Privacy policy

Who this covers

LatinSync Central is operated by [COMPANY LEGAL NAME], registered at [REGISTERED ADDRESS]. This policy covers the LatinSync Central website and application.

Two groups of people use the platform, and the relationship differs for each. For studio owners and their staff, we are the data controller. For students, the studio is the controller and we act as a processor on that studio’s behalf — a student’s relationship is with their studio first.

What we collect

We collect the following, and no more than is needed to run the service.

• Account details: name, email address and phone number, provided at sign-up.
• Studio details: studio name, contact details, address, description and logo.
• Class and booking records: classes, schedules, bookings, attendance and membership status.
• Payment records: amounts, dates, status and the Stripe identifiers needed to reconcile them. We do not receive or store full card numbers — see the payments section.
• Technical data: IP address, browser type and pages requested, kept in server logs for security and debugging.

Payments

Payments are processed by Stripe through Stripe Connect. Card details are submitted directly to Stripe and are never transmitted to or stored on our servers. We hold only the references Stripe returns — a payment identifier, the amount, the status and the timestamp.

Stripe acts as an independent controller for payment data and applies its own privacy terms. Studios connect their own Stripe account, and payouts go directly to the bank account attached to it.

How we use it

To operate the service: authenticating users, showing schedules, taking bookings, processing payments and sending the confirmations and reminders a booking implies.

To keep the service secure and working: detecting abuse, investigating faults and maintaining backups.

To respond when someone contacts support.

We do not sell personal data, and we do not share it with advertisers.

How studio data is separated

Each studio’s data is isolated. Studio administrators can see only their own studio. Students can see only their own bookings, memberships and payment history. Access is enforced by role on every request rather than by hiding parts of the interface.

How long we keep it

Account and booking records are kept for as long as the account is active. When a studio closes its account, its data is deleted or anonymised within 90 days, except where a longer period is required — financial records, for example, are normally retained for the period required by tax law in [JURISDICTION].

Server logs are kept for a short operational window and then discarded.

Your choices

You can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted. Students should contact their studio first, since the studio controls their record; if that is not possible, contact us and we will route the request.

Requests can be sent to [DPO EMAIL]. We will confirm receipt and respond within the period required by applicable law.

Changes to this policy

If this policy changes materially we will update the date at the top and notify account holders by email before the change takes effect.

Questions about this document can be sent to [COMPANY LEGAL NAME] at [REGISTERED ADDRESS], or through the contact page.