Data Protection & Your Rights

Last updated: 14 June 2026

Studio 10 Dance and Fitness is committed to protecting personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page summarises our data-protection commitments and your rights. For full detail on what we collect and why, please read our Privacy Policy.

1. The principles we follow

We handle personal data in line with the data-protection principles. Personal data must be:

• processed lawfully, fairly and transparently;
• collected for specified, legitimate purposes only;
• adequate, relevant and limited to what is necessary;
• accurate and kept up to date;
• kept no longer than necessary;
• kept secure; and
• handled in a way we can demonstrate and account for.

2. Our lawful bases

Depending on the activity, we rely on one or more of the following lawful bases: performance of a contract (to provide classes you book), legitimate interests (to run our classes safely and communicate with you), legal obligation (e.g. accounting and duty of care), and consent (e.g. marketing and the use of photos). Where we process health information, we also rely on your explicit consent.

3. Your rights

Under the UK GDPR you have the right to:

• Be informed — about how your data is used (this page and our Privacy Policy);
• Access — request a copy of the data we hold about you;
• Rectification — have inaccurate data corrected;
• Erasure — ask us to delete your data in certain circumstances;
• Restriction — ask us to limit how we use your data;
• Portability — receive your data in a portable format;
• Object — object to certain processing, including direct marketing; and
• Withdraw consent — at any time where we rely on consent.

4. Making a request

To exercise any of your rights, contact us using the details below. We will respond within one month. Requests are normally free of charge. We may ask you to confirm your identity before we release any information.

5. Children’s & special category data

For children’s classes, consent is given by a parent or guardian. Health information is “special category” data and is only collected with explicit consent and to keep participants safe. We treat this information with particular care.

6. Data processors

We use trusted service providers to help us operate — including our online booking system, website host and payment provider. These act as our processors under appropriate data-protection terms and only handle data on our instructions.

7. Data breaches

We take steps to keep data secure. In the event of a personal data breach that is likely to result in a risk to your rights, we will report it to the Information Commissioner’s Office (ICO) within 72 hours where required, and will tell you without undue delay where the risk to you is high.

8. Complaints