Privacy Policy

This Privacy Policy describes how Drenovo ("we", "us", "our") collects, uses, and protects personal information provided by users of our website at https://drenovo.com/ and by individuals who enquire about or enrol in our programmes. We are committed to handling personal data responsibly and in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Drenovo is an acting school operating in Cambridge, United Kingdom. Our registered studio address is 28 Shelly Row, Cambridge CB3 0BS. For data protection enquiries, you may contact us at [email protected].

2. What personal data we collect

We may collect the following categories of personal data:

• Contact information: Name, email address, telephone number, and postal address provided through our contact or enquiry forms.
• Enquiry and communication data: The content of messages you send to us, including information about your acting experience and the programmes you are interested in.
• Enrolment data: Information provided when joining a programme, including any relevant background information you choose to share.
• Website usage data: Technical information including IP address, browser type, pages visited, and session duration, collected through essential cookies or server logs. This information is used only for the technical operation of the website.

3. How we use your personal data

We use personal data for the following purposes:

• To respond to enquiries about our programmes
• To process enrolments and manage student records
• To communicate information relevant to programmes in which you are enrolled or have expressed interest
• To maintain records required for the administration of our school
• To comply with legal obligations

We do not use personal data for automated decision-making or profiling. We do not sell personal data to third parties. We do not use personal data for advertising or marketing purposes without explicit consent.

4. Legal basis for processing

Our lawful bases for processing personal data are as follows:

• Contract: Processing necessary to provide the services you have requested or to take steps at your request prior to entering a contract.
• Legitimate interests: Processing for the day-to-day operation and administration of the school, where this does not override your rights and interests.
• Legal obligation: Processing required to comply with applicable law.
• Consent: Where we send optional communications (such as information about future courses or events), we will obtain your consent before doing so.

5. How long we keep your data

We retain personal data for as long as is necessary for the purposes for which it was collected, and in accordance with applicable legal requirements. Enquiry data is typically retained for twelve months from last contact. Enrolment records are retained for a period of seven years from the conclusion of the relevant programme, in accordance with standard record-keeping practice.

6. Sharing personal data

We do not share personal data with third parties for their own purposes. We may share data with service providers who assist in the operation of our school (such as email service providers or payment processors), where those providers are bound by appropriate data protection obligations. We will disclose personal data to law enforcement or regulatory authorities where required to do so by law.

7. Your rights

Under UK data protection law, you have the following rights:

• Right of access: To request a copy of the personal data we hold about you.
• Right to rectification: To request correction of inaccurate or incomplete data.
• Right to erasure: To request deletion of your data, subject to applicable legal obligations.
• Right to restrict processing: To request that we limit how we use your data in certain circumstances.
• Right to data portability: To receive your data in a structured, commonly used format.
• Right to object: To object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.

8. Cookies

Our website uses essential cookies required for basic functionality. We do not use tracking, advertising, or analytics cookies without your consent. Please see our Cookie Policy for full details.

9. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or destruction. Our website uses HTTPS encryption. We do not retain payment card details.

10. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), which is the UK's supervisory authority for data protection. Details are available at www.ico.org.uk.

11. Changes to this policy

We may update this Privacy Policy from time to time. The date of the most recent revision is shown at the top of this page. We recommend checking this page periodically.

12. Contact

For any questions about this policy or about how we handle your data, please contact us at [email protected] or by post at 28 Shelly Row, Cambridge CB3 0BS.