Privacy policy

1. Privacy contact

Danse Mode-Action Inc. operates the platform. Contact the person responsible for personal information protection at ecole@dansemodeaction.ca, with the subject “Privacy — Répétitions DMA”. You can also call 514 521-9506 or write to the business address below.

2. Information and purposes

We use necessary information to give authorized people access, organize sessions, calculate balances and prices, process payments and refunds, and send selected notices. You, an authorized parent or school administration may supply it.

• Name, email when provided, optional phone, role, season and solo/duo/trio participation.
• Parent/dancer relationships, view or management permissions and notification choices.
• Session dates, times, studios, choreographers, participants, notes and cancellation/change messages.
• Hour balances, prices, taxes, payment/refund references and states, operation history and notices.
• Sign-in identifiers, technical information needed for sessions, security and diagnostics, and language/theme preferences.

3. Who has access

Authorized administrators manage school records. Choreographers see their sessions and information needed for their work. Duo/trio participants see shared sessions. A linked parent sees the child’s record according to their permissions; unrelated accounts do not receive management access.

Notes and change/cancellation messages may be visible to concerned participants, authorized parents and administration. Do not put unnecessary medical details, identity documents or other sensitive information in these fields.

4. Children and parent access

A child can have a record without email or a personal login. Multiple parents can use their own accounts to view or manage the same record. Administration verifies and assigns these relationships; promptly report incorrect permissions.

When consent to use or disclose information is required for a child under 14, it must come from the holder of parental authority or guardian. At 14 or older, the young person or the legally authorized person may give it. Having an email account alone does not establish a right to a child’s record.

5. Service providers and processing outside Québec

The providers below process information necessary for their services. Information may be stored or processed outside Québec, including the American region used for the PostgreSQL database. DMA must document provider locations, contractual safeguards and privacy assessments.

• Clerk: accounts, authentication, passwords and sessions. The school application does not store your passwords.
• Cloudflare: hosting, request routing, security and technical logs.
• Neon: PostgreSQL school records, sessions, balances and history.
• Stripe: secure payments and refunds. Full card numbers are entered with Stripe, not in school records.
• Brevo: transactional emails and sending references. SMS remains disabled and simulated in this version.
• Google or another chosen sign-in provider: your identity. Google sign-in does not give DMA access to Gmail, Drive or your calendar.

6. Communications, calendars and cookies

Booking emails follow profile choices and parent permissions. Change these in My profile. Notices may also remain available in the app. A booking does not establish advertising consent.

The Google Calendar button and .ics file pass session information to the calendar you choose. This is optional and creates a copy; cancelling in DMA does not automatically remove it.

The cookie policy explains sign-in cookies, private entry and local preferences. The current application code includes no advertising or behavioural analytics tool. Providers also apply their own security practices.

7. Retention, archival and deletion

An archived account loses access, but archival does not automatically delete booking, payment, consent or operational history. Records may be needed for tax obligations, refunds, disputes or legal rights.

DMA reviews the need to retain information according to its purpose and applicable obligations. The application does not currently perform automatic deletion under a retention schedule. DMA reviews deletion or restriction requests against continuing needs and applicable obligations.

8. Requests and choices

You may request access, corrections, withdrawal of optional consent or a copy in an appropriate format where applicable law provides that right. Withdrawal can limit some functions without removing records that must legally be retained.

Write to the privacy contact. We will verify your identity and your authority when acting for a child, without requesting more information than necessary. If a request is refused in whole or part, you can request reasons and contact Québec’s Commission d’accès à l’information.

9. Security and incidents

Role-limited access, HTTPS connections and server-side payment verification reduce risks without guaranteeing absolute security. Promptly report suspicious access or disclosure to ecole@dansemodeaction.ca. DMA must assess incidents and carry out legally required steps and notifications.

10. Scope and changes

This information covers repetitions.dansemodeaction.ca. Other DMA services, enrolments and sites may have separate documents. Important policy changes must be announced with their date and scope; they do not establish consent to a new unauthorized purpose.