at any time, unless the data is required for financial and tax return purposes for the HMRC. To withdraw, contact us using the “How to contact us” details below.
Medical information is sensitive data and held on the grounds of legitimate interest. This data will only be processed and stored by NSDS when completely relevant to ensure yours or your child’s safety whilst participating in our services or activities. This data will be erased after request to be forgotten, or at any time if it becomes irrelevant
If you are under 18 and you provide us with information on an application form (online or printed), your parent(s)/guardian(s) permission will be required.
We use secure technologies to help protect your personal information from unauthorised access, use or disclosure. We store personal information you provide on computer systems which have carefully controlled access and are situated in the UK. The security measures described above ensure that all reasonable steps are taken to protect your personal information. However, the nature of the Internet means that an absolute guarantee of security cannot be offered, and, as with all Internet transactions, you should be aware that there may be a small security risk when disclosing information online.
You have the right to access certain personal information held about you. If you wish to make a Data Subject Access Request, you can contact us using our “How to contact us” details below.
You have the right to be informed about the collection and use of your personal data. This Privacy Notice meets this.
You have the right to confirm that your data is being processed and to access the information we hold about you. You have the right to have inaccurate data rectified or completed if it is incomplete. You can make these requests in writing you can contact us using our “How to contact us” details below.
You have the right to have your data deleted by us when
We give emphasis to personal information collected from children where they may have joined social media groups and/ or may no longer be a child as they may not have been aware of the risks at the time they may have given consent to us.
Your right to erasure may not apply where we hold your information for one of the following reasons:
You have the right to request that we only store your personal information but not use it. This right only applies where:
We will not process your restricted information in any way except to store it, unless:
You have the right to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability.
The right to data portability only applies:
We are only able to provide some personal information in CSV format and are unable to provide data portability for data outside this.
You have the right to object to:
You must have “grounds relating to your particular situation” in order to exercise your right to object to processing for research purposes. If we are conducting research where the processing of personal data is necessary for the performance of a public interest task, we are not required to comply with an objection to the processing.
Automated decisions and profiling are used for marketing based organisations. NSDS does NOT use personal data for such purposes.
HOW TO CONTACT US?
For data protection matters, you can contact us via post at NSDS, 66 Drake Road, Harrow, Middlesex HA2 9EA, via email: email@example.com or phone: 0789400702.
HOW TO COMPLAIN?
If you have any concerns about our use of your personal information, you can complain to us using our “How to contact us” details above in the first instance. You also have the right to complain to the Information Commissioner’s Office. It has enforcement powers and can investigate compliance with data protection law: ico.org.uk