Who we are

Enchant Dance Academy is the data controller for the information described here. We are a children's dance school in Shoreham-by-Sea; our address is on the contact page.

For anything about your data, email contact@enchantdanceacademy.com.

ICO registration: ZC139476

What we collect, and when

Nothing here is collected from you simply for reading the site. Each of the things below happens only because you did something.

Sending an enquiry

What you type into the enquiry form on the contact page is sent to this website and emailed straight to us: your name, your email address, your phone number if you gave one, the class you asked about if you picked one, and your message. The form asks nothing about a child, and we ask you not to write health details about one into it.

It is emailed to us and also kept on this website, so Miss Kayleigh can find your enquiry again and note when she has replied. Your name, phone number and message are encrypted in our database; your email address is not, so that she can reply. Only Miss Kayleigh can see it, she can delete it at any time, and otherwise it is kept for the enquiries period in how long we keep it below. No extra company handles the form for us: it is our own site, and the database and mail provider it uses are the ones listed under who else handles it.

Your children

You tell us about a child either when you book a free trial, or afterwards on your children page if you already have an account. Either way it is the same set of questions, asked once: their first name, their surname, their date of birth, and a phone number to ring in an emergency. If that number is somebody else's rather than your own, we ask whose it is. Medical conditions, allergies, injuries and additional or learning needs are asked for too, and that one is optional — a child can be added, and a class booked, without it.

Booking a trial does not need an account first, and neither does booking a holiday camp or an after school club — an account is made for you from the name and email address you give with the booking. The camp form asks the photograph questions below and does not ask you to agree the parent contract, which covers our weekly classes rather than a camp. The link we email you signs you in to it, and from there you can change what you told us, cancel the trial, or remove the child altogether. If the address turns out to be wrong, Miss Kayleigh sees that the link was never opened before she answers the request.

Until that link is opened, nothing about the child can be read on the account. It matters most when an address is mistyped and turns out to belong to somebody else: what they see when they next sign in is that a trial was booked using their address, the class and the dates, and nothing whatever about a child — no name, no date of birth, nothing you told us about their health. They can say it was theirs, which is what makes the details readable, or say it was not, which deletes the child and the booking outright. If the email simply never reaches you, that same question on your account is how you claim your own booking back.

We ask for a surname so that two children with the same first name are not confused with one another on a register, and for the emergency number so that there is always somebody we can reach while your child is with us.

At each class Miss Kayleigh marks the register on this website: whether your child was there, away, or off ill. Nothing more than that one word is recorded about an absence, and it is kept with the rest of your child's record. She can download a term of it as a spreadsheet, to see who has missed lessons and to give out attendance certificates; that copy has your child's name and those marks and nothing else, is kept privately by her, and is deleted once she has finished with it.

Most families give their own mobile, and leaving the name blank is what tells us that is what it is. If the number you give us is somebody else's, please let them know we hold their name and number for that purpose — they have the same rights over it as you have over yours, and can ask us to change or remove it.

After Miss Kayleigh has confirmed a trial, and before the first class, we ask five separate questions for each child, taken from the parent contract: whether we may photograph or film them at all, whether what we take may be published with their face blurred, whether it may be published unblurred, whether a teacher may correct their technique by touch, and whether a teacher may offer a hand to hold or a sideways hug. Each is answered on its own and each can be changed on its own. We also record whether that child may go to the toilet unaccompanied — that answer covers everything we run at the Shoreham Centre, classes, workshops, camps and shows alike, because it is a communal building and our staff cannot supervise outside the studio space — and, once you have agreed the parent contract for them, which version of it you agreed and when.

You can change any of this, or delete a child altogether, from your children page whenever you like. The one thing you cannot delete yourself is a child who currently holds a place in a class — removing them would leave that place belonging to nobody — so email us and we will do it. A child added by a trial booking whose email link has not been opened is not on that page at all; they are on your account instead, under the question above, and removing them from there deletes them the same way.

Booking a free trial

Booking a trial means telling us about the child who is coming, choosing the class and the week, and giving us your name and email address so we can confirm it. If you are already signed in we ask for none of that again — you choose one of the children already on your account. The booking itself records the class, the week and whether Miss Kayleigh has confirmed it; the child's details are held once, on the child's own record, rather than copied onto the booking.

How the medical field is handled is under your child's health information below.

Having an account

There are no passwords on this site. You enter your email address, we send you a one-time sign-in link, and opening it signs you in. So we hold your email address, the name on the account, and the sign-in links we have issued, which stop working after 30 minutes.

We ask for your name on whichever form makes the account, because signing in itself only needs an email address. It is the parent or carer we should speak to, and it is what puts a name beside your child on the register a teacher takes into the studio. If we somehow do not have it, we will ask you for it the next time you visit your account.

