Who is responsible
The controller of the personal data collected on this site is Dwayne Junior Robinson (7VEN Dance Master), whose details appear in the legal notice. Questions about this policy go to contact@dancehallonlinelab.com. [DATA PROTECTION OFFICER — TO BE COMPLETED IF ONE HAS BEEN APPOINTED]
This policy covers the site and the emails we send. You should be able to know exactly what is held about you, why, and for how long.
What we collect, and why
Contact form. Your name, email address, subject and message, plus the language you wrote in. We also record the IP address and browser used to send the form, solely to block automated abuse. Purpose: answering you. Legal basis: our legitimate interest in replying to a message you chose to send.
Newsletter. Your email address, your language and the page you subscribed from. Subscription is double opt-in: you receive a confirmation email and nothing is sent to you until you click the link inside it. An unconfirmed subscription is never used. Legal basis: your consent, which you can withdraw at any time through the unsubscribe link in every message.
Shop order requests. Your name, email address, postal address, telephone number if you provide one, the items, sizes and colours requested, any note you add, and the status of the request. Garments are made to order, so the workshop confirms the request before production starts. Legal basis: performance of a contract, then our legal obligation to keep accounting records.
Technical logs. Our host keeps short server logs (IP address, date, page requested, error codes) for security and troubleshooting.
We do not buy lists, we do not sell or rent your data, and we draw no profiling or automated decision from it.
Cookies
The public site sets no advertising, audience-measurement or tracking cookies. The only cookie used is the session cookie of the private back-office, which is strictly necessary to keep an administrator signed in. Because of that, no consent banner is required.
How long we keep it
- Contact messages: 3 years from the last exchange with you.
- Newsletter: until you unsubscribe, then 3 years from the last interaction; unconfirmed subscriptions are deleted after 1 month.
- Order requests and invoices: 10 years, as required by French accounting law.
- Technical logs: 12 months at most.
Beyond these periods, data is deleted or anonymised.
Who processes it for us
- Vercel Inc. — hosting and delivery of the site (United States, European regions used where available).
- MongoDB, Inc. (Atlas) — database hosting.
- Cloudflare, Inc. — media storage (R2) and traffic delivery.
- Resend — sending transactional emails, confirmations and the newsletter.
- [CARRIER TO BE COMPLETED] — shipping of shop orders, which receives your name and delivery address only.
Each of these acts on our instructions under a written agreement. Some are established outside the European Union: those transfers rely on the European Commission’s standard contractual clauses and on the additional safeguards published by each provider.
Your rights
Under the GDPR you may ask for access to your data, its correction, its erasure, the restriction of its processing, its portability, and you may object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time without affecting what was done before.
Write to contact@dancehallonlinelab.com or to the registered office. We reply within one month; if the request is complex we tell you so and explain why. Proof of identity may be asked for where there is serious doubt.
Complaints
If you believe your rights are not respected, you may lodge a complaint with the CNIL — Commission nationale de l’informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — cnil.fr.
Security and changes
Access to the database and to the back-office is restricted to named, authenticated accounts, and traffic is encrypted in transit. Should this policy change, the date at the top of this page changes with it; material changes are announced in the newsletter.