Privacy Policy

1. Who we are

Tango Touch^TM is a Singapore sole-proprietorship providing Argentine tango instruction, events and related services.

Data Protection Officer (DPO)

Riccardo Biemmi, dpo@tangotouch.sg, +65 8078 1093

This Policy explains how we handle personal data collected through our website, booking forms, emails, messaging apps and in connection with our classes, workshops and events in Singapore.

2. The data we collect

• Identity and contact: name, email address, mobile number
• Booking details: class selections, dates, attendance, role preference (lead/follow)
• Payments: payment references (e.g. PayNow transaction details, invoice numbers). We do not store credit card numbers
• Communications: messages you send us (including enquiries, feedback and rescheduling requests)
• Marketing preferences: your opt-in choices for updates and promotions
• Images and videos: We may take photos and short video clips during classes/events only with express consent. Both are stored securely and will be shared solely with enrolled students as part of the Tango Touch^TM methodology. Videos will not be published online or on social media, ever
• Minors: name and parent/guardian contact. We require parental consent for anyone under age of 18

We do not collect NRIC/FIN, date of birth or other identification data unless required by law or we have notified you.

3. How we use your data

• Providing services: to manage bookings, deliver classes, send class reminders/changes, and issue invoices/receipts
• Support and safety: to handle enquiries, scheduling, and basic incident logs where relevant
• Payments and accounting: to reconcile PayNow/FAST receipts and maintain statutory records
• Improvements: to review attendance patterns and improve our programmes and timetables
• Marketing: to send news and offers, only if you opt in
• Photos (no videos): to feature learning moments on our website or social channels only with prior consent; consent can be withdrawn anytime

Under the PDPA, we notify you of purposes and rely on your consent (including deemed consent where appropriate) to collect and use your personal data for these purposes.

4. Who we share data with

We use reputable service providers to run the business, for example:

• Website/hosting and email/calendar (e.g., cloud providers)
• Payment rails: your bank and our bank for PayNow/FAST reconciliation
• Accounting/invoicing tools
• Optional email/SMS platforms for opted-in updates

These providers process data on our instructions and are required to protect it. We do not sell personal data.

5. Overseas transfers

Some service providers may store or process data outside Singapore. Where we transfer personal data overseas, we ensure the recipients provide a comparable standard of protection as required by the PDPA.

6. Retention

• Finance records: (invoices, receipts) kept 5 years to meet tax rules
• Student contact and booking history: kept up to 24 months after the last class, then securely deleted, unless we must keep it longer to resolve a dispute or meet a legal obligation
• Images/media used with consent: kept until you withdraw consent or we retire the content
• Instructional records (including instructional materials associated with you, assessments, evaluations, progress notes and attendance): kept up to 24 months after the last class, then securely deleted, unless we must keep it longer to resolve a dispute or meet a legal obligation

7. Marketing and the DNC Registry

We send marketing messages (email/SMS/WhatsApp) only with your clear opt-in. You may unsubscribe or withdraw consent at any time. For Singapore numbers, we observe the Do Not Call rules; service messages relating to your active class bookings are not telemarketing.

8. Cookies and analytics

Our website may use essential cookies (to make the site work) and optional analytics (to understand usage and improve content). You can refuse non-essential cookies via our banner (if shown) or by adjusting your browser settings. Analytics, if enabled, are aggregated and not used to identify you personally.

9. Photos and social media

We will ask first before taking identifiable photos for publicity. Saying no will never affect your ability to attend classes or other events. If you previously consented, you can withdraw consent at any time by writing to the DPO; we will stop future use and remove practicable online copies.

10. Children and young persons

For participants under 18, we require parent/guardian consent for participation and for any optional marketing or media consent.

11. Security

We apply reasonable security measures: access on a need-to-know basis, password protection, MFA on key systems, and secure cloud storage. However, no method is perfectly secure; please avoid sending sensitive data via open channels.

12. Your choices and rights

You may:

• Access your personal data we hold
• Correct inaccurate data
• Withdraw consent (e.g., marketing, media use)

Contact the DPO (details above and below). We will respond as soon as practicable. Note that withdrawing consent may affect our ability to provide certain services (e.g., if we cannot contact you regarding your booking).

13. Data breaches

If a data incident occurs, we will assess it promptly. Where it is notifiable under the PDPA (e.g., likely to cause significant harm or involves 500 or more individuals), we will notify the PDPC within 3 days of determination and inform affected individuals as required.

14. Contact and complaints

Questions or concerns about this Policy or our data practices?
Email dpo@tangotouch.sg or call +65 8078 1093.
If we cannot resolve your concern, you may contact the Personal Data Protection Commission (PDPC) Singapore.

15. Updates to this Policy

We may update this Policy from time to time. The effective date at the top and bottom shows when it last changed.

Who we are and DPO contact
The data we collect
How we use your data
Who we share data with
Overseas transfers
Retention
Marketing and the DNC Registry
Cookies and analytics
Photos, filming and social media
Children and young persons
Security
Your choices and rights
Data breaches
Contact and complaints
Updates to this Policy