Privacy Policy

Grooveability ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our dance class booking platform.

Data Controller: Grooveability is the data controller for the personal data we process. Our platform is provided by BL Media, who acts as our data processor. BL Media processes your data only on our instructions and in accordance with this Privacy Policy.

Personal Information

• Account Information: Name, email address, phone number
• Payment Information: Billing details processed securely through Stripe
• Children's Information: Names, dates of birth, gender, medical/allergy notes
• Booking Information: Class preferences, attendance records, session history
• Communication Data: Messages, feedback, and support requests

Technical Information

• IP address and browser information (anonymized for analytics)
• Device information and operating system
• Usage data and analytics (privacy-friendly, no cookies used)
• Cookies and similar technologies (see our Cookie Policy)

Analytics: We use BL Media's privacy-friendly analytics service that collects anonymized usage data via 1×1 pixel requests without using cookies. See their privacy policy: https://metrics.bl-media.co.uk/privacy

• Service Delivery: Process bookings, manage accounts, and provide dance classes
• Payment Processing: Handle payments securely through Stripe
• Communication: Send booking confirmations, reminders, and important updates
• Safety: Maintain medical/allergy information for child safety
• Improvement: Analyze usage to improve our services
• Legal Compliance: Meet regulatory requirements and protect our rights

We use your personal data only where the law allows us to, including:

• Contract Performance: To provide our dance class booking services and fulfill our obligations to you
• Legitimate Interests: To improve our services, ensure child safety, and prevent fraud
• Consent: For marketing communications and non-essential cookies (you can withdraw consent at any time)
• Legal Obligation: To comply with safeguarding, child protection, and tax laws
• Vital Interests: To protect the health and safety of children in our care

We may share your information with:

• BL Media: Our data processor who provides our platform services and privacy-friendly analytics
• Stripe: For secure payment processing (data may be transferred to the US under Standard Contractual Clauses)
• SMS Providers: For booking confirmations and reminders
• Service Providers: Who help us operate our platform under strict data processing agreements
• Legal Authorities: When required by law or to protect safety

International Data Transfers

Some of our service providers may be located outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the UK
• Adequacy decisions by the UK government
• Binding corporate rules or certification schemes

We never sell your personal data to third parties.

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit and at rest
• Secure payment processing through Stripe
• Regular security assessments and updates
• Access controls and staff training
• Secure data centers and backup procedures

Under UK GDPR, you have the following rights:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data
• Portability: Receive your data in a structured format
• Restriction: Limit how we process your data
• Objection: Object to certain types of processing

To exercise these rights, contact us at data.grooveability@bl.media. We will respond to your request within one month.

Marketing Communications

If you have consented to receive marketing communications, you can withdraw your consent at any time by:

• Clicking the unsubscribe link in any marketing email
• Updating your preferences in your account settings
• Contacting us directly at data.grooveability@bl.media

We retain your data for as long as necessary to provide our services and comply with legal obligations. Specific retention periods are:

Retention Periods by Data Type

• Account Information: 7 years after account closure (for tax and legal purposes)
• Payment Records: 7 years (HMRC requirement)
• Booking Records: 3 years after last booking (for service history)
• Children's Medical Information: Until child reaches 18, then 3 years (safeguarding requirements)
• Communication Logs: 2 years (for customer service purposes)
• Marketing Consent: Until withdrawn or 2 years of inactivity
• Technical/Log Data: 1 year (for security and performance monitoring)

After these periods, we will securely delete or anonymize your data unless we have a legal obligation to retain it longer.

We collect limited information about children to provide safe dance classes:

• Names and dates of birth for age-appropriate classes
• Medical/allergy information for safety
• Attendance records for class management

Parental Consent and Verification

• We verify parental consent before collecting any child's data
• Parents can request access to, correction of, or deletion of their child's data
• We never use children's data for marketing purposes
• Children's data is only used for safeguarding and class management

Legal Basis for Children's Data

We process children's data under:

• Parental Consent: For data collection and processing
• Legitimate Interests: To ensure child safety and provide appropriate classes
• Vital Interests: To protect health and safety in emergency situations
• Legal Obligation: To comply with safeguarding and child protection laws

You have the right to lodge a complaint with the UK's data protection supervisory authority if you believe we have not handled your personal data in accordance with the law.

If you have any questions about this Privacy Policy or our data practices, please contact us: