Privacy Policy

Last updated: 05/17/2026

Privacy Policy — Starburst School of Speech & Drama

Introduction Starburst School of Speech & Drama ("Starburst", "we", "us") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store and share personal data when you visit or use our website and services, sign up for classes, make purchases, or otherwise interact with us. We are based in Ireland and process personal data in line with the EU General Data Protection Regulation (GDPR) and Irish data protection law.

Data controller Starburst School of Speech & Drama c/o Kate O’Connor (Data Protection Contact) Irish Girl Guides’ Den Bennettsbridge Road, Kilkenny Eircode: R95 F293 Email: info@starburstdrama.com Phone: 085-1142686

Information we collect We may collect and process the following personal information, depending on how you interact with us:

  • Contact details: names, postal and billing addresses, email addresses, phone numbers.
  • Child details: name, age/school year (ECCE Year 2–6th class), class group, relevant medical/allergy information, special educational needs and safeguarding notes provided by parents/guardians.
  • Account information: usernames, passwords, preferences (if you create an account).
  • Transaction and order data: purchases, returns, order history, invoices and payment confirmations.
  • Financial/payment information: payment card details processed securely via third-party payment providers (we do not store full card details on our servers unless required by a payment processor).
  • Communications: messages, enquiries and consent records.
  • Attendance and progress: class attendance, exam enrolment and results, teacher notes.
  • Images and video: photographs or recordings of classes or performances where parental consent is obtained.
  • Device & website data: IP address, browser, device information, cookies and analytics (e.g., Shopify/Google Analytics).

How we collect personal information

  • Directly from you when you register, book, purchase, contact us or sign consent forms.
  • Automatically via our website using cookies and similar technologies.
  • From third-party service providers (e.g., Shopify, payment processors, email providers).
  • From other parties where you have directed us to receive information (e.g., exam bodies).

How we use personal information (purposes and legal bases) We use personal information for:

  • Providing and managing classes, workshops, and events, and fulfilling purchases (performance of a contract).
  • Processing payments and handling orders and refunds (performance of a contract).
  • Communicating about class times, bookings, incidents, or account matters (contract/legitimate interests).
  • Safeguarding children and meeting legal safeguarding obligations (legal obligation and vital interests).
  • Enrolling pupils in Irish Board of Speech & Drama exams and recording results (performance of a contract/legitimate interest).
  • Sending marketing communications where you have consented (consent).
  • Improving our services and website using analytics (legitimate interests).
  • Preventing fraud and ensuring security (legitimate interests/legal obligation).
  • Responding to legal requests and protecting legal rights (legal obligation/legitimate interests).

Sharing of personal information We do not sell personal data. We may share information with:

  • Shopify and other platform providers that host our online store and provide e‑commerce services.
  • Payment processors and banks to handle transactions securely.
  • The Irish Board of Speech & Drama for exam registration and certification purposes.
  • Service providers who support operations (email, booking systems, cloud storage, analytics, IT support) under contract and with data protection safeguards.
  • Safeguarding or statutory authorities where required by law or to protect a child’s welfare.
  • In connection with business transactions (sale, merger) subject to confidentiality and legal requirements.

Relationship with Shopify and other third parties Our online store is powered by Shopify. Information you provide is transmitted to and shared with Shopify and third parties that may be located outside Ireland to provide and improve services. Shopify may use aggregated data for enhanced features, advertising and analytics. For more information on how Shopify handles data and your rights with respect to Shopify-processed data, see Shopify’s privacy information: https://privacy.shopify.com/en.

International transfers Personal data is normally processed within the EU/EEA. If we transfer data outside the EEA/UK, we will use appropriate safeguards such as Standard Contractual Clauses or rely on an adequacy decision to ensure a similar level of protection.

Retention of personal data We retain personal data only as long as necessary for the purposes collected and to meet legal, regulatory or contractual obligations. Typical retention periods:

  • Booking, payment and transaction records: up to 6 years (accounting/tax).
  • Attendance, exam and progress records: while the pupil attends Starburst and up to 6 years thereafter.
  • Marketing consents: until consent is withdrawn.
  • Safeguarding records: retained in line with legal and best-practice guidance.

Children’s data and parental consent We provide classes for minors and rely on parental responsibility for consent. We collect and process children’s data to deliver our services and to meet safeguarding obligations. We will only use images or recordings of children for marketing or social media with explicit parental consent; this consent can be withdrawn at any time by contacting us.

Cookies and analytics Our website uses cookies and similar technologies to enable functionality and improve user experience. We may also use third-party analytics (e.g., Google Analytics, Shopify analytics). You can manage cookie preferences through your browser settings or any on-site cookie control we provide.

Security We implement appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration or disclosure. While we strive to use secure methods, no transmission or storage can be guaranteed totally secure.

Your rights Subject to statutory limitations, you may have rights including:

  • Access: request a copy of personal data we hold about you.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion in certain circumstances.
  • Restriction: request restriction of processing in certain circumstances.
  • Object: object to processing where based on legitimate interests.
  • Portability: request transfer of your data to another controller where applicable.
  • Withdraw consent: withdraw consent for processing where the legal basis was consent. To exercise rights, contact info@starburstdrama.com. We may need to verify identity before fulfilling requests. If unsatisfied, you can lodge a complaint with the Data Protection Commission (Ireland): www.dataprotection.ie.

Marketing preferences You can opt out of marketing emails at any time using unsubscribe links in emails or by contacting info@starburstdrama.com. Even if you opt out, we may still send non‑promotional messages about bookings, classes or legal matters.

Third-party links Our Services may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. Please review their privacy policies before providing personal information.

Legal requests and protection of rights We may disclose personal information to comply with legal obligations, respond to lawful requests by public authorities, or to protect the rights, property or safety of Starburst, our users or others.

Changes to this policy We may update this Privacy Policy from time to time. We will post any changes on our website and update the “Last updated” date. For significant changes we will notify affected contacts where appropriate.

Contact For questions, to exercise your rights, or raise concerns, contact: Kate O’Connor info@starburstdrama.com 085-1142686 Irish Girl Guides’ Den, Bennettsbridge Road, Kilkenny (R95 F293)

Supervisory authority If you have an unresolved concern about how we handle your data you can contact: Data Protection Commission (Ireland) — www.dataprotection.ie

Effective date This policy is effective from 05/17/2026.