Status: Draft for review. Not a substitute for solicitor-approved privacy counsel.
Effective: 2026-10-09 · Version: draft-1
1. Who we are
The data controller for anyDance account, marketplace, and site-operation data is the AnyDance sole trader business in the United Kingdom. The registered personal or company name will be added when the operator identity is finalised; until then contact the email below.
- Address: [ADDRESS TO FOLLOW]
- Email: privacy@anydance.uk
- Website: https://anydance.uk
UK GDPR and, where applicable, the EU GDPR apply. An EU representative may be appointed when required for offering services to individuals in the EEA; until then, contact the email above.
2. Roles: controller vs processor
- Operator as controller: creating and securing your anyDance login, marketplace preferences, marketing (with consent), billing of Partners, security logs, and improving the public site.
- Operator as processor: student rosters, class bookings, passes, and attendance that a Partner manages in school admin. For that data the Partner decides purposes and means; we process on their instructions under Partner Terms / a processing schedule.
- Payment providers (for example Stripe) may act as independent controllers for payment fraud and checkout data.
3. Data we process
Depending on how you use the Platform:
- Identity and contact data (name, email, phone)
- Account credentials and authentication tokens
- Booking, pass, and attendance records
- Billing and subscription data for Partners
- Technical logs (IP address, device/browser, error logs)
- Cookie and similar identifiers (see Cookie Notice)
- Content you or a Partner upload (photos, bios, class descriptions)
We do not ask for special-category health data as a core product feature. If a Partner stores notes that include such data, the Partner is responsible for a lawful basis.
4. Purposes and legal bases
- Contract: provide the account, bookings, and Partner subscriptions.
- Legitimate interests: security, fraud prevention, product improvement, B2B sales contact where allowed.
- Consent: optional analytics and marketing cookies; certain marketing emails where consent is required.
- Legal obligation: tax and accounting records where we invoice Partners.
5. Recipients and sub-processors
We use service providers to run the Platform, including for example:
- Vercel – hosting / edge delivery
- Supabase – database, auth, storage
- Stripe – payments (when live card payments are enabled)
- Email / messaging providers used for transactional mail
A current list may be updated in this Notice. Transfers outside the UK/EEA rely on adequacy decisions, the Data Privacy Framework where certified, or standard contractual clauses as applicable.
6. Retention
- Account data: while the account is active, then deleted or anonymised within a reasonable period after closure, unless law requires longer retention.
- Partner billing records: as required by UK accounting rules.
- Security logs: for a limited period needed for security and debugging.
- Guest profiles unused for a long period may be deleted as described in Partner Terms.
7. Your rights
Depending on UK GDPR / GDPR, you may have rights to access, rectify, erase, restrict, port, and object, and to withdraw consent. Contact privacy@anydance.uk. You may complain to the UK Information Commissioner's Office (ICO). If you are in the EEA, you may also contact your local supervisory authority (for example NAIH in Hungary).
For data a Partner controls (school roster), we will point you to the Partner or assist them as processor.
8. Children
Full self-registration is intended for users 16+. Under-16s should use parent/guardian flows where offered. Partners must not invite under-16s using only the child's email without a lawful basis.
9. Security
We apply technical and organisational measures appropriate to the risk (access control, encryption in transit, least privilege). No method of transmission is perfectly secure.
10. Changes
We will update this Notice when our practices change. Material changes will be highlighted on the site or by email where appropriate.