Miss Kayleigh also uses your email address to write to the families in your child's class, or in every class, about the school — a lesson moved, a show coming up. She sends those from her own email with every family's address hidden from the others.

While you are signed in we also keep a record of the session, which includes the IP address and the browser your device reported. That is what lets you stay signed in, and what would show us that somebody else had.

Paying for a place, and for anything from our shop

Two things are bought on this website: a place for your child — in a class for a term, on a holiday camp, or in the after-school club — and our own merchandise, such as a club t-shirt. A place needs an account and the shop does not. An order is held against an account either way: what it was for, what it cost on the day, an order reference, and whether it is paid. An order keeps its own copy of what was bought, so changing a price later never rewrites what you were charged.

For merchandise we also record whether you have collected it, so that we know what to bring to your next class and you can see that it arrived.

While you are choosing, your basket holds what you have put in it and how many, so that it is still there when you come back. Signed in, it is kept against your account; without an account it is kept in your own browser and reaches us only when you pay. If you fill a basket and then sign in, it moves onto your account with you — where a size is in both, we keep the larger number rather than adding them together — and the copy in your browser is deleted at that moment. Either way it is emptied once you have paid for it, and you can take anything out of it yourself at any time.

You can buy from the shop without an account. We ask for your email address at the checkout, because that is where your receipt goes and how we know whose order it is. We make an account for that address at the same time and keep the order against it — so if you later ask for a sign-in link, your order is there waiting. We do not sign you in, and we do not take a password: nothing is ever proved about the address until you open a link we send to it. If an account for that address already exists, the order joins it.

Card details never reach this website. Payment is taken by Stripe in their own secure frame on the page, so the card number, expiry and security code go straight to them and are never seen or stored by us. We keep only their reference for the payment, which is what a refund or a query is traced through. If you use a discount code, the code and what it took off are kept on the order too, so the sum on your receipt adds up.

Uniform is bought from our supplier's own shop, not from this website, so what you give them — your details, sizes and payment — is covered by their privacy notice rather than this one. Our own merchandise is the other way round: you buy it here, so what you tell us about it is covered by this notice.

Photographs and video

Photographs and video published on this site are uploaded by us and stored with our image host. Most of the photography on the site is supplier catalogue imagery. Where we publish a photograph or a video we took ourselves — such as the guide to doing a bun on the uniform page — the paragraph below is what governs it.

If we photograph or film a class or a show, what may be done with it is decided by you, per child, in three of the five answers above: whether we may take it at all, whether it may be published blurred, and whether it may be published unblurred. Publishing needs permission to photograph in the first place — a tick on its own allowing publication is not read as permission to take the photograph. You can withdraw any of those answers at any time on your children page, and we stop using anything it covered. See also the terms page.

Why we are allowed to use it

UK data protection law requires a lawful basis for each purpose. These are ours, in the words the law uses, with what each one actually touches beside it.

Replying to your enquiry: Your contact details and whatever you wrote to us, kept in our mailbox and on this website. Legitimate interests — answering somebody who has got in touch with us.
Your account, a trial, and a place in a class: Your email address, the sign-in links issued to it, your session record, your children's names and dates of birth, what they are booked onto, and whether they came to each class. Performance of a contract — providing the classes you asked us for.
Keeping your child safe in class: Medical conditions, allergies, additional or learning needs, where you have chosen to tell us. Your explicit consent — the Article 9(2)(a) condition for health information. See below.
Photographing and publishing photographs of your child: What we take in class or at a show, and where it is used. Your consent, given as the separate answers on your children page and withdrawable there at any time.
Taking payment for a place — a term in a class, a camp, or the club — and for our own merchandise: What you booked, what it cost, and the payment reference from Stripe. Performance of a contract, and a legal obligation for keeping the financial record of it afterwards.

These are Miss Kayleigh's decisions as the person responsible for the school's data, and they will be confirmed at the next review of this notice. If any of them changes, this page changes with it.

Your child's health information

Medical conditions, allergies, additional and learning needs are special category data under UK GDPR, and here the person they are about is a child. Using them lawfully needs a separate Article 9 condition on top of an ordinary lawful basis, and ours is your explicit consent, under Article 9(2)(a).

That means three things, and each of them is how the page and the form actually behave. It is optional — the field can be left empty, and a child can be added and a class booked without writing anything in it. It is given on its own, by filling in that one field for that one child, rather than bundled into agreeing to anything else. And you can withdraw it whenever you like, by clearing the field or deleting the child on your children page, which takes effect immediately and does not affect anything done while it stood.

This is the same wherever you write it — booking a trial, or on your children page afterwards. It is encrypted in the database either way, and Miss Kayleigh is the only person who reads it.

