PRIVACY POLICY

At Echo Theatre, we are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard your personal information when you use our website, www.echotheatre.co.uk, and our related services.

Website Visitors

Like most website operators, Echo Theatre collects information of the sort that web browsers and servers typically make available when visiting a web page, such as the browser type, language preference, referring site, and the date and time of each visitor request. Echo Theatre's purpose in collecting this information is to better understand how visitors use our website. We use Amazon CloudFront to deliver our website efficiently. CloudFront collects data necessary for this purpose, including:

  • Browser information
  • City, country, and region
  • Device information
  • IP address
  • Usage data

This data helps us monitor website performance and ensure optimal delivery. CloudFront stores data within the EU (eu-west-2 London region). We also collect data necessary for website security, such as IP addresses, to help prevent malicious activity.

Gathering of Personally-Identifying Information

Lawful Basis for Processing

We collect and process your personal data based on the following lawful grounds:

  • Contract: We process your name, contact information, and child's details to fulfill our contract with you for class bookings.
  • Legitimate Interests: We process IP addresses and website usage data to ensure website security and optimal delivery. We have conducted a legitimate interests assessment to ensure this processing is necessary and proportionate.
  • Consent: We may process your email address for marketing communications only with your explicit opt-in consent.

Class Bookings (Class4Kids)

We use Class4Kids, a third-party platform, to manage class bookings and payments, registers, student emergency contact information, and communications with guardians. When you book a class through our site, Class4Kids collects personal information as per their own privacy policy. This may include but is not limited to:

  • Name
  • Contact information (email, phone number)
  • Child's details (age, etc.)
  • Emergency contact information
  • Payment information

Please refer to the Class4Kids Privacy Policy for details on how they handle your data. We access this data within Class4Kids for class management, attendance, and communication purposes. We do not store this data on our own servers. Data within Class4Kids is retained for up to 7 days after the end of a class subscription, and is typically removed shortly after that point. Some data, such as financial data, is retained longer to comply with UK legal requirements.

Email Inquiries

When you contact us via email, we collect your email address and any information you provide in your message. We use this information to respond to your enquiries and provide support. Emails are stored on our Gmail server, which is compliant with UK GDPR regulations (see Google Cloud GDPR compliance). Data sent via email is stored on Google servers within the United States, Google has implemented data transfer mechanisms to comply with GDPR. Emails are erased when no longer required to complete the enquiry.

Marketing Communications

With your explicit opt-in consent, we may send you marketing emails about our classes and events. You can withdraw your consent at any time by clicking the unsubscribe link in the email or by contacting us at info@echotheatre.co.uk.

Data Security

The security of your Personal Information is important to us. We implement the following security measures:

  • Data encryption in transit using TLS 1.3.
  • Data encryption at rest.
  • Access to personal data is restricted to authorised personnel who require it for service delivery or safeguarding purposes.
  • Regular security assessments and updates.

While we do not have formal security audit certifications, we are committed to maintaining robust security practices and employ staff with the necessary skills and experience to ensure the security of your data.

Your Rights

You have the right to:

  • Request access to your personal data.
  • Request correction of your personal data.
  • Request deletion of your personal data.
  • Request restriction of processing of your personal data.
  • Request data portability.
  • Object to the processing of your personal data.

To exercise these rights, please contact us at info@echotheatre.co.uk. We will respond to your request within 30 days, or sooner. These rights can be exercised free of charge, unless the request is manifestly unfounded or excessive.

Children's Privacy

As we offer classes for children, we take extra care to protect their privacy. We rely on Class4Kids to manage parental consent and child information during the booking process. Consent is given by the guardian when signing them up for classes.

Third-Party Sharing

We do not sell your personal data to third parties. We share data with Class4Kids for class management purposes. We use Google Analytics 4 for website analytics, ensuring that data is anonymised. We use Google mail for email communications.

Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Class4Kids data is retained for up to 7 days after the end of a class subscription, and is typically removed shortly after that point. Financial data is retained longer to comply with UK legal requirements. Email enquiry data is erased when no longer required to complete the enquiry.

Cookies

Our website uses cookies from Google Maps, Google Analytics 4, and Amazon CloudFront. Necessary cookies, which are essential for the website to function properly and include cookies that enable basic functionalities such as page navigation and access to secure areas of the website, will be loaded by default. Optional cookies (such as analytics tracking) require explicit user consent and can be managed via the cookie banner and browser settings. Please review the privacy policies of these third-party services for more details on their cookie usage.

Links To External Sites

Our Service may contain links to external sites that are not operated by us, such as links to Class4Kids, Facebook, and Instagram. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy and terms and conditions of every site you visit. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites, products, or services.

Privacy Policy Changes

Echo Theatre may update this Privacy Policy from time to time. If we make significant changes, we will notify customers via email before the changes take effect. Your continued use of this site after any update will constitute your acceptance of the revised Privacy Policy.

Contact Information

For any privacy enquiries, please contact us at: info@echotheatre.co.uk

Last updated: 11/March/2025