Privacy Policy

1. Introduction

MYEDU OÜ ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us in any way.

We are located in Estonia and comply with the General Data Protection Regulation (GDPR) and Estonian data protection laws. By using our services, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information You Provide

We collect information you voluntarily provide to us when you:

• Register for dance classes or programs
• Contact us through our website forms
• Subscribe to our newsletters or communications
• Participate in surveys or feedback requests
• Communicate with us via email, phone, or in person

This information may include:

• Name and contact information (email, phone, address)
• Date of birth and age information
• Emergency contact details
• Health information relevant to dance participation
• Payment and billing information
• Dance experience and skill level
• Preferences and goals

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and location data
• Browser type and version
• Device information
• Pages visited and time spent on our site
• Referring website information
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

• Providing dance education services
• Managing class schedules and bookings
• Processing payments and billing
• Communicating about classes, events, and programs
• Ensuring student safety and well-being

3.2 Communication

• Responding to inquiries and requests
• Sending newsletters and updates (with consent)
• Notifying about class changes or cancellations
• Providing customer support

3.3 Legal and Business Operations

• Complying with legal obligations
• Maintaining business records
• Protecting our rights and interests
• Improving our services and website

4. Legal Basis for Processing

Under GDPR, we process your personal data based on:

• Contract: To fulfill our obligations under our service agreement with you
• Consent: When you have given explicit consent for specific processing activities
• Legitimate Interest: For business operations, security, and service improvement
• Legal Obligation: To comply with Estonian and EU legal requirements

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Payment processing
• Website hosting and maintenance
• Email communication services
• Accounting and legal services

5.2 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Protect the rights and safety of our students and staff
• Investigate potential violations of our terms

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against:

• Unauthorized access, use, or disclosure
• Accidental loss or destruction
• Malicious attacks or data breaches
• Unlawful processing

Our security measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Generally, we retain:

• Student records: 7 years after course completion
• Financial records: 7 years as required by Estonian law
• Marketing communications: Until you unsubscribe
• Website usage data: 2 years

8. Your Rights Under GDPR

As a data subject, you have the following rights:

8.1 Access and Portability

• Right to access your personal data
• Right to receive a copy of your data in a portable format

8.2 Correction and Deletion

• Right to correct inaccurate or incomplete data
• Right to deletion ("right to be forgotten") under certain conditions

8.3 Processing Restrictions

• Right to restrict processing in specific circumstances
• Right to object to processing based on legitimate interests
• Right to withdraw consent for consent-based processing

8.4 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience. For detailed information about our cookie practices, please see our Cookie Policy.

10. International Data Transfers

As we are based in Estonia (EU), your data is processed within the European Economic Area (EEA). If we need to transfer data outside the EEA, we will ensure appropriate safeguards are in place to protect your information.

11. Children's Privacy

Our services may be used by minors under 16 years of age for dance classes. When processing children's data, we:

• Obtain parental consent before collecting children's data
• Collect only necessary information for service provision
• Implement additional security measures for children's data
• Allow parents to access, correct, or delete their child's information

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Providing notice during your next visit to our facility

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Data Protection Authority

You have the right to lodge a complaint with the Estonian Data Protection Inspectorate if you believe your data protection rights have been violated: