Privacy Policy

The data controller is Carnaval Academy Folklore & Art, a Utah Nonprofit Corporation. You can reach us about any privacy matter at:

• Carnaval Academy Folklore & Art
• Taylorsville, Utah, United States
• info@carnavalacademy.org
• (801) 678-7683

We only ask for the data we need to answer you, enroll the student safely, and collect the agreed payments.

• Contact form: name, email, phone (optional), student age, dance of interest, and your message.
• Quick spot reservation: the child's name and age, the parent or guardian's phone number, and how you prefer to be contacted.
• Full enrollment: dancer details (name, nickname, date of birth, school grade); parent or guardian details (name, relationship, phone, email, optional street address, city, ZIP code and, if provided, a second guardian); prior dance experience; health information needed for safety in class (allergies, medical conditions, accommodations); emergency contact; people authorized and not authorized to pick up the student; your decision about photos and videos; optional demographic data (ethnicity and approximate household income); the signer's name, the date, and how you heard about us.
• Tuition and costume payments: processed by Intuit (QuickBooks Payments). Intuit collects your card or bank details; we only see the name, email, amount, and payment status. We never see or store your full card number.
• Donations: processed by Zeffy. Zeffy collects your payment and billing details; we receive the name, email, amount, and date to issue the donation receipt.
• Communications: whatever you write to us by email, phone, WhatsApp, or text message.
• Technical data: when you visit the site, our hosting provider records your IP address, browser type, and pages visited in security logs. If you accept measurement cookies, Meta also receives browsing data (see the Cookie Policy).

Our programs are for children and youth, but the site is aimed at their parents and guardians. We only collect information about a minor when it is provided by their parent or legal guardian. We do not collect data directly from children under 13, and we do not let them enroll on their own. If you believe a minor gave us data without permission, write to us and we will delete it.

The allergies, medical conditions, and accommodations you share are used solely to keep the student safe during classes, rehearsals, and performances. Only the directors and the instructors in charge of the group have access and, in an emergency, the medical staff treating the student. We do not use this information for any other purpose or share it with sponsors.

• To answer your questions and manage enrollment, spots, and schedules.
• To keep the student safe and act in an emergency.
• To collect tuition and costume payments and issue donation receipts.
• To communicate with you through the channel you chose (call, WhatsApp, text, or email) about classes, schedules, payments, events, and academy notices.
• To take and publish photos or videos of the student only if you authorized it at enrollment.
• To prepare aggregate reports for sponsors and funders (for example, how many families we serve by ZIP code or income range), never with names or data that identifies a person.
• To measure whether our ads work, only if you accepted measurement cookies.
• To meet legal, accounting, and tax obligations, such as keeping donation receipts and payment records.

We do not sell or rent your data. We share it only with providers that help us operate, under their own privacy policies and only for the service they provide:

• Vercel Inc. (United States): website hosting and security logs.
• FormSubmit: email delivery of what you submit in the forms.
• Google LLC: a copy of enrollments in an academy Google Sheets spreadsheet, and email.
• Intuit Inc. (QuickBooks): invoices, reminders, and collection of tuition and costume payments.
• Zeffy Inc.: online donations and receipts.
• Meta Platforms Inc.: our Facebook and Instagram pages, WhatsApp Business (if you choose that channel), and the ad-measurement pixel (only with your consent).

We may also share data with emergency personnel if the student needs it, and with authorities when the law requires it. If Carnaval Academy were to merge with another organization, the data would be transferred with the same protections.

We only text or WhatsApp you if you chose that channel in a form or asked us to. Messages are informational (schedules, spots, payments, and notices), not mass advertising. Your carrier's message and data rates may apply. To stop receiving them, reply STOP or write to us. For email, reply asking to unsubscribe or write to us.

• Inquiries and quick reservations that do not lead to enrollment: up to 12 months after the last contact.
• Enrollment data, including health information: while the student is enrolled and up to 4 years after their last class, in case a claim arises.
• Emergency contact and authorized pick-up people: deleted one year after the student's last class.
• Payment and donation records: 7 years, as accounting and tax rules require.
• Photos and videos: as long as we have your authorization; we remove them from our channels when you ask.
• Technical server logs: kept by the hosting provider for a short period for security purposes.

You can ask us at any time to:

• Tell you what data we hold about you or your child and give you a copy.
• Correct inaccurate or incomplete data.
• Delete your data, except what the law requires us to keep (for example, donation receipts).
• Withdraw an authorization: photos and videos, text or WhatsApp messages, or measurement cookies.

Write to info@carnavalacademy.org or call (801) 678-7683. To protect your data, we will ask you to confirm your identity. We respond within 30 days at most. Exercising these rights never affects the student's access to classes.

The site runs over HTTPS, so forms travel encrypted. Payments are processed by certified providers and we do not store card numbers. Access to enrollments is limited to the directors. No system is infallible: if an incident affecting your data occurred, we would notify you as required by Utah law (Utah Code 13-44, Protection of Personal Information Act).

We use one essential cookie to remember your language and another to remember your cookie choice. Meta measurement cookies are only activated if you accept them in the banner. Full details are in the Cookie Policy.

Links to Zeffy, QuickBooks, TikTok, Facebook, and Instagram take you to sites with their own privacy policies, which we encourage you to read. We do not control how they handle your data.

If we change this policy, we will publish the new version here with its date. If the change is significant, we will notify enrolled families by email.

• Carnaval Academy Folklore & Art
• Taylorsville, Utah, United States
• info@carnavalacademy.org
• (801) 678-7683