Privacy Policy | Yalla Belly Dance Dublin

Last Updated: December 11, 2025

1. Introduction

Yalla Dance Ltd ("we," "us," or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, book our services, or attend our classes and events.

We are based in the Republic of Ireland and comply fully with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and the Data Protection Act 2018.

2. Data Controller and Processor Roles

Data Controller: Yalla Dance Ltd (Company No: 802882). We determine the purposes and means of processing your personal data.
Data Processor: Wix.com. Wix.com provides the hosting platform and processing services on our behalf and based on our instructions.

Contact Details for the Data Controller:

Company Name: Yalla Dance Ltd
Registered Office: Dublin, Ireland (Non-trading address)
Website: https://www.yalladance.ie
Email: yalla@bellydance.ie
Phone: +353 85 7318 494

3. Data We Collect

We collect data necessary for providing our dance classes and services. This includes:

Personal Identifiers & Contact:
- Name, email address, phone number, postal address.
- Collection Method: Contact forms, booking forms, newsletter subscription.

Transaction Data:
- Booking history, purchase records, service preferences.
- Collection Method: When you book or purchase services.

Financial Data:
- Billing address, payment details (Note: We do not store full credit card details; these are processed securely by Wix Payments or other third-party PCI-compliant providers).
- Collection Method: Checkout process.

Technical & Usage Data:
- IP address, browser type, device type, pages visited, time spent on site, referral sources.
- Collection Method: Automatically via cookies and Google Analytics.

Special Category Data:
- Relevant health or medical information (e.g., injuries, conditions) where necessary for safe class participation.
- Collection Method: Explicitly provided by you (requires explicit consent).

Communications:
- Messages, feedback, reviews, and survey responses.
- Collection Method: Email, contact forms, or social media.

4. Legal Basis for Processing (GDPR Article 6)

We process your personal data based on one or more of the following legal grounds:

Contractual Necessity: To fulfil a contract with you (e.g., processing your booking for a class, providing the service, sending confirmations).
Legitimate Interests: For administrative purposes, improving our services and website, preventing fraud, and conducting security checks (provided your rights do not override these interests).
Consent: When you explicitly opt-in for direct marketing (e.g., newsletters) or provide special category data (e.g., health information). You have the right to withdraw consent at any time.
Legal Obligation: When processing is required to comply with law (e.g., financial reporting, tax, or health and safety regulations).

5. How We Use Your Data

We use your data for the following specific purposes:

Service Delivery: To manage your bookings, process payments, and send service-related communications (reminders, venue changes).
Communication: To respond to your enquiries, feedback, and support requests.
Marketing: To send newsletters and updates about new classes, workshops, or promotions, only if you have given explicit consent.
Business Operations: To maintain accurate financial records, analyse website usage to improve services, and ensure security.

6. Data Storage, Security, and Transfers

Data Storage and Security:
- Our company is hosted on the Wix.com platform. Your data may be stored through Wix.com's data storage, databases, and general Wix.com applications.
- Wix stores your data on secure servers behind a firewall.
- We implement appropriate technical and organisational measures, including encryption and secure access controls, to protect your personal data.

International Transfers:
- Wix may store your site-visitors’ personal information in data centres located in the United States, Ireland, South Korea, Taiwan, and Israel.
- Any transfer of data outside of the EEA to countries without an adequacy decision by the European Commission is protected by appropriate safeguards, primarily the use of Standard Contractual Clauses (SCCs), as implemented in the Wix Data Processing Agreement (DPA).

Data Retention:
- We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal requirements (e.g., financial records are typically kept for 7 years in Ireland) and for resolving disputes.

7. Sharing and Disclosure of Data

We only share your data with trusted third parties where necessary and with appropriate safeguards (Data Processing Agreements/DPAs) in place:

Wix.com: For website hosting, e-commerce, and booking management.
Payment Processors: Such as PayPal or Stripe (through Wix Payments), who handle payment details securely and adhere to PCI-DSS standards.
Service Providers: Accounting software, email marketing services, and cloud storage providers.
Professional Advisors: Accountants and legal professionals.
Legal Obligation: When required to do so by law, a court order, or regulatory authorities (e.g., the Revenue Commissioners).

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies (like Google Analytics) to improve user experience, analyse site traffic, and support marketing.
We comply with GDPR and ePrivacy requirements by using a Cookie Consent Banner to obtain your affirmative consent before placing any non-essential cookies on your device.
For detailed information on the cookies used, please refer to our separate Cookie Policy.

9. Your GDPR Data Protection Rights

Under the GDPR, you have the following rights concerning your personal data. To exercise any of these rights, please contact us at yalla@bellydance.ie.

Right of Access: The right to request a copy of the personal data we hold about you.
Right to Rectification: The right to request the correction of inaccurate or incomplete data.
Right to Erasure ('Right to be Forgotten'): The right to request deletion of your data in certain circumstances.
Right to Restrict Processing: The right to request temporary restriction of processing your personal data.
Right to Data Portability: The right to request transfer of your data to another Data Controller.
Right to Object: The right to object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision Making: The right to not be subject to a decision based solely on automated processing.
Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.

We will respond to your request within one calendar month.

10. Minors’ Data

We are committed to protecting the privacy of minors.
If a participant is under 18 years old, we require the explicit consent of a parent or guardian for data processing.
We do not knowingly collect personal data from children under the age of 16 without verifiable parental consent.

11. Complaints

If you have any concerns about how we handle your data, please contact us first at yalla@bellydance.ie.

You also have the right to lodge a complaint with the supervisory authority in Ireland:

Data Protection Commission (DPC)

Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Website: https://www.dataprotection.ie
Phone: +353 57 868 4800 / +353 761 104 800

12. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. The latest version will always be published on this page, and we encourage you to review it periodically. Any material changes will be notified to you directly where appropriate.

Would you like me to help you draft a separate Cookie Policy to accompany this document, as referenced in Section 8?