1. Introduction
Studiio ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our dance studio management platform and customer mobile apps.
Studiio is operated from the United Kingdom and is available to studios and users in the UK, United States, Canada, and other countries. By using Studiio, you consent to the data practices described in this policy.
We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where you are in Canada, we also respect the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. Where you are in the United States, we honour applicable state privacy laws (such as the California Consumer Privacy Act (CCPA), as amended by the CPRA) to the extent they apply to our processing.
2. Information We Collect
2.1 Information You Provide
We collect information that you provide directly to us, including:
- Account information: Name, email address, phone number (optional), and password (stored hashed)
- Studio data: Studio name, branding, class sessions, join codes, customer links, and bookings you manage as an owner or staff member
- Customer app data: Studios a dancer has linked, timetable views, and booking history associated with their account
- Staff membership: Your role and association with studios you own or work for
- Notification preferences: Choices about email, marketing, and push notifications
- Support: Messages you send through contact or support channels
2.2 Native mobile apps (Android and iOS)
If you use the Studiio customer app on Android or iOS, we collect the same account and studio-linked data as on the web. The app communicates with our API over HTTPS. If you enable push notifications, we store a device push token (via Firebase Cloud Messaging) to deliver reminders you opt into. The app may access your camera or photo library only when you choose to upload a profile or studio image. We do not use the mobile apps for third-party advertising or cross-app tracking.
You can export your data or delete your account from Settings → Privacy and data in the app, or from the web dashboard account hub.
2.3 Automatically Collected Information
When you use Studiio, we automatically collect certain information, including:
- Usage Data: Pages visited, features used, time spent on the platform
- Device Information: IP address, browser type, device type, operating system
- Cookies and Tracking: See our Cookie Policy for details (web and marketing site)
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send you technical notices, updates, and support messages
- Respond to your comments, questions, and requests
- Monitor and analyse trends, usage, and activities
- Detect, prevent, and address technical issues and fraud
- Comply with legal obligations
4. Legal basis for processing
For users in the UK and EEA-style contexts, we process your personal data based on the following legal grounds under UK GDPR:
- Contract Performance: To fulfil our contract with you to provide the Service
- Legitimate Interests: To improve our services, prevent fraud, and ensure security
- Consent: Where you have given explicit consent (e.g., marketing communications)
- Legal Obligation: To comply with applicable laws and regulations
5. Data Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following circumstances:
- Service providers: With trusted third parties who help us run Studiio (for example hosting, email delivery, payment processing via Stripe when you subscribe to Studiio Plus or buy class packs through a studio, push notification delivery such as Firebase Cloud Messaging when you enable push on mobile, and OpenAI when a studio owner enables the optional dashboard assistant)
- Studio payments: When a studio enables Stripe Connect, class pack and membership payments are processed by Stripe between the dancer and the studio. Studiio does not store full card numbers; Stripe handles payment details under its own privacy policy.
- Studio dashboard assistant (optional):When enabled by the studio's server configuration, questions typed in the owner web dashboard assistant may be sent to OpenAI to generate replies about schedule and customers. Chat content is retained for a limited period (see server configuration). The customer mobile apps do not include this assistant.
- Legal Requirements: When required by law or to protect our rights and safety
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you have given explicit permission
All third-party service providers are required to maintain appropriate security measures and use your data only for the purposes we specify.
6. Data Retention
We retain your personal information for as long as necessary to:
- Provide you with our services
- Comply with legal obligations
- Resolve disputes and enforce our agreements
When you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal purposes.
7. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. Under UK GDPR, these include:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise these rights, please contact us at privacy@studiio.co.uk. We will respond within one month where UK GDPR applies, or within the timeframe required by applicable law in your jurisdiction.
Canada: You may request access to and correction of your personal information, and may complain to the Office of the Privacy Commissioner of Canada (OPC) or your provincial privacy regulator.
United States: Residents of states with privacy laws (for example California) may have additional rights to know, delete, and correct personal information, and to opt out of certain sharing for cross-context behavioural advertising where applicable. We do not sell personal information.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit (HTTPS/TLS)
- Encryption of sensitive data at rest
- Regular security assessments and updates
- Access controls and authentication
- Secure hosting infrastructure
However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
- Adequacy decisions where applicable
- Other legally recognised transfer mechanisms
10. Children's Privacy
Studiio is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new policy on this page
- Updating the "Last updated" date
- Sending you an email notification (for significant changes)
Your continued use of the Service after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Email: privacy@studiio.co.uk
Data Protection Officer: dpo@studiio.co.uk
Address: Studiio, United Kingdom
You may lodge a complaint with your local supervisory authority, including the UK Information Commissioner's Office (ICO), the Office of the Privacy Commissioner of Canada (OPC), or a US state attorney general where applicable, if you believe your privacy rights have been violated.