Privacy Policy

This policy explains how Tingley's Acting Studio ("we", "us", "our") handles personal information in the United Kingdom. It applies to visitors, prospective students, current students, parents and guardians, contractors, and anyone else who interacts with us from the United Kingdom.

1. The legal framework that applies to you

Our handling of your personal information in the United Kingdom is governed by the UK GDPR and the Data Protection Act 2018. The regulator is the Information Commissioner’s Office (ICO). We process personal information in accordance with the UK GDPR’s seven data protection principles.

2. Who operates this site

Tingley's Acting Studio is operated by [legal entity name, registration or company number]. Registered address: [address]. For privacy questions, email us (show email).

3. What personal information we collect

• Contact details you submit via our forms: name, email, phone number, and any message content.
• Information about minors: only where a parent or guardian has enquired on their behalf, and only to the extent necessary to respond to that enquiry or deliver coaching.
• Session-related information where you are a coaching client: scheduling details, session notes, and payment records.
• Basic technical information about your visit: IP address (used for rate limiting and security only), browser user-agent, and the pages you viewed. We do not place advertising cookies.

4. Why we collect it

• To reply to your enquiries and arrange coaching.
• To deliver the coaching you have paid for, including scheduling, session notes, and follow-up.
• To meet our obligations under consumer protection, child safety, and tax law in the United Kingdom.
• To improve the site and the coaching product over time, using information in aggregated form only.

5. How long we keep it

Enquiry information is kept for 12 months from your last contact. Active student records are kept for the duration of the coaching relationship plus 7 years to meet financial and jurisdictional record-keeping obligations. Information about minors is kept only as long as required by our Child Safe Policy and applicable law in the United Kingdom, then deleted.

6. Who we share it with

We do not sell personal information to anyone. We share it only with service providers necessary to run the business (scheduling, email, payments, file storage) and only under written agreements that require those providers to protect your information. Where a provider processes information outside the United Kingdom, we use the transfer mechanisms permitted by the UK GDPR and the Data Protection Act 2018.

7. Your rights in the United Kingdom

You have the right to request access to the personal information we hold about you, to request correction of inaccurate information, and to request deletion where that is permitted by law. You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe we have mishandled your information.

To exercise any of these rights, email us (show email). We will respond within 30 days.

8. Security

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, or unauthorised disclosure. No system is completely secure; if a data breach occurs that is likely to result in serious harm, we will notify you and the Information Commissioner’s Office (ICO) in accordance with our obligations under the UK GDPR and the Data Protection Act 2018.

9. Children

Coaching involving minors is only offered with the written consent of a parent or guardian. Communication about a minor's coaching goes through the parent or guardian. We do not market to children.

10. Changes to this policy

We may update this policy from time to time. Substantive changes will be flagged at the top of the page. Non-substantive updates (typos, link fixes) will not.

11. Contact

For privacy questions or to exercise your rights under the UK GDPR and the Data Protection Act 2018, email us (show email), or write to the registered address above.