Privacy Policy

APA Academy of Performing Arts

About this Privacy Notice

We truly value the personal data that individuals and families choose to share with us and we take their privacy with the upmost sincerity.

This Privacy Notice sets out the categories of personal data we may ask you to supply, why we need that data, how we will use it and how long we will retain it. We are a data controller for the purpose of all personal data we process and our contact details are as follows-

APA Academy of Performing Arts (APA) 13 Rother Avenue, Stone Cross, Pevensey BN24 5PJ East Sussex

APAEmmaTowner@gmail.com

We would like to draw this Privacy Notice to the attention of all relevant parties and should you engage our services we will take it to mean that you are satisfied with its contents. All personal information that we obtain about you and/or any other person whose details you provide will be recorded, used, and protected by us in accordance with current data protection legislation and any other terms and conditions that are relevant to the services you request and this Privacy Notice. 

Personal Data

We will only ever collect personal data from you that is necessary for us to provide you services you have requested. These categories of personal data include:

- Name; - Contact details; - Payment information; - Medical information.

 The following way are how we may use your personal data:

 - For general administration when providing you with our services; - For communicating with you about services you have requested or, where you have consented, with news about APA; - For safety purposes to ensure a safe environment for performances, events and activities and showcases; and - For record keeping purposes.

It is important that the personal data we hold is accurate and current. Please keep us informed if there is a change to the personal data you have provided during your relationship with us. 

The legal basis for processing 

 We must ensure that we only process personal data where we have a good reason for doing so. This is known as the ‘legal basis for processing’. We rely on the following legal basis when processing the personal data you provide:

- Processing is necessary for the performance of a contract we have with you; - You have consented to the processing; - Processing is necessary in order for us to comply with a legal obligation we have; - It is in the vital interests of an individual that we process their personal data, such as in a medical emergency; and/or

- Where we have a legitimate interest in contacting you, such as where we are offering new services we believe may be of interest to you.

Special Categories

Due to the nature of the services we provide it will be necessary for us to obtain medical information about the adults and children who are part of APA. We will only ever process this data where we have a legal basis to do so. This will be where we have sought your explicit consent or, in serious cases, where it is of vital interest to help an individual.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Parents will be provided with a Medical and Emergency Contact Form to complete on behalf of their children who are enrolled at APA.

Third party Information and how we use it

From time to time, only where necessary to facilitate our relationship with you, we may transfer your personal data to our third- party data processors. Processors have obligations under the data protection legislation with regards to your data as well as obligations in accordance with their contractual relationship with us. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. These third-party data processors include:

- Our professional advisers and auditors; - Our IT service providers; and - Third parties involved in hosting or organising performances or showcases where you have informed us you wish to attend. 

Marketing

Where we have already provided you with our services in some way we may contact you with regards to other services, promotions or events that we believe you may be interested in. If you do not wish to hear from us, please let us know. 

If you have given us your consent to contact you by email or other means for marketing purposes we will only use the personal data provided for this purpose and your details will not be passed to any third parties. You have the right to withdraw your consent for processing at any time and should you wish to do so, please contact us or follow the unsubscribe option in the email you receive. 

Keeping your personal

 We will normally keep your personal data for two years after you no longer use our services. If, after this point, you have not taken up any further services, we will keep only minimal personal data about services you have received, an outline of any incidents and details of any preferences or consents.

We have legal obligations as a company to retain records containing personal data, even after the main purpose of our relationship has ended. In accordance with our obligations any legal documents that contain your personal data, such as a contract, will be retained for 6 years, after which archived files are destroyed. Nevertheless, for all personal data, once our obligation to retain the data ceases, we will cease processing and destroy it.

In some circumstances, we may retain your personal information for longer where necessary in the event of any claims against us.

We maintain appropriate security measures to prevent the misuse, loss, or disclosure of your personal data. This notice is relevant whether your personal data was obtained directly from you or where your information was provided to us by a third party. 

The Rights you may have

 You have the right to access the personal data we hold for you and the right to request that your personal data be rectified, erased or transported to another data controller. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances. You may also request that we erase all your data that we hold or that we restrict processing. Should you wish to exercise any of these rights, please contact us using the contact information provided above.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.