Privacy Policy

Bunheads Ballet School(“we”, “us”, or “our”) operates this website and booking platform. We are located in British Columbia, Canada. This Privacy Policy explains how we collect, use, and protect your personal information in accordance with British Columbia's Personal Information Protection Act(PIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

We collect the following personal information:

• Account information — your name, email address, and preferred name when you create an account.
• Sign-in data — if you sign in with Google, we receive your name and email address from Google. We do not receive your Google password.
• Booking information — the classes you have booked, booking status, and payment method used.
• Payment information — payments are processed by Stripe. We do not store your card number or banking details on our servers. Stripe may retain payment records in accordance with their own privacy policy.
• Waiver — the date and version of the liability waiver you signed.
• Communications — emails we send you (booking confirmations, class reminders).

We use your personal information to:

• Create and manage your account
• Process class bookings and payments
• Send booking confirmations and class reminder emails (transactional — not marketing)
• Provide access to WhatsApp class groups for enrolled students
• Maintain records of waiver agreements
• Respond to your enquiries

We do not use your information for marketing without your explicit consent and we do not sell your personal information to third parties.

We share information with third-party services only as necessary to operate the platform:

• Stripe — payment processing. Stripe is PCI-DSS compliant.
• Resend — transactional email delivery (booking confirmations and reminders).
• Google — optional sign-in via Google OAuth. Only used if you choose to sign in with Google.
• Neon / PostgreSQL — our database, hosted in a secure cloud environment, stores your account and booking data.
• Vercel — our website hosting provider.

These services are bound by their own privacy policies and, where applicable, data processing agreements consistent with applicable privacy law.

We use a session cookie to keep you signed in. This cookie contains a session identifier only — no personal information is stored in the cookie itself. Session data is stored securely in our database. You can sign out at any time to invalidate your session.

We retain your personal information for as long as your account is active. If you request deletion of your account, we will remove your personal information within 30 days, except where we are required to retain records for legal or accounting purposes (for example, transaction records).

Under PIPA and PIPEDA, you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Withdraw consent and request deletion of your information (subject to legal retention obligations)
• Ask questions about how your information is being used

To exercise any of these rights, please contact us at contactus@bunheadsballet.com.

We take reasonable precautions to protect your personal information from unauthorized access, disclosure, or misuse. Access to personal data is restricted to authorised staff only. Our platform uses HTTPS for all data transmission.

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated date. Your continued use of the platform after any changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our handling of your personal information, please contact us at contactus@bunheadsballet.com.