Privacy Policy

Who we are

LaShelle's School of Dance ("the studio," "we," "us") uses this system (AttenDANCE) to manage enrollment, attendance, billing, and performances for our dance students. This policy explains what information we collect, why, and the rights you have over it — especially because most of our students are minors.

Children's privacy (COPPA)

Students never create their own login or interact with this system directly — there is no child-facing account, form, or chat feature anywhere in AttenDANCE. Every piece of information about a student is entered by a parent/guardian (at registration or in the parent portal) or by studio staff (attendance, class placement, recital casting). We do not knowingly collect personal information directly from a child under 13, and we do not use student information for advertising or sell it to anyone.

Because we still hold personal information about children under 13 — collected from a parent, not the child — we follow the Children's Online Privacy Protection Act (COPPA) as a matter of practice: parents consent to what's collected at registration, can review or export everything we hold on their dancer at any time (below), and can ask us to stop collecting further information or delete what we hold, subject to the retention needs described below.

Information we collect

• Parent/guardian account: name, email, phone, login credentials.
• Household: home address, and the name, email, and phone of a second parent/guardian if one is given at registration.
• Student profile: name, date of birth, the student's own email if one is given, up to two parent/guardian email addresses and a phone number, school and grade, emergency contact (including their relationship to the student), allergies and special needs, and costume/uniform measurements.
• Check-in tags: the key fob or card a student taps to check in. We record which tag belongs to which student, a short label like T-0014, the chip's serial number, and whether the tag is active or was reported lost. The tag itself holds only a random code that means nothing outside the studio's system; it contains no name or other personal information. It is not a biometric identifier.
• Check-in photo (optional): a small photo staff may take so the check-in screen shows who tapped. Only studio staff can see it; it is never published or shared.
• Attendance: which classes a student checked into, when they arrived, and when they checked out, plus a log of each tag tap (time, class, and result) used to catch double taps and fix mistakes.
• Billing: charges, payments, and payment method (we do not store full card numbers — card payments are processed by Square; we store their transaction record).
• Forms & consent: signed liability/photo/medical waivers and studio rule acknowledgments.
• Performance participation: company membership, audition signups, recital casting, costume and ticket orders, skill milestones, and awards.
• Communications: messages the studio sends to your email, and any donation or payment-plan records tied to your account.
• Check-in notices: whether you want an email or text when your dancer checks in and out, and, if you opted in to texts, the mobile number you gave and when and by which account you agreed. Texts go only to that number, after we text it a one-time code to confirm it's yours. We keep a record of each code request (the number and when) for 30 days to stop misuse; the code itself is never stored. We keep a record of each notice sent (time and the address or number it went to).

How we use it

Solely to run the studio: taking attendance, billing tuition and fees, organizing classes and recitals, contacting families, and keeping the records a dance studio needs. We do not use student or parent data for advertising, and we do not sell or rent it to third parties.

Who can see it

Studio staff (admin and teachers) can see the records needed to run classes and billing. A few outside services process a limited slice of data on our behalf, only for the purpose stated:

• Square — processes card payments and invoices.
• Twilio — delivers SMS balance reminders and check-in texts, if enabled.
• Email provider (Gmail SMTP) — delivers receipts, reminders, and studio messages.
• Fly.io — hosts the application and database.

None of these companies may use your data for their own purposes — they process it only to provide their service to us.

How long we keep it

We keep student and billing records for as long as a family is enrolled, plus a period afterward for the financial and legal recordkeeping a small business needs (tax and accounting records are generally kept several years — we don't purge these early even on request, for that reason). Records that aren't needed for that purpose — like allergy notes or costume measurements — can be deleted on request once a dancer is no longer enrolled.

Your rights

As a parent/guardian, you can:

• Review everything we hold on you and your dancer(s) any time in the parent portal.
• Export a complete copy of your data as a downloadable file — see "Download My Data" on your account page.
• Correct inaccurate information — contact the studio and we'll fix it.
• Request deletion of information we hold, from the same account page. We'll honor this for everything except records we're required to keep for financial/legal reasons.
• Refuse further collection — you can withdraw your dancer from the studio at any time, which stops any new data collection about them.

Security

Access requires a password-protected login; passwords are never stored in plain text. Sensitive configuration (like payment provider credentials) is encrypted at rest. All traffic to this site is encrypted (HTTPS). We don't publish or share raw database access with anyone outside studio staff.

Changes to this policy

If we materially change what we collect or how we use it, we'll update this page and, for significant changes, notify parents directly.

Contact us

Questions about your data, or a request to correct/delete something? Email LaShellesDance@gmail.com.