Privacy Policy
Galaxy Dance Academy Pte. Ltd. · UEN 200911106E
- We collect what we need to book your trial, run your classes and take payment.
- For children, we collect details from the parent or guardian, never from the child.
- We do not sell personal data. Named service providers process it for us, listed in Section 6.
- Card numbers go straight to Stripe. We never see or store them.
- You can ask to see, correct or delete your data by writing to weare@galaxy-dance.com.
This policy explains how Galaxy Dance Academy Pte. Ltd. (“Galaxy”, “we”, “us”) collects, uses, discloses and protects personal data. It applies when you visit www.galaxy-dance.com, book a trial, sign up for a membership, buy a lesson or gift, or contact us on WhatsApp, phone or email.
We handle personal data in line with Singapore’s Personal Data Protection Act 2012 (“PDPA”). Our Membership Terms and Terms of Service also apply where relevant.
Who we are
Galaxy Dance Academy Pte. Ltd. (UEN 200911106E) is a ballroom and Latin dance school registered in Singapore, at 9 Purvis Street, #02-02/03, Singapore 188588.
We decide how and why your personal data is used, so we are responsible for it under the PDPA. Our Data Protection Officer can be reached at weare@galaxy-dance.com or +65 9424 2785.
What we collect
What we hold depends on how you deal with us. A trial booking needs far less than a membership.
Contact and identity details
- Name, mobile or WhatsApp number and email address.
- For memberships and payments: home address with unit and postal code, and a signature.
- For membership registration: an identification or passport number, used to verify who signs the membership agreement.
- For some purchases and our members’ page: date of birth.
Booking and class details
- The trial slot or lesson time you choose, your dancing goal, any notes you add, and how you heard about us.
- Membership package, class schedule, attendance and coach.
- Event registrations, such as showcase or concert sign-ups, including seats booked.
Health information
Before a trial or first class we ask whether you have any medical condition or injury our coaches should know about, and what it is if you choose to tell us. We use this only to teach you safely, and only the team running your class sees it.
Payment records
We keep invoices, receipts, the amount paid, and the outcome of each payment, including failed card charges. Card details are entered directly into Stripe’s secure fields or checkout page. We never receive or store full card numbers.
Messages
WhatsApp conversations and emails with our team, and records of the automated messages we send you, such as booking confirmations and class reminders.
Data about other people you give us
If you book for your child, buy a gift for someone, or name a partner for a private lesson, you give us their details. Please only do so if you are entitled to share them and they would expect it.
Website data
Device, browser, pages visited, the ad or link that brought you here, and similar technical data, collected through cookies and tags (Section 8).
Children’s data
We teach children from age 4. For anyone under 18, a parent or guardian books, signs and gives consent on their behalf. We collect the child’s name, age or date of birth, gender, class group and coach, plus any health notes the parent chooses to share.
Our forms are meant for adults. If you are under 18, please ask a parent or guardian to contact us. If we learn that a child has sent us personal data without a parent’s consent, we will delete it.
How we collect it
- From you, through our website forms, payment pages, membership agreement, media release form, WhatsApp, phone, email and at the studio.
- From a parent, guardian or gift giver who gives us your details.
- Automatically, through cookies and tags when you use our website.
- From our service providers, such as Stripe confirming a payment or WhatsApp confirming a message was delivered.
How we use it
We use personal data for these purposes, with your consent or where the PDPA otherwise permits:
- Confirming and reminding you about trials, classes, private lessons and events.
- Placing you or your child in the right class and level, and tracking progress.
- Setting up and running memberships, including recurring monthly charges on the card you save.
- Processing payments, refunds, gift codes and promo codes, and issuing receipts.
- Answering your questions and handling feedback or complaints.
- Keeping you safe in class, using any health information you share.
- Sending news about classes and events, if you opted in (Section 9).
- Measuring our advertising and improving our website and timetable.
- Keeping business and tax records, and meeting other legal obligations.
Our staff use software tools, including an AI assistant, to look up and summarise records and to draft replies. The AI assistant does not message you on its own; anything it drafts is reviewed by a person on our team.
We do not sell personal data, and we do not use it for purposes unrelated to running Galaxy Dance Academy.
Who we share it with
We share personal data only with organisations that help us run the academy, and only what each one needs. They process it on our instructions under contract.
| Provider | What they do for us |
|---|---|
| Supabase | Database that holds bookings, students, memberships and message records. |
| Vercel | Hosts our website and the functions that handle form submissions. |
| Stripe | Card, Apple Pay and Google Pay payments, saved cards and recurring charges. |
| respond.io and WhatsApp (Meta) | WhatsApp conversations, confirmations and reminders. |
| Resend | Sends our emails, such as booking confirmations and receipts. |
| Make.com | Passes new trial bookings to our WhatsApp inbox. |
| Our membership and billing system | Records memberships, class enrolments, invoices and monthly charges. |
| Anthropic | AI assistant our staff use to summarise records and draft messages. |
| Tag Manager, analytics and advertising measurement, and the map on our contact pages. | |
| Meta and TikTok | Advertising measurement through tags on our website (Section 8). |
| Zelix Labs | Our web and marketing agency, which builds and maintains the website and our internal systems. |
We may also share personal data:
- With photographers and videographers we engage for showcases and competitions.
