Privacy Policy

1. Introduction and Overview

Welcome to Spinto Dance ("we," "our," or "us"). At Spinto Dance, we are committed to protecting your privacy and safeguarding your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website spintodance.com, use our services, or interact with us in any way.

We operate in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK privacy laws and regulations.

By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information Collection

We collect information in the following ways:

2.1 Information You Provide to Us

We collect personal information that you voluntarily provide to us when you:

• Register for classes or workshops
• Purchase memberships or services
• Create an account on our website
• Sign up for our newsletter
• Contact us via email, phone, or contact forms
• Complete surveys or provide feedback
• Participate in promotions or competitions

This information may include:

• Contact details (name, email address, phone number, postal address)
• Demographic information
• Payment information (credit card details, billing address)
• Health information relevant to your yoga practice
• Emergency contact details
• Photos or videos (if you consent to being photographed during classes or events)

2.2 Information Collected Automatically

When you visit our website, we may automatically collect certain information about your device and usage patterns. This includes:

• IP address
• Browser type and version
• Operating system
• Referring website
• Pages viewed and time spent on our website
• Links clicked
• Access times and dates

3. Use of Information

We use the information we collect for the following purposes:

3.1 Provide and Manage Services

• Process class bookings and payments
• Manage your account and membership
• Provide the services you request
• Communicate with you about your bookings, account, or services
• Respond to your inquiries and provide customer support

3.2 Improve Our Services

• Analyze usage patterns to improve our website and services
• Develop new products, services, or features
• Conduct research and analysis

3.3 Marketing and Communication

• Send newsletters, promotions, and marketing communications (if you have opted in)
• Inform you about special events, workshops, or offers
• Provide information about changes to our services or policies

3.4 Legal and Safety Purposes

• Comply with legal obligations
• Enforce our terms and conditions
• Protect the rights, property, or safety of our users, staff, or others
• Prevent fraud or abuse of our services

We will only process your personal data when we have a legal basis to do so, such as your consent, contract fulfillment, legal obligation, or our legitimate interests (where these do not override your rights and freedoms).

4. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and personalize content.

4.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly.
• Preference Cookies: Allow the website to remember choices you make.
• Analytics Cookies: Help us understand how visitors interact with our website.
• Marketing Cookies: Used to track visitors across websites to display relevant advertisements.

4.2 Your Cookie Choices

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies, accept cookies from specific websites, or disable cookies altogether. However, if you disable or refuse cookies, some parts of our website may become inaccessible or not function properly.

4.3 Third-Party Analytics

We use services like Google Analytics to help us understand how our website is used. These services may collect information about your online activities over time and across different websites.

5. Third-Party Sharing

We may share your personal information with the following third parties:

5.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as:

• Payment processors
• Class booking and management systems
• Email marketing platforms
• Website hosting and maintenance providers
• Analytics services
• Customer support services

These service providers are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

5.4 With Your Consent

We may share your information with third parties when you have given us your consent to do so.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes without your explicit consent.

6. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.

6.1 Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Specifically:

• Account information: Retained while your account is active
• Transaction records: Retained for 7 years for tax and accounting purposes
• Health information: Retained for the duration of your active membership plus 3 years
• Marketing preferences: Retained until you opt out or request deletion

6.2 Security Measures

We have implemented security measures including:

• Encryption of sensitive data
• Secure networks and servers
• Regular security assessments
• Access controls and authentication procedures
• Staff training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7. User Rights

Under UK data protection laws, you have certain rights regarding your personal information:

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete information.
• Right to Erasure: You can request that we delete your personal information in certain circumstances.
• Right to Restrict Processing: You can ask us to restrict the processing of your data in certain circumstances.
• Right to Data Portability: You can request a copy of your data in a machine-readable format.
• Right to Object: You can object to our processing of your personal data in certain circumstances.
• Rights Related to Automated Decision Making: You have rights related to automated decision making and profiling.

To exercise any of these rights, please contact us using the details provided in the "Contact Information" section. We will respond to your request within one month. You will not have to pay a fee to access your personal data or exercise any of your other rights unless your request is clearly unfounded, repetitive, or excessive.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

8. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information from our records as soon as possible.

If you are a parent or guardian and you believe your child has provided us with personal information, please contact us so that we can take appropriate action.

For children aged 16-18 who attend our classes, we require parental consent for the collection and processing of their personal data.

9. International Data Transfers

We primarily store and process your data within the United Kingdom and the European Economic Area (EEA). However, some of our service providers may be based outside the UK and EEA, which means your personal data may be transferred to countries that may not provide the same level of data protection as the UK.

When we transfer your personal data outside the UK or EEA, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards, including:

• Using specific contracts approved for use in the UK that give personal data the same protection it has in the UK
• Transferring data to countries that have been deemed to provide an adequate level of protection for personal data by the UK government
• Where we use providers based in the US, we may transfer data to them if they are part of a framework that ensures they provide similar protection to personal data shared between the UK and the US

10. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will be indicated by an updated "Last Updated" date at the top of this Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of the changes.

If we make material changes to this Privacy Policy, we will notify you either through the email address you have provided or by placing a prominent notice on our website.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Our Data Protection Officer can be contacted at the email address above.

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy.