Type of information held ?
Name, Address, Phone Number, Email, Age, Freeform text, order information. Freeform text may contain activity limiting information such as injuries.

Consent \ Where information came from ?
All information and data came from the client themselves by completing a Salsa course registration form along with freeform text information that the client wanted to share with us. No information comes from any other sources except from the client directly.

What is the data used for ?
Only for Espiritu Latino to advise of up and coming events, new courses, services, relevant news information and essential class changes or cancellations. Information is used to tailor the courses for the clients and ensure that any special requirements are catered for in the class. Location information is to enable classes to optimised for minimum travel time and also to enable items such as vouchers, tickets refunds etc to be sent to the clients.

How is the information held ?
Information is held in a password protected database on a password protected computer system which has up to date anti-virus software. Separate offsite backups and archives are themselves password protected and physically secured. All data is encrypted hence not stored in text format. Database is housed on premises with additional security such as:- Active battery backed alarm system (PIR proximity plus electrical contacts). Additional window locks and door bolts.

How are the paper forms destroyed ?
Once processed they are destroyed in a cross cut P-4 security level rating highly confidential office shredder. It shreds paper into particles of 4mm x 25mm.

Is the data shared with anyone else ?
No, not even with others on the same course but only with the following in extremely rare exceptions :- Only if officially requested by law enforcement agencies (Never happened to date).

Sensitive Personal Data:  (Political opinion, race, beliefs, ethnic group, orientations etc) As we truly value diversity and different opinions this information is completely irrelevant and hence not held.

Data retention ?
Reviewed annually.

How and when can you withdraw your consent ?
At any time just by contacting us all your data will be deleted usually within a couple of days. In exceptional circumstances such as holidays it may take a maximum of two weeks for data to be permanently deleted.
How do I narrow the scope of the data held ?
Just by contacting us we are happy to remove all the data with the exception of what you specify. For example if you only want us to hold first name and email address then that is fine so just let us know.
When is the next privacy review and can I contribute ?
21st December but you can make suggestions at any time which will be reviewed within two weeks of this being put forward to us.