Privacy Policy

What A Drama!

Last updated: 1st January 2026

Data Controller

What A Drama! (sole trader)
Owner & Data Protection Officer: Kat Dulfer
Email: admissions@whatadrama.co.uk
ICO Registration Number: ZB900704

At What A Drama!, I am committed to protecting your privacy and handling personal information responsibly. This Privacy Policy explains what information I collect, why I collect it, how it is stored, and your rights under UK data protection law.

1. Who this policy applies to

This policy applies to parents or guardians who register interest in drama classes or make enquiries by email.

What A Drama! provides activities for children, but all personal data is collected from parents or guardians.

2. What information I collect

When you register interest or contact me, I collect only:

  • Parent/guardian’s full name

  • Child’s age group (for example: 7–9, 10–12, 13–15)

  • Parent/guardian’s email address

No other personal data is intentionally collected at this stage.

3. Please do not share sensitive information

Please do not include medical, SEN, safeguarding, behavioural, or other sensitive information at this stage.

If sensitive information is sent by email without being requested:

  • it is treated as unsolicited

  • it is used only to acknowledge your message or explain that this information will be collected later if appropriate

  • it is not added to records or files

  • it is deleted securely as soon as reasonably possible

4. Why I collect this information

I collect personal information solely to:

  • see who is interested in the proposed drama classes

  • understand demand and plan age groups

  • keep you updated about whether the classes go ahead

You will not receive unrelated marketing.

5. Lawful basis for processing

I process personal data based on consent, which you give when you submit an interest form or contact me and agree to be contacted.

You can withdraw your consent at any time by emailing admissions@whatadrama.co.uk.

6. How your information is stored and protected

Personal information is stored:

  • temporarily within Squarespace (website form submissions)

  • temporarily within Google Workspace (email enquiries)

  • in encrypted, password-protected files on a locked personal laptop

Security measures include:

  • two-factor authentication

  • strong passwords

  • encrypted local storage

  • access limited to me (Kat Dulfer only)

Squarespace and Google Workspace act as data processors and are GDPR-compliant.

7. How long I keep your information

  • Interest-only data is deleted by 7th March 2026 if the project does not proceed

  • You may request deletion at any time

8. Your rights

You have the right to:

  • access the personal data I hold about you

  • ask for incorrect information to be corrected

  • request deletion of your data

  • withdraw consent

  • ask me to stop contacting you

To exercise your rights, email:
📩 admissions@whatadrama.co.uk

If you are unhappy with how your information is handled, you can contact the Information Commissioner’s Office (ICO):
https://ico.org.uk

9. Data breaches

If a personal data breach occurs (for example, unauthorised access or a mis-sent email), I will:

  • act quickly to secure the data

  • assess any risk

  • inform affected individuals if there is a risk

  • report the breach to the ICO within 72 hours if required

  • take steps to prevent it happening again

10. Cookies

The website uses essential cookies to function correctly.
Optional analytics cookies are used only if you accept them via the cookie banner provided by Squarespace.

11. Changes to this policy

This Privacy Policy may be updated from time to time.
The most recent version will always be available on this website.