KDANCE STUDIO · PRIVACY
Privacy Policy
Last updated: 3 November 2026
1. Who we are
KDance Studio is operated by Kseniya Kurylina in the Netherlands. We are the controller of personal information used to handle enquiries and organise our dance classes, private coaching, workshops and hair and makeup appointments.
Privacy contact: k.kurylina@gmail.com
Business contact address: Louis Saalbornlaan 5, 3584 GA Utrecht, Netherlands
KVK number: 42160200
Business phone: +31 6 20930552
2. Information we collect
- Enquiries: your name, email address, optional phone number and the information you include in your message.
- Bookings: contact details, selected class or appointment, dates, attendance, cancellations and related correspondence. For styling requests, this may include an event date, venue, ready-by time and style preferences.
- Children’s classes: the child’s name and age, supplied by a parent or guardian, together with the adult’s contact and booking details.
- Administration: invoice details and payment or refund status. Website-store payments are handled by Squarespace Payments and its payment partners. Payment providers process payment details under their own privacy information. We receive transaction references and payment status, rather than your full card details. Online payment processing for Acuity class bookings is not currently enabled.
- Website use: our website and booking providers may receive IP addresses, browser and device information, pages visited, referring pages and technical or security logs.
We receive most information directly from you, from a parent or guardian booking for a child, or from our website and booking services. Please do not include medical details, identity documents or bank/card information in general enquiry forms.
3. Why we use information
| Purpose | Legal basis |
|---|---|
| Answer requests about a potential booking; arrange and deliver services to the person entering the agreement. | Steps requested before a contract and performance of a contract. |
| Respond to other enquiries, manage attendance, communicate with parents and place children in an appropriate age group. | Legitimate interests in running a responsive business and providing organised, age-appropriate teaching, balanced against your and your child’s rights. |
| Maintain records required for accounting and tax. | Compliance with legal obligations. |
| Keep the website secure, prevent abuse and handle disputes. | Legitimate interests in protecting our business, visitors and legal rights. |
| Optional analytics cookies or future optional marketing activities requiring permission. | Consent, where required. You can decline optional cookies or change your choice through Cookie Preferences. |
Required form fields are needed to respond or organise the requested service. Without necessary booking details, we may be unable to accept a reservation. Optional fields can be left blank. We do not currently send a newsletter or use advertising trackers. If you select an optional news-and-updates checkbox, we record that choice with your enquiry; it is separate from booking communications. Any future marketing based on consent will include a way to unsubscribe.
4. Children’s information and photographs
A parent or guardian should make a child’s booking using their own contact details. We use the child’s name and age to organise classes and attendance, not to send marketing to the child. Parents may contact us about their child’s information, subject to the child’s own rights and applicable law.
Permission to attend a class does not provide permission to use a student’s identifiable photo or video in publicity. Any such use should be covered by a separate, specific permission request, including a parent or guardian where appropriate. No general photo permission is requested through this policy.
5. Services that receive information
We use Squarespace to host the website and process website forms, and Acuity Scheduling for appointments and class bookings. Website form submissions are stored in Squarespace and notifications are sent to our Gmail inbox at k.kurylina@gmail.com (Google). Booking records are stored in Acuity Scheduling, with booking-update notifications also sent to this Gmail inbox. Account-owner notifications may still use the existing Squarespace/Acuity account email. Email delivery services also process messages needed for delivery. Where necessary to deliver a service or manage our accounts, we may share relevant information with an instructor or professional adviser. We limit this to what is needed for their role.
We may disclose information where a legal obligation requires it or where necessary for legal claims.
Provider information: Squarespace Privacy Policy · Acuity data privacy.
6. Processing outside the EEA
Squarespace, Acuity and their service providers may process information outside the European Economic Area, including in the United States. Squarespace describes its transfer safeguards in its Data Processing Addendum, including the EU–US Data Privacy Framework where applicable and Standard Contractual Clauses where required. Google and other delivery or payment providers may also process data internationally under the safeguards applicable to their services. Contact us for information about the providers and safeguards relevant to your data.
7. How long we keep information
We use the following retention periods and review records for deletion or anonymisation when they are no longer needed:
- Enquiries that do not lead to a booking: delete within 12 months after the enquiry is resolved.
- Ordinary booking and service correspondence: delete or anonymise within 24 months after the last service, unless still needed for an active account, unresolved issue or legal obligation.
- Children’s age and attendance details not required for financial records: review after the course ends and delete within 12 months after the child’s last class.
- Invoices, payment and refund records, and booking evidence necessary to support the accounts: retain for 7 years under the applicable Dutch tax rules. The period starts when the records are no longer current; longer statutory periods apply where required. Keep only the personal details necessary for this accounting purpose.
- Technical and security logs: kept only as long as needed for security, troubleshooting or legal requirements, subject to the provider’s applicable retention controls. Provider backups may remain for their normal recovery cycle and are not used for new purposes.
Where information is necessary for a dispute or a legal obligation, we retain the relevant minimum for that purpose, restrict its use and remove it when it is no longer required. The tax retention period does not apply automatically to every message or child registration detail.
8. Cookies and website analytics
Squarespace uses essential cookies for website functionality and security, including forms and checkout. Optional analytics cookies help us understand website visits. Our cookie banner offers Accept all, Decline all and Manage cookies. Squarespace non-essential cookies are restricted until you give permission.
You can revisit your choices using Cookie Preferences on the website. Declining optional cookies does not prevent you from contacting us. The booking and payment services may also use necessary cookies to process your request; their privacy information applies when you use those services.
Details of provider cookies: The cookies Squarespace uses. You can also manage stored cookies through your browser, although blocking essential cookies may affect functionality.
9. Security
We aim to limit access to people who need information to provide services, use the security features of our website and booking providers, and avoid collecting unnecessary information. No internet service can guarantee absolute security.
10. Your privacy rights
Depending on the circumstances, you may ask to access or correct information, request deletion, restrict processing, receive portable information, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. Some information must be retained where a legal obligation applies.
Email k.kurylina@gmail.com to make a request. We normally respond within one month. Where a permitted extension is needed, we will explain it within that first month. If necessary, we may ask for proportionate information to verify your identity.
You may complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, or another competent data protection authority. We do not make solely automated decisions that produce legal or similarly significant effects about you.
11. Updates and contact
We will update this notice when our services or data practices change and show the updated date. Material changes will be brought to your attention where required. Questions about this notice or your information can be sent to k.kurylina@gmail.com.