Privacy Policy

1. Who we are

Bollywood Dancercise (“we”, “us”, “our”) provides Bollywood dance-fitness classes, courses, and bespoke/1-1 sessions, delivered in person at our dance studio in Petts Wood (Orpington, Kent, UK) and online, with bookings taken through this website.

For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), we are the data controller for the personal data described in this policy.

• Data controller: Bollywood Dancercise
• Contact for data matters: admin@bollywooddancercise.com

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

2. What personal data we collect

3. How we use your data and our lawful basis

Under UK GDPR we must have a lawful basis for each use:

• Performance of a contract — managing your account, bookings, and payments.
• Legitimate interests — site security, fraud prevention, and basic service improvement, balanced against your rights.
• Consent — using your image for marketing (section 5) and sending optional marketing emails. You can withdraw consent at any time.
• Legal obligation — keeping financial records for the period required by law.
• Explicit consent / health & safety — processing your health declaration (section 4).

4. Health information (special category data)

Your health declaration is special category data and receives extra protection. We collect it only to make a reasonable judgment about your safety in a physical-activity class. We rely on your explicit consent and on the public-interest health basis. We keep it confidential, restrict access to the instructor, and retain it only as described in section 8. Providing health information is voluntary, but if you choose not to disclose a relevant condition we may be unable to ensure a class is suitable for you, and you participate on that basis.

5. Photography, Video, and Media Release

5.1 Recording of Classes — We routinely photograph and record video of our classes for promotional and commercial purposes. By participating in a Bollywood Dancercise class, you acknowledge that photography, audio, and video recording may occur.

5.2 Use of Media — With your explicit consent (provided at the time of booking or registration), you grant Bollywood Dancercise a perpetual, royalty-free, worldwide, and irrevocable licence to use your image, likeness, and voice in any media captured during our classes. This includes, but is not limited to:

• Promotional materials on our website.
• Organic and paid social media posts (e.g., Instagram, Facebook, TikTok, YouTube).
• Commercial video on demand, digital products, and paid subscriber content.

5.3 Ownership — Bollywood Dancercise retains all copyrights and ownership rights to all photography and video footage captured during our events and classes. You understand that you will not receive any compensation or royalties for the use of this media.

5.4 Your Right to Opt-Out — We respect your privacy. If you do not wish to be photographed or recorded, please do not agree to the media release at checkout, and inform the instructor at the beginning of the class. We will direct you to a designated “camera-free” area of the studio so you can participate fully without being captured on film. You may withdraw your consent for future use of your image at any time by contacting us, though this will not apply to media that has already been published or incorporated into paid content.

6. Who we share your data with

We do not sell your data. We share it only with service providers who help us run the business, under contracts that require them to protect it:

• SumUp — payment processing.
• Supabase / Vercel — website hosting and database (hosted in London).
• Resend — transactional and (where consented) marketing email.
• Sentry — error monitoring.
• Google (Google Analytics) — website analytics, only where you have consented to analytics cookies (see section 10).
• Professional advisers, or authorities where we are legally required to disclose.

7. International transfers

Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards (UK adequacy regulations or the International Data Transfer Agreement / Addendum). This includes Google LLC (Google Analytics), which is based in the United States and which we rely on only where you have consented to analytics cookies.

8. How long we keep your data

• Account and booking data: for as long as your account is active, then 24 months after your last activity.
• Financial/payment records: 7 years to meet HMRC/legal requirements.
• Health declarations: duration of membership + 12 months, then securely deleted.
• Images: until you withdraw consent or we no longer use them for promotion.
• Error logs: 7 days.

9. Your rights

You have the right to: access your data; correct it; have it erased; restrict or object to processing; data portability; and to withdraw consent at any time. To exercise any right, email admin@bollywooddancercise.com. We will respond within one month. There is normally no charge.

10. Cookies

We use cookies — small text files stored on your device — in two categories.

Strictly necessary cookies. These are essential to operate the core functions of our website: logging you into secure areas, remembering your session, and keeping the platform secure. Because they are essential to provide the services you have requested, they are set automatically and do not require your prior consent. We also set a short-lived first-party cookie (dn_session) that lets us correlate our own server logs for a single visit so we can diagnose faults; it holds only a random identifier and no personal data.

Analytics cookies (consent required). With your consent, we use Google Analytics 4 to understand how visitors use the site so we can improve it. Google Analytics sets first-party cookies named _ga and _ga_<id> to distinguish visitors and measure sessions. Under the Privacy and Electronic Communications Regulations (PECR), analytics cookies are not strictly necessary, so we set them only after you accept them using the cookie banner shown on your first visit. If you reject, no analytics cookies are set and Google Analytics is not loaded.

• Lawful basis: your consent.
• Retention: the _ga / _ga_* cookies persist for up to 2 years; your recorded choice (dn_consent) is kept for about 6 months, after which we ask again.
• Withdrawing consent: you can change your mind at any time by clearing the dn_consent cookie in your browser (which brings the banner back) or by blocking cookies in your browser settings. You can also email admin@bollywooddancercise.com.

We use Google Analytics with Google Consent Mode and do not enable Google Signals or advertising features. Google Analytics is never our source of truth for anything that affects your account, bookings, or payments.

You can set your browser to block cookies, but blocking strictly necessary cookies will cause parts of the website to stop working.

11. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections, restricted administrative access, and two-factor authentication on key accounts. No system is perfectly secure, but card data never reaches our servers because payments are handled by SumUp.

12. Changes to this policy

We may update this policy from time to time. The “last updated” date shows the current version, and material changes will be notified through the website.