Privacy Policy

Your privacy matters. This policy explains what personal information Drumming With Sarah collects, why I need it, how I look after it and the choices you have about your information.

 

Last updated: August 2026

 

Who is responsible for your information?

 

This section simply tells you who is looking after your personal information and how you can get in touch.

 

Drumming With Sarah is responsible for the personal information collected and used in connection with its classes, sessions, bookings, enquiries and website. If you have any questions about this Privacy Policy or how your personal information is handled, you can email:  info@drummingwithsarah.co.uk

​

What information do I collect?

​

The information I need depends on how you interact with Drumming With Sarah. I only collect information that is relevant to providing my services, communicating with you and helping you take part safely.

​

I may collect and process the following personal information:

​

• Contact and identification details - such as your name, email address, telephone number and date of birth.

• Booking and attendance information - such as the class or session you have booked, attendance records and relevant communications about your booking.

• Payment information - records relating to payments you make to Drumming With Sarah. I do not collect or store your online banking login or card details.

• Emergency contact information - the name and telephone number of the person you have nominated to contact in an emergency.

• Health and safety information - information you provide through the Pre-Exercise Health Questionnaire (PAR-Q), including information about your health, medical circumstances or anything else that may affect your ability to participate safely.

• Enquiries and communications - information you provide when you contact me by email, WhatsApp or another communication method.

 

Health information

​

Some of the information collected through your PAR-Q is particularly sensitive. I ask for it only so that I can help you participate safely and make appropriate adaptations where needed.

​

Health information is classed as special category personal data under UK data protection law and is given additional protection.

​

Where I process health information provided through the PAR-Q, I do so with your explicit consent. You are asked to provide this consent when completing the form and you may withdraw it at any time by contacting Drumming With Sarah.

​

Why do I use your information?

​

I only use your personal information where I have a genuine reason to do so - whether that's arranging your classes, keeping in touch with you or helping you participate safely.

​

I may use your personal information to:

• respond to enquiries and communicate with you about Drumming With Sarah;

• arrange and manage your class or session booking;

• keep appropriate attendance and payment records;

• administer payments made by BACS;

• provide you with information relating to your classes or sessions;

• review your PAR-Q before you participate;

• identify anything that may affect your ability to participate safely;

• make appropriate adaptations to activities where needed;

• contact your nominated emergency contact if necessary;

• maintain appropriate business, accounting and administrative records; and

• comply with legal or regulatory obligations.

 

My lawful basis for using your information

​

Data protection law requires me to have a valid reason for using your personal information. In most cases, this is simply because I need the information to arrange and provide the classes or sessions you have asked for.

​

When you enquire about or book a Drumming With Sarah class or session, I need to use certain information - such as your name and contact details - to respond to you, manage your booking and provide the service you have requested. Under data protection law, this is known as using your information to take steps before entering into, or to fulfil, a contract with you.

​

I may also need to use certain information to meet a legal obligation, such as keeping appropriate financial and business records, or where I have a legitimate interest in running and administering Drumming With Sarah responsibly, provided this does not override your rights and interests.

​

Health information is treated differently because it receives additional protection under data protection law. When you provide health information through the PAR-Q, I rely on your explicit consent to collect and use that information for the purposes explained on the form.

​

You can withdraw your consent to the processing of your PAR-Q health information at any time by contacting me. Depending on the circumstances, this may mean that I am unable to continue providing a class or session where having that information is reasonably necessary for your safe participation.

​

How is my PAR-Q kept secure?

​

Your PAR-Q contains sensitive information about your health, so I take particular care over how it is collected, stored and accessed.

​

PAR-Q forms are completed using Jotform, a secure online form provider. The form and its submissions are encrypted, and the account is configured to store data within Jotform's EU data centre.

​

Access to completed PAR-Q forms is restricted and protected by account security measures, including two-factor authentication and an additional access code for encrypted submissions.

​

When you submit your PAR-Q, I receive an email notifying me that a new encrypted form has been completed. Your answers and health information are not included in this notification email. I access the completed form securely through Jotform when I need to review it.

​

Emergency contact information

​

In an emergency, being able to find the right contact number quickly is important, so I keep a very limited amount of information readily accessible during classes.

​

Your PAR-Q asks you to provide an emergency contact name and telephone number.

​

For quick access during a class, I may keep a separate paper emergency-contact list containing only the minimum information needed to identify you and contact your nominated person - for example, your first name and surname initial, your emergency contact's first name and their telephone number.

​

This list does not contain your health information or a copy of your PAR-Q. It is kept securely, remains in my possession and is only used where necessary.

​

Who do I share your information with?

