Privacy Policy

When you send an enrollment request, we collect what you enter: your name, email, and phone number, your student’s name and age, the program you’re interested in, anything you write in the message box, and whether you gave photo and video consent. We also record the page you came from. Staff may add private notes to a request.

When you pay, our payment provider collects your payment details. We receive a record of the payment, but never your full card number.

We don’t use advertising or analytics trackers. The site sets a cookie only when a staff member signs in to the admin. Our hosting provider keeps standard server logs, such as IP addresses, for security, and we briefly use your IP address to limit repeated form submissions.

To reply to your request, schedule lessons, run our programs, take payments, contact you about your student, and keep our records. We don’t sell your information or use it for advertising.

Only the service providers that help us run the school: Railway (website hosting, database, and photo storage), our email providers (Google for our inbox, and Resend for automatic confirmation emails), Stripe (payments), and, if we turn on bot protection for the enrollment form, Cloudflare. New enrollment requests are emailed to our staff inbox. Providers may use your information only to provide their service to us. We may also disclose information if the law requires it or to protect a student’s safety.

Our programs are for students ages 13 to 18. Enrollment requests should come from a parent or legal guardian. We don’t knowingly collect personal information online directly from children under 13. If you believe we have, contact us and we’ll delete it.

We use a student’s image or name on our website, social media, or other promotion only with a parent’s or guardian’s written consent, which can be withdrawn at any time. Performance recordings are shared with participating families.

We keep enrollment and payment records for as long as your student is with us and for up to seven years after, as needed for tax and legal records. We delete enrollment requests that don’t lead to enrollment within two years.

You can ask to see, correct, or delete the information we hold about you or your student, or withdraw photo consent, by emailing or calling us. We’ll respond within 30 days. We may need to keep some payment records where the law requires it.

We limit access to staff who need it, use encrypted connections, and require strong passwords for our admin. No system is perfectly secure, and if a breach affects your information, we’ll tell you as the law requires.

If we change this policy, we’ll post the new version here with a new effective date.

Bellavigna Theater Co. LLC, [email protected], (347) 855-9760.