Privacy policy.

1. Who we are

MProduction Time 2 Show CIC is a Community Interest Company registered in England and Wales (company no. 14727822), based in Derby. We are the “controller” of the personal information described in this policy, which means we decide how it is used and we are responsible for looking after it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

To contact us about your information, call or text 07367 304154, or use our contact form (choose “A data protection request or complaint”).

2. What we collect and why

We only collect what we need. Here is what we collect, why, and the lawful basis that allows us to use it:

What	Why we use it	Lawful basis
Contact and booking forms: your name, email, phone number, organisation, event details and message	To reply to you, and to arrange workshops, performances or T-shirt orders	Legitimate interests (answering enquiries); contract (when you book or order something)
Registration form: the dancer’s name and age, parent or guardian’s name, email, phone and emergency contact	To run our classes, rehearsals and carnival troupe, and to contact you or an emergency contact if needed	Contract (taking part in our classes); legitimate interests (keeping everyone safe)
Health information you choose to tell us, such as medical needs or allergies	To keep the dancer safe during classes and events	Your explicit consent, which you give on the registration form. This is “special category” information, so we only use it for safety
Photos and videos of our classes, events and performances	To celebrate our dancers and promote our work on this website and our social media	Consent. For under-18s, consent must come from a parent or guardian
Payments and donations: your name and bank reference when you pay fees or donate by bank transfer	To record payments and keep our accounts	Contract (fees); legal obligation (keeping financial records)
Website security data: the technical details your browser sends, such as your IP address, which are recorded in our web host’s server logs	To keep the website working and secure, and to block spam	Legitimate interests (running a secure website)

Some fields on our forms are required. If you don’t provide them, we may not be able to reply to you or register a dancer. Everything else is optional. We do not use your information for automated decision-making or profiling, and we never sell it.

3. Children

Many of our dancers are under 18. If a dancer is under 18, a parent or guardian should fill in the registration form and give any consents on their behalf. We collect only what we need to run classes safely, and we take extra care with children’s information and photos.

4. Who we share it with

We don’t share your information with anyone for their own marketing. We only share it with:

• Service providers who help us run the website and our email, such as our website host and our email provider. They only process information on our instructions.
• Emergency services or medical staff, if a dancer needs urgent help.
• Venues or event organisers, only where this is needed for a performance or workshop, such as a list of performers.
• Authorities, if the law requires it, or to protect a child or vulnerable person (safeguarding).

5. International transfers

Some of our service providers may store information outside the UK. When that happens, we make sure it is protected by UK “adequacy regulations” or by approved safeguards such as the UK International Data Transfer Agreement or Addendum.

6. How long we keep it

• Website messages and enquiries: automatically deleted from our website after 12 months.
• Registration and emergency contact details: kept while the dancer is a member, then deleted within 12 months of them leaving.
• Health information: kept only while the dancer attends, and deleted when they leave or when you ask us to.
• Payment and donation records: kept for 6 years, as required for accounting and tax purposes.
• Photos and videos: kept while they are useful for promoting our work. If you withdraw consent, we will remove them from our website and social media.

7. Keeping it safe

Our website uses a secure (HTTPS) connection. Messages are stored in a password-protected area that only our team can access, and only people who need the information to run our classes can see it.

8. Cookies

Under the Privacy and Electronic Communications Regulations (PECR), we must tell you about cookies. This website does not use advertising, analytics or tracking cookies, so we don’t need to ask for your consent. The only cookies are essential ones that WordPress sets when a member of our team logs in to manage the website. Our fonts are stored on our own website, so visiting a page does not send your details to Google or anyone else.

Our pages link to other websites, including Facebook, Instagram, TikTok, YouTube and Google Maps. These sites are not embedded on our pages; they only receive your information if you click through, and then their own privacy policies apply.

9. Your rights

Under UK data protection law you have the right to:

• Access the personal information we hold about you
• Correct information that is wrong or incomplete
• Delete your information (the “right to be forgotten”)
• Restrict how we use your information
• Object to us using your information on the basis of legitimate interests
• Data portability: receive the information you gave us in a format you can take elsewhere
• Withdraw consent at any time, for example for photos or health information. This doesn’t affect anything we did before you withdrew it.

To use any of these rights, call or text 07367 304154, or use our contact form (choose “A data protection request or complaint”). It’s free, and we will reply within one month.

10. Complaints

If you are unhappy with how we have used your information, please tell us first using the contact details above. We will acknowledge your complaint within 30 days and look into it without delay.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint, helpline 0303 123 1113, or write to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.