​

I treat your personal information confidentially and only share it where there is a genuine reason to do so.

​

I do not sell or trade your personal information.

​

Where necessary, information may be processed or shared with trusted service providers that help me operate Drumming With Sarah. These may include:

​

• Jotform, which I use to securely collect and store PAR-Q information.

• Wix, which provides the Drumming With Sarah website and may process limited technical information when you visit or use the website.

• Email and IT service providers used to communicate with you and operate the business.

• Professional advisers or financial service providers, where information is reasonably required for accounting, insurance, legal or regulatory purposes.

 

I only provide these organisations with information where it is necessary for the service they provide, and they are required to handle personal information appropriately.

​

I may also disclose relevant information where required by law or where it is reasonably necessary to protect someone's health or safety - for example, to the emergency services in a genuine emergency.

​

Your PAR-Q health information is not routinely shared with other organisations. 

​

WhatsApp class groups

​

WhatsApp groups are an optional and convenient way for class members to receive practical updates and keep up to date with any changes.

​

I may offer a WhatsApp group for each class to share practical information such as changes to class times, cancellations or other class-related updates.

​

Joining a WhatsApp group is optional. If you choose to join, your telephone number and any profile information you make available through WhatsApp may be visible to other members of the group.

​

WhatsApp is operated by a third-party provider and information shared through the service is also subject to WhatsApp's own privacy practices.

​

Please do not share sensitive personal or health information in the class WhatsApp group. If you need to discuss something private, including anything relating to your health or PAR-Q, please contact me directly.

​

My website

​

The Drumming With Sarah website is currently provided primarily for information about my classes, sessions and services.

​

You do not need to create an account or membership to use the website, and class bookings are currently arranged directly with me by email rather than through the website.

​

The website is provided using Wix, which may process limited technical information and use cookies or similar technologies when you visit the site. Further information about cookies used on the website will be provided through the website's cookie settings or cookie notice where applicable.

​

How long do I keep your information?

​

I only keep your personal information for as long as I reasonably need it. Different types of information may need to be kept for different lengths of time.

​

PAR-Q and health information is normally kept while you are attending Drumming With Sarah classes and for up to three years after your last session. This allows relevant information to be available if a question, incident or legal or insurance matter relating to your participation arises later.

​

Emergency contact information held on the separate class emergency-contact list is kept only while you are actively attending the relevant class and is securely removed or destroyed when it is no longer needed.

​

Booking information and general correspondence is kept only for as long as it remains reasonably necessary for managing your participation and administering Drumming With Sarah.

​

Financial and transaction records may be retained for longer where this is required for accounting, tax or other legal purposes.

​

Where information relates to an accident, incident, insurance matter, complaint or legal claim, relevant records may need to be retained for longer where reasonably necessary or legally required.

Information that is no longer required will be securely deleted or destroyed.

​

Where is my information stored?

​

I choose the services I use carefully and take reasonable steps to make sure your personal information is handled securely, wherever it is processed.

​

PAR-Q information is collected and stored using Jotform. My Jotform account is configured to use Jotform's EU data centre, helping to keep PAR-Q submissions within the European data-hosting environment I have selected.

​

Other information used to run Drumming With Sarah - such as emails, booking information and business records - may be processed using trusted third-party service providers.

​

Some service providers may process or store personal information outside the UK. Where personal information is transferred internationally, appropriate safeguards will be used where required under UK data protection law.

​

Your data protection rights

​

You have rights over how your personal information is used, and I'm happy to help if you would like to exercise any of them.

​

Depending on the circumstances, you may have the right to:

​

• ask for a copy of the personal information I hold about you;

• ask me to correct information that is inaccurate or incomplete;

• ask me to delete your personal information in certain circumstances;

• ask me to restrict how your information is used;

• object to certain uses of your information;

• withdraw your consent where I am relying on consent; and

• ask for certain information to be provided to you or another organisation in a portable format where this right applies.

 

If you would like to exercise any of these rights, please contact me at info@drummingwithsarah.co.uk.

There is normally no charge for exercising your data protection rights, although there are limited circumstances where a fee may be permitted by law.

​

Questions or concerns about your information

​

If you have a question or concern about how your personal information is being used, please get in touch. I will always do my best to help.

​

If you have any questions about this Privacy Policy, would like to exercise any of your data protection rights, or have a concern about how your personal information has been handled, please contact:

​

Drumming With Sarah
Email: info@drummingwithsarah.co.uk

​

If you are not satisfied with how your concern has been handled, you also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

​

You can find information about making a complaint on the ICO website. https://ico.org.uk/make-a-complaint/data-protection-complaints/check-if-you-can-complain/

​

​

​

​