What you write is never included in an email, never written to a log, and is not visible to anyone but Miss Kayleigh; and it is encrypted in the database rather than stored as readable text.

For shows and events, where the website is not to hand, Miss Kayleigh can download the register to her own device and print it. That copy includes what you have written here and your emergency number. She keeps it safe while it is needed and destroys it afterwards.

How it is protected

The site runs over HTTPS, and access to the parts of it that hold your information requires a sign-in link sent to your own mailbox — there is no password to guess or reuse.

Your child's name and surname, your emergency contact's name and number, and anything you write about their medical or learning needs — and the name, phone number and message of an enquiry sent from the contact page — are encrypted before they are written to the database, with a key held only by the running website. If the database itself, a backup or a copy of it were ever obtained, those fields would be unreadable without also obtaining that key.

Being straightforward about what that does not do: it protects against the database being taken on its own. It does not protect against the website itself being compromised, or the key being obtained, because the site must be able to read those values in order to show them to Miss Kayleigh. It is one lock, and it is worth having, but it is not a guarantee.

Who else handles it

We do not sell your details and we do not share them for marketing. Your information is handled by the companies that run the site for us, each only for that purpose and under contract:

Cloudflare — serves the website itself.
Starkey Digital — builds and maintains the site, and hosts the database, the temporary cache that sits in front of it, the service that resizes images for display, and the error log the site reports faults to. That error log is deliberately sent no free text: it records what kind of fault happened and where in the code, never anything you or your child typed.
Wasabi — stores photographs, images and video published on the site. Images are resized for display by our image service; video is streamed from it by the site itself.
MXRoute — delivers the emails we send, including your sign-in links, the enquiries sent from the contact form, and what Miss Kayleigh writes to a class from the school's mailbox.
Stripe — takes payment for the places you book and holds the card details we never see. Stripe uses that information for its own fraud-prevention purposes as well as ours.

Some of these are companies based outside the UK. Where information is handled outside the UK, that transfer is covered by the safeguards UK data protection law requires for it. If you want to know which of them holds a particular thing, ask and we will tell you.

Beyond that we would only pass information to somebody else where we are legally required to — for example a safeguarding referral, or a medical emergency where paramedics need to know about a condition. What happens in that second case — who is called, who stays with your child, and who rings you — is in our health and safety policy; when and to whom we would make the first is in our safeguarding policy, which also states that data protection law does not stand in the way of it.

Cookies and tracking

This site runs no analytics, no advertising and no tracking of any kind. There is no Google Analytics, no tag manager and no social media pixel. Typefaces are served from this site rather than from a third party, so loading a page tells nobody else that you visited.

The Google reviews on the home and about pages are fetched from the school's Google Business Profile by Starkey Digital, our supplier, and passed to this website, never by your browser — so reading them tells Google nothing about you. Reviewers' profile photographs are not shown, for the same reason. Each one is shown under the first name its author published it under on Google, and never the surname. Which reviews appear is the school's choice: a new review is shown only once we have chosen it, and we can take any of them off this site. All we keep is that choice, against Google's own reference for the review — never its words or its author. The review itself is changed or deleted on Google rather than here.

One cookie is set, and only when you sign in: the cookie that keeps you signed in. It is cleared when you sign out. Nothing is set for a visitor who is only reading the site, which is why there is no cookie banner.

Stripe's payment form sets cookies of its own to detect fraud. Their code is loaded only at the moment you go to pay for a place, and never for somebody who is reading the site.

How long we keep it

Nothing on this site deletes anything on a timer. What expires on its own is a sign-in link, 30 minutes after it is issued, and a session, when you sign out or when it runs out. So what follows is how long we keep things, not a job that runs: you can delete a child yourself at any time, and anything else we delete when you ask us to.

Enquiries, and trial requests that did not lead to a place — kept for up to twelve months.
Orders and payment records — kept for six years, which is how long the law requires financial records to be kept.
A child's record, what they have been enrolled in, and the register of which classes they came to — kept while they are dancing with us and until their twenty-first birthday. That is longer than the rest and it is deliberate: a claim for an injury to a child can be brought until they are 21, and destroying the record before then would leave both your family and the school without it.
Your account — kept until you close it, and for six months afterwards. You can close it yourself on your account, and signing in again reopens it.

Ask us to delete something sooner and we will, unless one of the reasons above means we have to keep it — in which case we will tell you which and for how long.

Your rights

You can ask us for a copy of the information we hold about you or your child, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, or object to it. Where we relied on your consent you can withdraw it, and that does not affect anything done before you did.

Email contact@enchantdanceacademy.com and we will respond within one month. There is no charge.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk, and you can do that without coming to us first.

Changes to this notice

This notice takes effect on 23 August 2026. We will update this page when what we do changes, and anything still marked as to be confirmed is outstanding rather than settled.