Privacy Policy

Last updated: 10 August 2026

This Privacy Policy explains how Alvorian Snow Studio Limited ("Alvorian Snow Studio", "we", "us" or "our") collects, uses, stores, discloses and protects personal information when you visit our website, contact us, enquire about or book dance classes, participate in studio activities, or otherwise interact with us. We are based at 5 Pukete Road, Hamilton 3200, New Zealand . This policy is intended to reflect the New Zealand Privacy Act 2020 and its Information Privacy Principles. Where the European Union General Data Protection Regulation (GDPR) applies to a particular processing activity, this policy also explains the relevant GDPR rights and lawful-basis framework.

1. Privacy administrator and contact

The privacy administrator and primary controller responsible for the personal information described in this policy is Alvorian Snow Studio Limited . Our address is 5 Pukete Road, Hamilton 3200, New Zealand . Privacy enquiries, access or correction requests, objections, withdrawal of consent and complaints may be sent to info@alvoriansnowstudio.com . Please provide enough information for us to understand and verify your request without sending unnecessary sensitive information.

2. Scope of this policy

This policy applies to personal information handled through this website and through ordinary administration connected with enquiries, class registration, trial classes, studio communications, feedback and customer support. It does not automatically govern independent third-party websites, applications or services that we do not control. If we link to a third-party service, that provider may have its own privacy practices and terms.

3. Information we may collect

Depending on how you interact with us, we may collect information directly from you or generate limited technical information through the operation of the site. We seek to collect only information that is reasonably necessary for a lawful business purpose.

• Identity and contact information: your name, email address, telephone number, postal address where relevant, and preferred contact method.
• Enquiry and booking information: the class or programme you are interested in, experience level, scheduling preferences, attendance information, messages you send us, and records needed to respond to a request or administer a booking.
• Participant information: where relevant to safely provide dance services, age group, emergency-contact details and information that you voluntarily provide about accessibility or reasonable accommodation needs. We avoid requesting health or other sensitive information unless it is necessary for the service and appropriate safeguards can be applied.
• Parent or guardian information: when a participant is a child or young person, we may collect the name and contact details of a parent, guardian or other authorised adult and information necessary to manage permissions and communications.
• Correspondence: messages, complaints, feedback, requests and our responses.
• Technical information: basic information ordinarily transmitted by a browser or web server, such as IP address, browser type, device type, requested pages, timestamps and security logs. The current website does not intentionally use third-party advertising or behavioural-tracking scripts.
• Payment information: if paid services are introduced or processed through a payment provider, we may receive transaction status, amount and reference information. Full card details should be handled by the relevant payment provider rather than stored by us unless expressly stated otherwise.

4. How we collect personal information

We generally collect personal information from you when you submit a form, contact us, register or enquire about a class, attend a studio activity, provide feedback, or communicate with our staff. We may also collect information from a parent, guardian or authorised representative where appropriate. Where permitted by law and reasonably necessary, we may receive limited information from service providers that help us deliver communications, bookings, payments, security or website hosting.

Under New Zealand privacy principles, personal information should generally be collected from the individual concerned unless an exception applies. We also aim to make the purpose of collection clear at or before the time information is collected.

5. Purposes for which we use information

• to answer enquiries and provide information about classes, schedules, pricing and studio services;
• to register participants, manage trial classes, bookings, attendance and customer support;
• to communicate operational notices, schedule changes, safety information and service messages;
• to maintain appropriate business, accounting and transaction records;
• to protect the security, availability and integrity of our website, systems, staff and participants;
• to prevent misuse, fraud, spam, abuse or unlawful activity;
• to comply with legal obligations, lawful requests and dispute-resolution requirements;
• to establish, exercise or defend legal claims;
• to improve our services using aggregated or appropriately de-identified information where feasible; and
• for another compatible purpose that is permitted by law or that we explain to you when information is collected.

6. Lawful bases where the GDPR applies

Where the GDPR applies, we rely on one or more lawful bases depending on the context. These may include processing necessary to take steps at your request before entering into a contract or to perform a contract; compliance with a legal obligation; our legitimate interests in operating a safe and effective dance studio, responding to enquiries, securing the website and managing ordinary business administration, balanced against your rights and interests; and consent where consent is the appropriate basis. Where we rely on consent, you may withdraw it at any time for future processing, without affecting processing that was lawful before withdrawal.

We do not use consent merely as a substitute where another legal basis is more appropriate, and we do not intend to make a service conditional on consent to unrelated processing.

7. Children and young people

Dance services may involve children and young people. We recognise that their personal information requires particular care. Where appropriate, we communicate with a parent, guardian or authorised adult, collect only information reasonably necessary to administer participation, and take into account the age and capacity of the young person. The website is not designed to encourage children to disclose unnecessary personal information publicly. A parent or guardian who believes a child has provided information inappropriately may contact us so that we can review, correct or delete it where legally appropriate.

