Privacy Policy

Who we are

LaShelle's School of Dance ("the studio," "we," "us") uses this system (AttenDANCE) to manage enrollment, attendance, billing, and performances for our dance students. This policy explains what information we collect, why, and the rights you have over it — especially because most of our students are minors.

Children's privacy (COPPA)

Students never create their own login or interact with this system directly — there is no child-facing account, form, or chat feature anywhere in AttenDANCE. Every piece of information about a student is entered by a parent/guardian (at registration or in the parent portal) or by studio staff (attendance, class placement, recital casting). We do not knowingly collect personal information directly from a child under 13, and we do not use student information for advertising or sell it to anyone.

Because we still hold personal information about children under 13 — collected from a parent, not the child — we follow the Children's Online Privacy Protection Act (COPPA) as a matter of practice: parents consent to what's collected at registration, can review or export everything we hold on their dancer at any time (below), and can ask us to stop collecting further information or delete what we hold, subject to the retention needs described below.

Information we collect

• Parent/guardian account: name, email, phone, login credentials.
• Household: home address, and the name, email, and phone of a second parent/guardian if one is given at registration.
• Student profile: name, date of birth, the student's own email if one is given, school and grade, emergency contact (including their relationship to the student), allergies and special needs, costume/uniform measurements, and an RFID badge ID used only for class check-in (it is not a biometric identifier — it's a physical card we assign).
• Attendance: which classes a student checked into and when.
• Billing: charges, payments, and payment method (we do not store full card numbers — card payments are processed by Square; we store their transaction record).
• Forms & consent: signed liability/photo/medical waivers and studio rule acknowledgments.
• Performance participation: company membership, audition signups, recital casting, costume and ticket orders, skill milestones, and awards.
• Communications: messages the studio sends to your email, and any donation or payment-plan records tied to your account.

How we use it

Solely to run the studio: taking attendance, billing tuition and fees, organizing classes and recitals, contacting families, and keeping the records a dance studio needs. We do not use student or parent data for advertising, and we do not sell or rent it to third parties.

Who can see it

Studio staff (admin and teachers) can see the records needed to run classes and billing. A few outside services process a limited slice of data on our behalf, only for the purpose stated:

• Square — processes card payments and invoices.
• Twilio — delivers SMS balance reminders, if enabled.
• Email provider (Gmail SMTP) — delivers receipts, reminders, and studio messages.
• Fly.io — hosts the application and database.

None of these companies may use your data for their own purposes — they process it only to provide their service to us.

How long we keep it

We keep student and billing records for as long as a family is enrolled, plus a period afterward for the financial and legal recordkeeping a small business needs (tax and accounting records are generally kept several years — we don't purge these early even on request, for that reason). Records that aren't needed for that purpose — like allergy notes or costume measurements — can be deleted on request once a dancer is no longer enrolled.

Your rights

As a parent/guardian, you can:

• Review everything we hold on you and your dancer(s) any time in the parent portal.
• Export a complete copy of your data as a downloadable file — see "Download My Data" on your account page.
• Correct inaccurate information — contact the studio and we'll fix it.
• Request deletion of information we hold, from the same account page. We'll honor this for everything except records we're required to keep for financial/legal reasons.
• Refuse further collection — you can withdraw your dancer from the studio at any time, which stops any new data collection about them.

Security

Access requires a password-protected login; passwords are never stored in plain text. Sensitive configuration (like payment provider credentials) is encrypted at rest. All traffic to this site is encrypted (HTTPS). We don't publish or share raw database access with anyone outside studio staff.

Changes to this policy

If we materially change what we collect or how we use it, we'll update this page and, for significant changes, notify parents directly.

Contact us

Questions about your data, or a request to correct/delete something? Email LaShellesDance@gmail.com.