Privacy policy

This policy explains what personal data Step 2 The Beat – Dance Academy ("we", "us") collects through this website and when you join our classes and events, why, and what your rights are under the UK GDPR and the Data Protection Act 2018.

Who we are

Step 2 The Beat – Dance Academy is run by Tiago Maia, who is the data controller for the personal data described here. You can reach us through the contact page of this website or on the social media profiles linked in the footer.

What we collect

• Contact form: your name, email address, phone number (optional) and your message, plus technical data needed to stop spam (your IP address, kept only briefly for rate limiting).
• Messages you send us on WhatsApp, Instagram or Facebook: handled by those services under their own privacy policies.
• Classes, private lessons and events: the details you give us to arrange them (for example your name, contact details and, for a wedding first dance, your wedding date).
• Photos and videos taken at classes and events, which may show you.

Why we use it (lawful basis)

• To answer your enquiry and arrange lessons, classes or events (steps before a contract, and the contract itself).
• To keep the website secure and free of spam (our legitimate interests).
• To share photos and videos of our classes and events on this website and our social media (our legitimate interests; tell us at any time if you would rather not appear and we will not use or will remove the picture).

Who we share it with

We do not sell your data or use it for advertising. We use a small number of service providers who process data on our behalf: our website host, our email delivery provider (Resend) for forwarding contact form messages, and Cloudflare Turnstile to tell people from spam robots. Where a provider is outside the UK, the transfer is protected by the safeguards UK law requires.

Cookies and statistics

This website does not use advertising or tracking cookies. Visitor statistics, where enabled, are collected without cookies and without identifying you. The spam check of the contact form loads only when you start filling in the form.

How long we keep it

Contact form messages are kept for up to 24 months after our last contact with you, then deleted. Records needed for accounting are kept as long as the law requires.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Contact us through the contact page; we reply within one month. If you are unhappy with how we handled your data, you can complain to the Information Commissioner’s Office (ico.org.uk).

Changes

We update this policy when what we do changes; the date at the top shows the last update.