Privacy Policy

Last Updated: April 14, 2026

Canadian Dance Company (“CDC,” “we,” “us,” or “our”) operates the website www.canadiandancecompany.com and the private lessons booking platform at privatelessons.canadiandancecompany.com. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our websites and services.

1. Information We Collect

We collect information that you provide directly to us when you:

• Create an account on our private lessons booking platform
• Book or manage private dance lessons
• Contact us via email, phone, or our website
• Connect a third-party service such as Google Calendar

Personal Information we may collect includes:

• Name, email address, phone number, and mailing address
• Student names and ages
• Booking and lesson history
• Payment-related information (processed securely by third-party payment providers)
• Account credentials (passwords are stored in hashed form and are never accessible in plain text)

Automatically Collected Information:

• Aggregate website traffic data (pages visited, access times)
• Browser type and device information

We do not use cookies for advertising or tracking purposes. We do not partner with or have special relationships with any ad server companies.

2. Google Calendar Integration & Google User Data

Our private lessons booking platform integrates with Google Calendar to help manage studio and lesson scheduling. This section describes how we access, use, and protect Google user data in compliance with the Google API Services User Data Policy, including the Limited Use requirements.

2.1 What Google Data We Access

When a teacher or administrator connects their Google account, we request access to:

• Google Calendar data — We access calendar event information (event times, availability/free-busy status) for calendars that the user explicitly selects and authorizes.

We only request the minimum permissions (OAuth scopes) necessary to provide our scheduling features.

2.2 How We Use Google Data

Google Calendar data is used solely for the following purposes:

• Creating lesson events — When a private lesson is booked, we create a calendar event on the designated studio calendar so that the lesson appears on the schedule.
• Removing lesson events — When a lesson is cancelled, we remove the corresponding calendar event.
• Checking availability — We query calendar free/busy information to prevent double-booking of studios that may have existing events from other activities (classes, rehearsals, etc.).

We do not use Google user data for advertising, marketing, or any purpose unrelated to the scheduling functionality described above.

2.3 How We Store Google Data

• OAuth tokens — We securely store Google OAuth2 refresh tokens and access tokens in our server database to maintain the calendar connection. These tokens are associated with the specific location or teacher account that authorized them.
• Calendar event IDs — We store Google Calendar event identifiers so we can update or delete events when bookings change.
• We do not store the contents of your calendar events. We only query free/busy status in real time and do not retain or cache calendar event details.

2.4 How We Share Google Data

We do not share, sell, or transfer Google user data to any third parties, except:

• As required by law (e.g., in response to a valid legal process)
• To Google’s own APIs in order to perform the calendar operations described above

We do not allow humans to read your Google user data unless: (a) you have given explicit consent, (b) it is necessary for security purposes (e.g., investigating abuse), or (c) it is required by law.

2.5 Revoking Google Access

You may disconnect your Google account and revoke our access at any time by:

• Using the “Disconnect” option in the Google Calendar settings within our platform
• Visiting your Google Account permissions page and removing access for “Canadian Dance Company”

When access is revoked, we delete the stored OAuth tokens associated with your account. Any calendar events previously created by our platform will remain on the calendar but will no longer be managed by us.

2.6 Limited Use Disclosure

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google data to provide and improve the scheduling features described in this policy.
• We do not transfer Google data to third parties except as necessary to provide our service, as required by law, or during a merger/acquisition with equivalent privacy protections.
• We do not use Google data for serving advertisements.
• We do not allow humans to read Google user data except with your consent, for security investigations, to comply with law, or when data is aggregated and anonymized for internal operations.

3. How We Use Your Information

We use the personal information we collect to:

• Process and manage private lesson bookings
• Send booking confirmations, reminders, and cancellation notices via email
• Manage teacher schedules and studio assignments
• Communicate with you about your account and our services
• Improve our website and booking platform

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

4. How We Protect Your Information

We take reasonable measures to protect your personal information, including:

• Passwords are hashed using industry-standard algorithms (bcrypt) and are never stored in plain text
• Authentication tokens are used for secure session management
• OAuth tokens for third-party services (Google) are stored securely on our server
• Our platform is served over HTTPS with encrypted connections

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. If you wish to delete your account and associated data, please contact us at the email address below. Google OAuth tokens are deleted immediately when you disconnect your Google account.

6. Third-Party Services

Our platform may integrate with the following third-party services:

• Google Calendar API — for studio and lesson scheduling (see Section 2)
• Gmail API — for sending booking notification emails from our domain

Each third-party service is governed by its own privacy policy. We encourage you to review their policies.

7. Children’s Privacy

Our services are intended for use by parents and guardians booking lessons on behalf of their children. We do not knowingly collect personal information directly from children under 13. Student names and ages are provided by parents/guardians as part of the booking process.

8. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and personal data
• Revoke third-party service connections (e.g., Google Calendar) at any time
• Opt out of non-essential communications

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Canadian Dance Company
Email: shawn@canadiandancecompany.com
Website: www.canadiandancecompany.com

Thank you for trusting Canadian Dance Company with your information.