Last updated: 2 October 2026
This Privacy Policy explains how Doctor Dance Ltd (“Doctor Dance”, “we”, “us” or “our”) collects and uses personal data when you visit our websites, buy or use our products and services, join Doctor Dance Academy, attend live sessions, take part in a community, contact us or subscribe to communications.
1. Who is responsible for your personal data?
Doctor Dance Ltd is the data controller for the personal data described in this policy.
Doctor Dance Ltd
Company number: 11001529
Registered office: 15 St Marys Road, Cromer, Norfolk, NR27 9DJ, United Kingdom
Email: peter@doctordance.com
2. Data-protection law
We process personal data in accordance with applicable UK data-protection and privacy law, including the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), and relevant amendments introduced by the Data (Use and Access) Act 2025.
3. Personal data we may collect
Depending on how you interact with us, we may collect:
- Identity and contact data: name, email address, postal address, telephone number and account details.
- Order and transaction data: products purchased, order history, invoices, payment status, refunds and related correspondence. Full card details are normally handled by our payment providers rather than stored by us.
- Learning and participation data: course enrolment, progress, quiz results, reflections, submitted assignments, certificate status, supervision bookings, attendance and participation in live sessions.
- Community data: profile information, posts, comments, reactions and other material you choose to share within an Academy community.
- Communications data: emails, support requests, feedback, testimonials, survey responses and other correspondence.
- Technical and usage data: IP address, browser and device information, login records, website activity, cookie identifiers and analytics data where enabled.
- Marketing preferences: whether you have subscribed, unsubscribed or expressed preferences about promotional communications.
- Professional information: role, organisation, area of practice or professional interests where relevant to a course, event or enquiry.
4. Sensitive and special-category data
Our standard courses do not require you to disclose medical information, diagnoses or other special-category personal data. However, a learner may sometimes choose to mention health, disability, wellbeing or other sensitive information in a reflection, supervision session, support request or community discussion.
Please share only what is reasonably necessary. Where we intentionally need to collect or use special-category data, we will identify an appropriate legal basis and additional condition under data-protection law and, where required, obtain explicit consent or provide further privacy information.
5. How we collect personal data
We collect data:
- directly from you when you purchase, register, complete a form, join a course, book a session, post in a community, contact us or subscribe;
- automatically through our websites and platforms using logs, cookies and similar technologies;
- from service providers that process transactions, bookings, course access or communications on our behalf;
- from public or professional sources where you have made information publicly available or where you have asked another organisation to share it with us.
6. Why we use personal data and our lawful bases
| Purpose | Typical lawful basis |
|---|---|
| Process orders, payments, refunds and enrolments | Performance of a contract; legal obligation where applicable |
| Provide course access, learning records, certificates, community access, live sessions and supervision | Performance of a contract |
| Respond to enquiries and provide customer support | Performance of a contract or steps before a contract; legitimate interests in providing effective support |
| Administer, secure and improve our websites, Academy and services | Legitimate interests in operating, protecting and improving our business and services |
| Keep accounting, tax and transaction records | Legal obligation; legitimate interests in proper business administration |
| Prevent fraud, misuse and security incidents | Legitimate interests; legal obligation where applicable |
| Send service messages about a purchase, course or booking | Performance of a contract or legitimate interests |
| Send marketing emails | Consent, or legitimate interests where permitted together with applicable PECR rules such as the soft opt-in |
| Use non-essential analytics or advertising cookies | Consent where required |
| Use testimonials or identifiable promotional material | Consent or another appropriate lawful basis, depending on the circumstances |
7. Marketing communications
If you receive marketing from us, you can unsubscribe at any time using the unsubscribe link in the message or by contacting us.
We may send marketing where you have consented or, where the law permits, where an existing customer relationship allows us to tell you about similar products or services and you were given a clear opportunity to opt out.
Service messages needed to administer a purchase, booking or course are not marketing and may still be sent where necessary.
8. Cookies and similar technologies
Our websites and third-party platforms may use cookies and similar technologies for essential functions, security, preferences, analytics and, where enabled, marketing.
