Privacy Policy

Confidance is a children's dance and confidence-building class operated by Jessica Lauren Murphy (“we”, “us”, “our”). We are based in Hammersmith, London and run classes at the Grove Neighbourhood Centre, 7 Bradmore Park Road, W6 0DT.

For any questions about this policy, contact us at confidancejessica@gmail.com.

When you create an account and book classes, we collect:

• Parent/guardian name and email address
• Child's first name, date of birth, and age
• Any medical conditions or additional needs you choose to share
• Emergency contact details
• Booking history and payment records

We do not collect or store credit/debit card numbers. All payments are processed securely by Stripe, our PCI-DSS Level 1 compliant payment processor.

We process your personal data on the following bases under UK GDPR:

• Contract— to manage your bookings, process payments, and deliver the classes you have paid for
• Legitimate interest— to keep children safe during classes (medical/allergy information, emergency contacts)
• Consent— to send you occasional updates about new terms, schedule changes, or class news (you can opt out at any time)

Your data is stored securely using Supabase, a cloud database provider with ISO 27001 certification and SOC 2 Type II compliance. Data is encrypted at rest and in transit. Access is controlled through row-level security policies, meaning users can only access their own data.

Payment processing is handled entirely by Stripe. We never see, store, or have access to your full card details.

We share data only with the following third-party processors:

• Supabase — database hosting and authentication
• Stripe — payment processing
• Vercel — website hosting

We do not sell, rent, or share your personal data with any other third parties for marketing purposes.

We retain your account data for as long as your account is active. Booking and payment records are kept for 6 years after the transaction to comply with UK tax and accounting obligations. If you delete your account, we will remove your personal data within 30 days, except where we are legally required to retain it.

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data (subject to legal retention requirements)
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interest

To exercise any of these rights, email confidancejessica@gmail.com. We will respond within 30 days.

We collect limited data about children (first name, date of birth, medical information) solely for the purpose of safely delivering our classes. This data is provided by a parent or guardian and is never shared publicly. Children do not have accounts — all data is managed through the parent/guardian's account.

Our website uses only essential cookies required for authentication and session management. We do not use tracking cookies, analytics cookies, or third-party advertising cookies. No cookie consent banner is required as we only use strictly necessary cookies under the UK Privacy and Electronic Communications Regulations (PECR).

We may update this policy from time to time. Any changes will be posted on this page with an updated revision date. If we make significant changes, we will notify you by email.

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.