GDPR and Hot Steppers School of Dance.
This is a notice is addressed to members, both past and current.
_______________________________________________________________________________________________________________
GDPR stands for General Data Protection Regulation and will apply in the UK from 25 May 2018. This new regulation will replace the Data Protection Act 1998. The government has confirmed that the UK’s decision to leave the EU will not affect the GDPR.
GDPR states that personal data should be processed fairly and lawfully and collected for specified and legitimate purposes. Individual data will not be processed without their knowledge or consent. GDPR covers personal data relating to individuals. Hot Steppers School of Dance is committed to protecting the rights and freedoms of individuals with respect to processing children’s, parent’s, visitor’s and staff’s data.
The 2018 GDPR gives individuals the right to know what information Hot Steppers School of Dance holds about them. It provides a framework to ensure that personal information is handled properly.
This policy has been produced as we take your privacy seriously and we know how important it is to you. Hot Steppers School of Dance wants to be transparent on how we obtain, handle, use and store your data.
1. The right to be informed
Hot Steppers School of Dance is required to collect and manage certain data. We are required to know:
Parent’s / Guardian names
Address/ es
Telephone Numbers
Email address
Children’s full names
Children’s date of birth
Any SEN requirements
Health information
School attending (where relevant)
The above information may need to be passed onto Surrey, Berkshire and Hampshire County Council’s in the event of a dance show. This data will be sent to them by secure file and will then be covered by their on GDPR policy.
Hot Steppers School of Dance is also required to collect certain data from visitors to the dance school. This would include (and is not restricted to) visitor’s names, telephone number, child name and company name if applicable. This is in order for Hot Steppers School of Dance to comply with out health and safety and safeguarding polices.
As an employer, Hot Steppers School of Dance is required to appropriately store data on its teaching staff. This would include:
Full names (including any previous names)
Telephone numbers
Addresses
Email addresses
Date of birth
National Insurance Number (NIC)
Photo Identification
Bank details
DBS details
Some of this information may be shared in order to obtain Disclosure and Barring Service checks (DBS). This information is shared via Mayflower Online DBS checks and will be submitted via a secure website.
Hot Steppers School of Dance does places Cookies on its website in order to collect for Google Analytics. All of this data is anonymous.
2. The right of access
Individual’s have the right to make a request regarding to their data and Hot Steppers School of Dance will need to make a response within 30 days. Hot Steppers School of Dance have the right to refuse a request if we have the lawful obligation to retain data. We would inform the individual the reasons behind any refusal. The individual does have the right to then complain to the ICO if they are not happy with the decision.
3. The right to erasure
You have the right to request the deletion of your data where there is no compelling reason for its continued use. However, Hot Steppers School, of Dance has a legal duty to keep children’s and parent’s data for a reasonable time:
3 years after leaving the dance school
Children’s accident reports will be held for 19 years or until a child turns 21 years
22 years (or until the child reaches 24 years) for child protection records
Staff records for 6 years after they have left Hot Steppers School of Dance employment.
Media and photo consent data will be kept indefinitely.
This data will be kept securely and then shredded after the legal retention period.
4. The right to restrict processing
Parent’s, visitor’s and staff can object to Hot Steppers School of Dance processing their data. This means that their data may be securely stored but not used in any way, for example communication.
5. The right to data portability
On occasions Hot Steppers School of Dance will be required to transfer data from one IT system to another. Such as Hot Steppers School of Dance to Surrey or Hampshire County Council to obtain BOPA licenses for dance shows. The data would be passed via secure files and the other companies involved will also have their own procedures in place to ensure they are GPDR compliant.
6. The right to object
Parent’s, visitor’s and staff can object to their data being used for certain activities such as research or marketing.
7. The right not to be subject to automated decision-making, including profiling
Automated decisions and profiling are used for marketing based organisations. Hot Steppers School of Dance does not use personal data for these purposes. Nor will your data be sold to any other bodies for such purposes.
Storage and use of personal information by Hot Steppers School of Dance
All hard paper copies of children’s and staff records are kept in a locked folder until all student’s have been registered (by their parent) online at Dance Studio Pro (DSP). At this time all paper files will be shredded. Access to DSP is only granted with a secure password or fingerprint. All children’s data will be stored online from January 2020.
These records (particularly children’s records) may be accessed by authorised members of staff for emergency reasons only and will be treated as highly confidential.
For any data relating to a waiting lists; such as names and telephone numbers, this data will be stored in a password protected file. If the individual did not join Hot Stepper’s School of Dance this data will be deleted.
