NGU Dance School Data Protection Policy 

1. Introduction 

NGU Dance School is committed to protecting the privacy and security of personal information. This policy outlines how we collect, use, store, and protect personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR). 

2. Policy Statement 

NGU Dance School ensures that personal data is handled responsibly and securely. We respect the privacy of our students, parents, staff, and volunteers, and we are committed to protecting their personal information. 

3. Scope 

This policy applies to all personal data processed by NGU Dance School, including data relating to current, past, and prospective students, parents, staff, and volunteers. 

4. Definitions 

- **Personal Data:** Any information relating to an identified or identifiable individual. 

- **Data Subject:** The individual to whom personal data relates. 

- **Processing:** Any operation performed on personal data, such as collection, storage, use, and destruction. 

- **Data Controller:** The entity that determines the purposes and means of processing personal data. 

- **Data Processor:** The entity that processes personal data on behalf of the data controller. 5. Data Collection 

NGU Dance School collects personal data for various purposes, including: 

- Enrollment and administration of students. 

- Communication with parents and guardians. 

- Employment and volunteer management. 

5.1 Types of Data Collected 

- **Students:** Name, date of birth, contact details, health information, emergency contact details, attendance records, performance records, and photographs. 

- **Parents/Guardians:** Name, contact details, and relationship to the student. 

- **Staff and Volunteers:** Name, contact details, employment or volunteer history, qualifications, DBS check information, and payroll details. 

 6. Data Use 

Personal data will only be used for the purposes for which it was collected. NGU Dance School ensures that data is processed lawfully, fairly, and transparently. We will not use personal data for purposes incompatible with those stated at the time of collection. 

7. Data Storage and Security 

- Personal data will be stored securely to prevent unauthorized access, loss, or damage. 

- Digital data will be protected by secure passwords and encryption where appropriate. 

- Physical data will be stored in locked cabinets or secure areas. 

 8. Data Sharing 

NGU Dance School will not share personal data with third parties without the consent of the data subject, except where required by law or for safeguarding purposes. When data sharing is necessary, we will ensure that the third party has appropriate data protection measures in place. 

9. Data Retention 

Personal data will be retained only as long as necessary for the purposes for which it was collected or as required by law. Once data is no longer needed, it will be securely deleted or destroyed. 

10. Data Subject Rights 

Data subjects have the following rights regarding their personal data: 

- **Access:** The right to request access to their personal data. 

- **Rectification:** The right to request correction of inaccurate or incomplete data. 

- **Erasure:** The right to request deletion of their personal data. 

- **Restriction:** The right to request restriction of processing. 

- **Data Portability:** The right to request transfer of their data to another organization. 

- **Objection:** The right to object to processing of their personal data. 

Requests regarding these rights should be directed to the Data Protection Officer (DPO).Nina Gorman 

11. Data Breaches 

NGU Dance School has procedures in place to detect, report, and investigate data breaches. Any data breach will be reported to the relevant authorities within 72 hours, and affected individuals will be informed without undue delay. 

12. Training and Awareness 

All staff and volunteers will have read and understood our data protection principles and practices. Annually updates and refreshers will ensure ongoing compliance. 

13. Monitoring and Review 

This policy will be reviewed annually to ensure its effectiveness and compliance with data protection laws. Any changes will be communicated to all staff, volunteers, and relevant stakeholders. 

14. Contact Information 

For questions or concerns about this policy or data protection practices, please contact: 

- **Data Protection Officer (DPO):** [Nina Gorman 07894549489 ngudance@gmail.com] 

NGU Dance School is committed to safeguarding the personal data of all individuals we interact with. We expect all staff, volunteers, and partners to adhere to this policy.