8. Special-category or sensitive information

We do not seek sensitive information unless there is a clear and lawful reason. If you voluntarily provide information about health, accessibility, injury, dietary needs or another sensitive matter in connection with safe participation, we will aim to limit its use to the purpose for which it was provided, restrict access, and retain it only as long as reasonably necessary. Where the GDPR applies and information constitutes special-category data, we will rely on an applicable Article 9 condition in addition to an Article 6 lawful basis.

9. Disclosure of personal information

We do not sell personal information. We may disclose limited information to service providers and professional advisers where reasonably necessary for hosting, IT support, communications, bookings, payments, accounting, legal advice, security or similar operational functions. We may also disclose information if required or authorised by law, to respond to lawful government or court processes, to protect rights or safety, or in connection with a genuine corporate reorganisation where appropriate safeguards apply.

Service providers should receive only the information reasonably necessary for their task and should be subject to appropriate confidentiality, security or data-processing obligations where required.

10. Overseas disclosures and international transfers

Some service providers may process information outside New Zealand. When personal information is disclosed overseas, we take reasonable steps to address New Zealand Privacy Act requirements concerning overseas disclosure. Where the GDPR applies to a restricted transfer from the EEA, we use a legally recognised transfer mechanism where required, such as an adequacy decision or appropriate contractual safeguards, together with supplementary measures where necessary.

11. Storage and security

We take reasonable technical and organisational steps designed to protect personal information against loss, unauthorised access, use, modification, disclosure or other misuse. Measures may include access controls, strong authentication where available, software updates, least-privilege practices, backups, staff confidentiality expectations and appropriate provider selection. No internet transmission or storage system is guaranteed to be completely secure, so we cannot promise absolute security.

12. Data minimisation and accuracy

We aim to collect and retain only information that is reasonably necessary for identified purposes. We also take reasonable steps to keep information accurate, complete and up to date where accuracy matters to the purpose for which it is used. You may ask us to correct personal information that you believe is inaccurate or incomplete.

13. Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to provide or administer services, to satisfy accounting, tax, insurance or legal obligations, to manage disputes, and to maintain appropriate safety or business records. Retention periods vary by information type and context. When information is no longer required, we take reasonable steps to delete, destroy or anonymise it, subject to lawful archival or record-keeping requirements.

14. Your rights under New Zealand law

Subject to the Privacy Act 2020 and applicable exceptions, you may request access to personal information that we hold about you and ask for correction. If we do not make a requested correction, you may have the right to ask that a statement of correction be attached to the information. We may need to verify your identity before disclosing personal information, and lawful grounds may permit or require us to refuse or limit a request in some circumstances.

15. Additional rights where the GDPR applies

Where the GDPR applies to our processing of your personal data, and subject to its conditions and exceptions, you may have rights of access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interests, and rights relating to certain solely automated decisions. You may also withdraw consent where consent is the lawful basis. We do not currently use the website to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.

You also have the right to lodge a complaint with a competent data-protection supervisory authority in the EEA if the GDPR applies. Exercising a privacy right will not ordinarily result in a fee, although the law may permit a reasonable fee or refusal for manifestly unfounded or excessive requests in limited circumstances.

16. Direct marketing

We may send information about studio services where permitted by law. Where consent is required, we will seek it. You can ask us to stop promotional communications at any time. Operational communications that are necessary to administer an existing booking or respond to a request may still be sent even if you opt out of marketing.

17. Cookies and similar technologies

The current site is designed to operate without third-party behavioural advertising or analytics scripts. It may rely on technical browser features and server logs necessary to deliver pages, maintain security and support normal functionality. If we later introduce non-essential cookies or similar technologies that require consent, we will update our Cookie Policy and implement an appropriate consent mechanism before using them where required.

18. Data breaches

If we become aware of a privacy or security incident, we will investigate and take proportionate steps to contain and remediate it. Where the New Zealand Privacy Act 2020 requires notification of a notifiable privacy breach, we will notify the Office of the Privacy Commissioner and affected individuals as required. Where the GDPR applies, we will also assess any applicable supervisory-authority and data-subject notification duties.

19. Complaints

If you have a privacy concern, please contact us first at info@alvoriansnowstudio.com so we can investigate and respond. You may also have the right to complain to the New Zealand Office of the Privacy Commissioner. If the GDPR applies, you may have the right to complain to the competent supervisory authority in your EEA country of residence, work or the place of the alleged infringement.

20. Changes to this policy

We may update this Privacy Policy to reflect changes in our services, legal requirements or privacy practices. The revised version will be posted on this website with an updated date. If a change materially affects how we use information already collected, we will take additional steps where required by law.

21. Contact