PRIVACY
POLICY

Prima Performing Arts is the data controller for the personal information collected through this website and our classes, events and parent portal.

Company details:
Prima Performing Arts
Company number: SC789356
Registered address: 11 Earlswood Avenue, Montgomerie Park, Irvine, North Ayrshire, United Kingdom, KA11 2FD
Operating address: Fullarton Community Hub, 1 School Lane, Irvine, North Ayrshire, KA12 8DF

info@primaperformingarts.co.uk

We only collect information that is necessary to run the dance school safely and to keep you informed. This includes:

• Parent/carer details: name, email address, mobile number and home address.
• Student details: name, date of birth, age, class and subscription information.
• Safeguarding and health information: emergency contact details, GP information, known health conditions, medications, allergies and additional support needs.
• Consent records: photo/video consent, participation authorisation, emergency medical treatment consent, first-aid consent and agreement to our terms.
• Account and billing data: login details (managed by Supabase Auth), payment history, Stripe customer IDs and subscription status.
• Event data: ticket buyer name and email, attendee/guest names and any answers to custom questions.
• Marketing preferences: whether you have opted in to receive our newsletter and promotional emails.
• Communications: emails we send to you and any delivery/suppression records.

We use personal data to:

• Register students and manage enrolments.
• Provide classes, workshops, performances and events.
• Process subscriptions, registration fees, event tickets and other payments.
• Keep students safe, including emergency contact and medical information.
• Communicate with parents and carers about classes, events, closures, fees and other important updates.
• Send newsletters and marketing emails where you have opted in.
• Maintain attendance records, class lists and waitlists.
• Comply with legal and safeguarding obligations.

We process personal data on one or more of the following grounds:

• Contract: to provide the classes, subscriptions and events you have signed up for.
• Consent: for marketing communications and photo/video use.
• Legitimate interests: for running the school efficiently, managing our relationship with you and keeping records.
• Legal obligation: for safeguarding, insurance, tax and accounting requirements.
• Vital interests: in an emergency, to protect a student's health or safety.

We do not sell personal data. We share it only with trusted service providers who help us run the school and our website:

• Stripe — for payment processing, subscriptions, invoices and refunds. Stripe handles payment card data; we do not store card numbers.
• Supabase — our database and authentication provider, which stores the data described above.
• Omnisend — for email marketing and contact management, only for contacts who have consented.
• Resend — for sending transactional emails such as order confirmations and class updates.
• Google — for address autocomplete (Google Maps/Places) on registration forms.
• Cloudflare — the platform that hosts this application and provides the underlying infrastructure.

Each provider is contractually bound to process data only for the purposes we specify and to keep it secure. Some of these providers may transfer or store data outside the UK/EEA as part of their normal service operation.

We keep personal data for as long as it is needed for the purpose it was collected, and for any legal, safeguarding or accounting period that applies. For example:

• Student and parent records are kept while a student is enrolled and for a reasonable period afterwards.
• Billing and subscription records are kept for tax and accounting purposes.
• Consent records are kept so we can demonstrate compliance.

When information is no longer needed, we delete it securely or anonymise it where appropriate.

You have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate information.
• Ask us to delete your data in certain circumstances.
• Restrict or object to how we use your data.
• Request a copy of your data in a portable format.
• Withdraw consent at any time (for marketing or photos).

To exercise any of these rights, please contact us at info@primaperformingarts.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) if you are concerned about how we handle your data.

Our services are for children and young people, and we take additional care with their information. Parent or guardian consent is required for registration and for any use of a student's photo or video in marketing, social media, or school materials. You can withdraw photo/video consent at any time by contacting us.

We use appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit and secure hosting. Only authorised staff and contractors can access personal data, and they are required to keep it confidential.

Our website uses cookies and similar technologies. For full details, please see our Cookie Policy.

We may update this policy from time to time. The latest version will always be available on this page with the “last updated” date at the top.

If you have any questions about this privacy policy or how we use your data, please contact us:

info@primaperformingarts.co.uk