How your data is handled

The notice in force, written from what the code actually does. The terms for teachers refer to it and it forms part of them. Last changed 27 September 2026.

Who we are

ArcCreativeHub and ArcDancer are operated by ArcGabriel Ltd, a company registered in England and Wales, company number 17389329, registered office Carlile Institute Business Centre, 54 Huddersfield Road, Meltham, Holmfirth HD9 4AE. We are registered with the Information Commissioner's Office. Email hello@arccreativehub.com about anything on this page; company details are published in full.

Two roles, and which one applies

For your own account we are the controller. Your email address, your sign-ins, your bookings, what you have paid: we decide what is held and why, and this notice explains it.

For what a teacher records about their own students we act on that teacher's instructions. Your teacher runs their own dance school and decides who they enrol, what they record and how long they keep it. We provide the software and hold the data for them. If you want a teacher's record of your family changed or removed, ask your teacher first — and if that goes nowhere, write to us and we will help.

What we collect, and why we are allowed to

To run the service you asked for (performing our contract with you): an email address to sign you in — sign-in is an emailed link that works once, so there are no passwords to store or breach — and, for dancers, a display name, whether they are under 18, bookings, membership dates, invoices and document signatures. For teachers, the profile they choose to publish in the directory.

To keep children safe and the service accountable (our legitimate interests, and our legal obligations): safeguarding declarations and the certificates behind them, an audit ledger that records that something happened without recording what was said, and safeguarding reports — which hold only what the reporter chose to write.

To be paid, and to prove it (contract, and the law on keeping records): payment records. Card details are handled by Stripe and never touch our servers.

What we do not collect

No dates of birth, no home addresses for dancers, no photographs of students, no card details, and no tracking or advertising data of any kind. There are no analytics scripts and no third-party embeds: every font, image and style on this site is served from this site.

Who else sees it

Only the suppliers the service runs on, each under contract and only for that purpose: Stripe for payments, Resend for sending email, Railway for hosting, and Cloudflare for the relay that helps a video class connect. We do not sell data, we do not share it for advertising, and we do not give it to anyone else except where the law requires it or a child's safety demands it.

How long we keep it

While your account is open, and then: a safeguarding certificate image for 180 days after the decision on it, though the certificate number, its date and the outcome are kept; photo ID and proof of address for 12 months after an account closes; a qualification certificate image for 90 days after somebody here looked at it; backups for 90 days. A deleted family account can be restored for seven days, and after that it is gone. The anonymous audit ledger is kept, because a record that can be deleted is not a record.

Where it is held

In the United Kingdom and the European Economic Area. Where a supplier above processes data outside that area, it does so under the safeguards UK data protection law requires.

Cookies

Two, both strictly necessary: a signed session cookie when you sign in, and a small cookie that remembers you closed the privacy notice. Nothing else, which is why this site never asks you to accept tracking.

Children

A dancer under 18 does not hold their own account. Their guardian does, the guardian gives consent, and messaging runs between the teacher and the guardian rather than with the child. What we hold about a child is set out in safeguarding.

Your rights

You can ask for a copy of your data, ask for it to be corrected, ask for it to be erased, ask us to restrict or stop a particular use, and ask for it in a portable form. Erasure removes personal data while keeping the anonymous audit ledger the service needs to stay accountable. To exercise any of these, email hello@arccreativehub.com — a person reads it — or ask your teacher, who can pass it on.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can put it right, but you do not have to.

Terms · Safeguarding · Company details · Back to the gateway

↑