Access to computers and iPads belonging to Hot Steppers School of Dance are locked with a password and/or fingerprint and passcode. When a member of staff leaves Hot Steppers School of Dance these codes will be changed immediately.
Any data stored on a UBS stick will be kept in a locked file or will be password protected.
Hot Steppers School of Dance stores visual personal data in the form of photographs, video footage or sound recordings. No names are stored or tagged with images in photo albums, displays, Hot Steppers School of Dance website or Hot Steppers School of Dance social media sites. You have the right to opt out of any photography/ filming being taken.
Mobile phones belonging to Hot Steppers School of Dance will be locked by a passcode and fingerprint. It will be wiped immediately if lost or stolen. Should the iPhone be replaced by an android phone it will be encrypted by form of an app.
How is my data used?
Your contact details will be used to keep you informed on class changes, fees, term dates, registration to classes, invoicing, special announcements, and primarily to make contact should your child be taken ill during a class/ show.
If you choose to ‘add’ or ‘follow’ Hot Steppers School of Dance on social media then you may also be contacted via these platforms for announcements but not for emergency purposes.
Who can access data?
Only members of staff from Hot Stepper’s School of Dance can access your information. As stated above the information is locked or password protected.
Opt Out Options
If after reading Hot Steppers School of Dance’s GDPR policy and wish not wish for any of your data to be used (communication) then please contact Catherine Fanning (Dance School Principal). Your preferred settings will be changed and you will no longer be contacted by any member of Hot Steppers School of Dance. Please be advised that in the event of an emergency it would mean that we would not be able to make contact.
For further information please do not hesitate to contact us.
Catherine Fanning
Principal Teacher
Hot Steppers School of Dance.
__________________________________________________________________________________________________________________________________________________________
Privacy Policy at Hot Steppers School of Dance
Hot Steppers School of Dance prides itself in respecting your privacy and we will always commit to maintaining your trust. This Privacy Policy applies to the Hot Steppers School of Dance website regardless of using a PC, mobile phone or tablet to access our website.
What information do we collect?
We will keep and store the information you give us (see GDPR Policy) and we will collect information on how you use our website via Google Analytics to enable us to improve our website.
Sharing your personal information
We may use the information we collect from you to:
-Provide you with the services you request
-Provide you with customized content
-Improve our services to ultimately improve your experience.
We may share your information with:
-Business partners who have signed non-disclosure agreements. Examples may be website builders, security advisors.
-Service partners that provide services on our behalf. Examples would include Stripe to take your payments, Dance Studio Pro to send you emails and Twilio to send texts via Dance Studio Pro.
-Law enforcement – when requited to protect Hot Steppers School of Dance and its users.
We are 100% committed to keeping your email address and telephone numbers confidential. We will not see, rent or lease your data to third parties unless we are required to by law. We do not store or save any credit card or banking information in our system. All financial information is stored by the merchant processor in PCI compliant facilities.
Data Retention
We will retain your information as long as needed. Please see our Terms and Conditions for more specific time frames.
Data Security
The security of all your data is a high priority at Hot Steppers School of Dance. We ensure that all information is stored in accordance with the laws of GDPR regardless of if it is paper or online. We also ensure the safe destruction of all data to ensure there is no misuse or improper disclosure. We also work with outside bodies who ensure their own privacy policies are tight. These include councils, Stripe and Dance Studio Pro. Unfortunately, no data security system can be guaranteed 100% secure.
Collection of Data
Hot Steppers School of Dance uses Google Analytics to track and record information that your browser sends. This data may include; pages viewed and time spent on the Hot Steppers’ School of Dance website. Data collected in anonymous.
Cookies
Cookies are used on our site to collect information for Google Analytics and is anonymous. We cannot identify individuals. If you choose not to accept cookies you may experience a loss of site functionality.
Use of Service By Minors
The Hot Steppers website is not targeted to under 18’s and we request tey fo not provide personal information via our website.
International Data Transfer
Hot Steppers School of Dance is a UK based company and there is no reason that your data will be shared with any other country.
Sensitive Information
We ask that you do not send us any sensitive information (e.g. information related to racial or ethnic origin, political opinions, religion etc).
Changes to our Privacy Policy
If we decide to make any changes to our privacy policy we will post those on this page.
Contact us
If you have any questions regarding this Privacy Policy please email us at Hotsteppersdance@hotmail.co.uk.