Privacy Policy
Prestige Studios customers and participants supply their personal data when signing up for classes through our registration form via the website on class for kids. This is either completed by a parent/guardian or the child themselves if they deemed able to do so. Personal data may also come to us unsolicited via enquiries through our website/Social media and to our generic email account. To attend any of Prestige Studios’ classes participants/parents/guardians must agree to some processing of their personal data. This is due to Legitimate Interests – GDPR Article 6(1)(f), Legal Obligation GDPR Article 6(1)(c), Contract - Article 6(1)(b) and/or Consent - Article 6(1)(a).
Our participants must remain safe at all times, therefore information about participants must be collected in order to create registers and accurate student records. This information is also used to provide students with appropriate classes, including dividing students into age groups. Special category data is only collected with the consent of the data subject. Special category data Prestige Studios collects includes but is not limited to: Medical/Disability information and Gender. As physical activity providers it is essential that this consent is given should a participant have any medical/disability needs. This allows us to incorporate participants safely into classes. It is also used in assessing if we can incorporate participants safely into classes.
Data received through enrolment forms is uploaded manually into our database software. Our database is stored both in encrypted files on office-based hardware and backed up regularly in our encrypted cloud-based server. Access to these files is restricted through password protection and only available to authorized staff members.
Registers and emergency contact lists created from student data are stored in encrypted files on office-based hardware and backed up regularly in our encrypted cloud-based server. Access to these files is restricted through password protection and only available to authorised staff members. Hard copies of registers and emergency contacts are carried by authorised staff members. They are locked away while not in use. When they are no longer in use or out-dated, they are destroyed thoroughly.
Prestige Studios does not actively share data with third parties, however there are certain instances where sharing information is crucial to our business processes. Freelance Teachers: As many of Prestige Studios teachers are freelance staff, we have confidentiality and data processor agreements in place. Teachers will never be provided with personal details aside from participant’s first names and any medical information that is pertinent to the running of a class (subject to consent from the data subject).
Child Safeguarding Concerns: In the unlikely event Prestige Studios has a safeguarding concern in relation to one of our participants, Prestige Studios are legally required to provide data to the safeguarding board at the local council. Prestige Studios is satisfied that their GDPR process are thorough and any data will be stored in a secure environment, and not unnecessarily retained.
Event Programmes: Prestige Studios may occasionally produce programmes for events. These will only ever contain the first name and first initial of a child’s last name (unless otherwise consented to). The name of a child’s class may also be included. Participants/their Parent and/or Guardians may choose if they want to be included in the programme when they agree to participate at an event.
Examination Entry: In order to enter examinations, Prestige Studios must provide some personal data to examination boards (currently Prestige Studios work with: ISTD & RAD). This sharing of data is to be consented to by the data subject and/or parent/guardian upon being entered for the exam
Rights of the data subject and Prestige Studios compliance with responses:
Any data subject with personal data stored within Prestige Studios is entitled to the rights of:
- Access
You may contact Prestige Studios at any time to access all data held relating to you. Prestige Studios will ensure that we respond to a subject access request without undue delay and within one month of receipt. If the information request will also include data regarding others, Prestige Studios] has the right to refuse the request or take steps in order to obtain consent from other involved parties.
The right of access does not apply to Prestige Studios’ legal obligations such as confidential Child Safeguarding records.
- Rectification
You may contact Prestige Studios at any time in order to rectify data held relating to you. Prestige Studios will ensure that we respond to a rectification request without undue delay and within one month of receipt.
The right to rectification does not apply to Prestige Studios’ legal obligations such as payment record information.
- Erasure
You may contact Prestige Studios at any time in order to erase data held relating to you. Prestige Studios will ensure that we respond to an erasure request without undue delay and within one month of receipt.
The right to erasure does not apply to Prestige Studios’ legal obligations such as First Aid records.
- Restrict Processing
You may contact Prestige Studios at any time in order to restrict the data we process relating to you. Prestige Studios will ensure that we respond to a request to restrict processing without undue delay and within one month of receipt.
However, due to our legitimate interest and legal obligations in most of the data collected- we may not be able to restrict processing.
- Data Portability
You may contact Prestige Studios at any time in order to obtain the data we process relating to you and reuse it across different services. [Prestige Studios will ensure that we respond to a request to restrict processing without undue delay and within one month of receipt.
Please note, this does not apply to Prestige Studios’ legal obligations.
- Objection
You may contact Prestige Studios at any time in order to object to the processing of data relating to you. Prestige Studios will ensure that we respond to a request to restrict processing without undue delay and within one month of receipt.
However, due to our legitimate interest and legal obligations in most of the data collected- we may not be able to accept your objection.
- Rights related to automated decision making including profiling
You may contact Prestige Studios at any time in order to object to profiling relating to you. Prestige Studios will ensure that we respond to a request to restrict processing without undue delay and within one month of receipt.
Please note, this does not apply to Prestige Studios’ legal obligations.
Prestige Studios has a lawful reason for profiling; Legitimate Interests and consent.
None of Prestige Studios’ decision making is automated. Profiling is only used in circumstances where a staff member has a criminal conviction.