Where consent is required for non-essential cookies, we will seek it through the relevant cookie or consent mechanism. You can also control cookies through your browser settings, although blocking essential cookies may affect site functionality.
9. Live sessions and recordings
Some group seminars, webinars or teaching sessions may be recorded for enrolled learners. Where recording is planned, participants will be given appropriate notice.
Recordings may capture names, voices, chat messages and video where participants choose to contribute. Where practical, participants can choose not to use a camera or can limit their visible profile information.
Private supervision sessions are not routinely recorded by Doctor Dance unless this is agreed in advance.
10. Who we share personal data with
We do not sell personal data.
We may share data with trusted service providers that help us operate our business and deliver services, including:
- course, checkout and community platforms such as ThriveCart and ThriveCart Academy;
- payment providers such as Stripe and PayPal;
- video-conferencing and live-teaching providers such as Zoom;
- website-hosting, WordPress, email, CRM, booking, cloud-storage and IT-support providers;
- analytics and measurement providers, such as Google services, where enabled;
- professional advisers such as accountants, legal advisers and insurers;
- government bodies, regulators, courts or law-enforcement agencies where disclosure is required or permitted by law.
Where another organisation acts as our processor, we expect it to handle personal data only for agreed purposes and with appropriate contractual and security protections.
11. International transfers
Some of our service providers may process personal data outside the United Kingdom.
Where a restricted international transfer takes place, we use an appropriate transfer mechanism where required, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework where applicable, or approved contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum.
You can contact us if you would like more information about the safeguards relevant to a particular transfer.
12. How long we keep personal data
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, contractual and safeguarding requirements.
Typical retention considerations include:
- financial and transaction records may be kept for the period required by tax and company law, commonly up to six years or longer where legally necessary;
- course, certificate and contractual records may be retained for a reasonable period after access ends so that we can administer the contract, evidence completion and respond to disputes or queries;
- marketing data is retained while you remain subscribed or while we have a lawful reason to contact you, with a minimal suppression record retained where necessary to respect an opt-out;
- community posts, support correspondence and recordings are reviewed according to their purpose, programme access arrangements and legal or operational need.
We may anonymise information so that it can no longer identify you and retain that anonymised information for research, statistical or service-improvement purposes.
13. Your rights
Depending on the circumstances and lawful basis, you may have rights to:
- request access to your personal data;
- ask us to correct inaccurate or incomplete data;
- ask us to erase personal data in certain circumstances;
- ask us to restrict processing in certain circumstances;
- object to processing based on legitimate interests;
- object at any time to direct marketing;
- receive certain data in a portable format;
- withdraw consent where processing is based on consent, without affecting earlier lawful processing.
Your right to object: where we rely on legitimate interests, you may object to that processing in certain circumstances. You can always object to the use of your personal data for direct marketing.
To exercise a right, email peter@doctordance.com. We may need to verify your identity before acting on a request.
14. Automated decision-making
We do not normally use solely automated decision-making that produces legal or similarly significant effects on individuals. If this changes for a particular service, we will provide appropriate information.
15. Security
We use reasonable technical and organisational measures to protect personal data, including access controls, secure account systems and appropriate use of established service providers. No online system can be guaranteed completely secure, so please also protect your passwords and account access.
16. Children and young people
Our general services are intended for people aged 16 and over unless a specific product states otherwise. Where we offer a service specifically involving children or younger participants, we may provide additional privacy information and obtain any permissions required for that service.
17. Links and third-party platforms
Our websites and learning environment may link to third-party websites or services. Those organisations may act as independent controllers for their own processing. Their privacy policies apply to information they collect for their own purposes.
18. Complaints
Please contact us first if you have a concern about how we use your personal data so that we can try to resolve it.
You also have the right to raise a complaint with the UK data-protection regulator, the Information Commission’s Office (ICO), which is overseen by the Information Commission. Information about making a complaint is available at ico.org.uk.
19. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in our services, suppliers or the law. The current version will be published on doctordance.com/ with the date of the latest update.
20. Contact us
Doctor Dance Ltd
15 St Marys Road
Cromer, Norfolk NR27 9DJ
United Kingdom
Email: peter@doctordance.com