- With competition organisers, when you or your child enter a competition through us.
- With professional advisers such as accountants, auditors and lawyers.
- With authorities, when Singapore law or a court order requires it.
- With a buyer or successor, if the business or its assets are transferred, under the same protections.
Transfers outside Singapore
Several of the providers in Section 6 store or process data outside Singapore, including in the United States and the European Union. When we transfer personal data overseas, we take steps under the PDPA to make sure it receives a standard of protection comparable to Singapore law, such as contracts that bind the provider to protect it.
Cookies and tracking
Cookies are small files a website stores in your browser. Tags (also called pixels) are snippets of code that tell an advertising platform you visited a page or completed a booking.
| Type | What it does |
|---|---|
| Essential | Makes forms, payments and secure pages work. Stripe sets cookies on payment pages to prevent fraud. |
| Analytics | Counts visits and shows which pages are useful, through Google Tag Manager. |
| Advertising | Tells Google, Meta and TikTok when someone who saw our ad visits or books, so we can measure and improve our ads. |
| Embedded maps | Google Maps on our contact pages may set its own cookies. |
You can block or delete cookies in your browser settings. Blocking essential cookies may stop forms or payments from working. You can also control ad personalisation at Google Ad Settings, in your Facebook and Instagram ad preferences, and in your TikTok privacy settings.
Marketing messages
Messages about your own booking, classes, membership and payments are part of our service, and we send them either way. News about new classes, events and offers is marketing, and we send it only if you agree.
- To stop WhatsApp marketing, reply STOP to any of our messages.
- To stop email marketing, reply to the email or write to weare@galaxy-dance.com.
Opting out of marketing does not affect your classes or membership. We respect Singapore’s Do Not Call rules for marketing messages to Singapore numbers.
Photos and video
We photograph and film classes, showcases and competitions. How we may use images of members is set out in our Membership Terms, and you can tell reception or email us at any time if you do not want your image used in marketing. We record your preference and respect it.
Our media release form lets you choose, separately, whether images may appear on our website, on social media, and in paid ads. You can change those choices at any time.
For safety and privacy, members and visitors may not photograph or film in the studio without written permission from management.
How long we keep it
- Students and members: while you are an active student, plus three years after your last class.
- Trial bookings and enquiries that do not lead to a membership: up to three years after our last contact with you.
- Payment, invoice and tax records: at least five years, as Singapore law requires.
- Health notes: only as long as you or your child train with us.
After that we delete the data or anonymise it so it can no longer identify you. You can ask us to delete it earlier (Section 13), unless the law requires us to keep it.
How we protect it
- Data is encrypted in transit (HTTPS) and stored on providers that encrypt it at rest.
- Only staff who need a record can see it. Coaches see their own classes, not the whole student list.
- Staff accounts use two-step sign-in.
- Personal links we send you, such as a gift or booking page, use long random codes that cannot be guessed.
No system is completely secure. Please keep your personal links private and tell us straight away if you think your data has been misused.
Your rights
Under the PDPA you can:
- Access the personal data we hold about you, and ask how it has been used or disclosed in the past year.
- Correct anything that is wrong or incomplete.
- Withdraw consent for any purpose. We will explain what that means for your classes first, since some data is needed to provide them.
- Ask us to delete your data, unless we must keep it by law.
Email weare@galaxy-dance.com with “PDPA request” in the subject. We may ask you to confirm your identity before we act.
We aim to respond within 30 days. If we need longer, we will tell you when to expect an answer. Access requests are usually free; if a request is unusually large, we will tell you any fee before we start.
Data breaches
If a data breach is likely to cause you significant harm, or affects 500 or more people, we will notify the Personal Data Protection Commission within three calendar days of confirming it. Where it may harm you, we will also tell you directly and explain what you can do to protect yourself.
Changes to this policy
We update this policy when our services or providers change. The date at the top shows the latest version. If a change significantly affects how we use your data, we will tell active students by WhatsApp or email before it takes effect.
Contact and complaints
Questions or complaints about your personal data go to our Data Protection Officer:
- Email: weare@galaxy-dance.com
- Phone or WhatsApp: +65 9424 2785
- Post: Data Protection Officer, Galaxy Dance Academy Pte. Ltd., 9 Purvis Street, #02-02/03, Singapore 188588
If you are not satisfied with our response, you can contact the Personal Data Protection Commission at pdpc.gov.sg.
Last updated 9 October 2026. This policy replaces our earlier Privacy Policy and Cookie Policy.