Privacy Notice · The Future Performer

1. Who we are

The Future Performer runs musical theatre classes, workshops and holiday camps for young people in Bromley. It is run by Kim Thursfield, who is the data controller for the information described in this notice and is registered with the Information Commissioner's Office under registration number ZA756408.

Email: info@thefutureperformer.co.uk · Telephone: 07804 622314

2. What information we collect

When you make an enquiry, through the form on this website or by email, we collect your name, your contact details, your child's first name and age, and whatever you choose to tell us in your message.

When you enrol a child, we collect more, because we need it to look after them properly:

The child's name, age or date of birth.
Parent or carer name and contact details, and an emergency contact.
Who is authorised to collect the child.
Allergies, medical conditions, medication, and any special educational needs or additional support the child needs.
Whether you consent to photographs.
Booking and payment records for the classes or camps your child attends.

We do not ask for more than we need, and there is nothing on our forms that exists only because it might be useful one day.

3. How we use it

To answer your enquiry and tell you about places, dates and prices.
To register your child, take a booking and take payment.
To keep your child safe while they are with us, including managing allergies, medical needs and collection.
To contact you in an emergency, or if your child is unwell or hurt.
To keep an accurate register and the records we are expected to keep.
To send you information about your child's classes, term dates and anything that changes.

4. Our lawful basis

Under UK GDPR we rely on the following:

Contract, for taking and managing your child's booking.
Legitimate interests, for responding to enquiries and running the classes safely and properly.
Legal obligation, where we are required to keep or share information, including in safeguarding situations.
Consent, for photographs and for any marketing email. Consent can be withdrawn at any time.
Vital interests, where acting on health information is necessary to protect someone's life or safety.

5. Children's information

Almost everyone who takes part in our classes is a child. We collect children's information from the parent or carer, not from the child, and we only collect what we need to teach them and keep them safe.

Children's information is never used for marketing or profiling, is never sold, and is never shared with anyone for their own purposes.

6. Health and special category information

Allergies, medical conditions, medication and special educational needs are special category data under UK GDPR, which means the law gives them extra protection. We treat them accordingly.

We collect this information for one reason only: so that we can look after your child safely. We rely on the condition in Article 9 of UK GDPR relating to health and safety and the protection of vital interests, together with your explicit consent given on the enrolment form.

In practice this means:

Only Kim Thursfield sees this information in full.
Where an assistant needs to know something to keep a child safe, for example a severe allergy, they are told what they need and no more.
It is not written down on anything that leaves the building, other than the register.
It is never used to decide whether a child is welcome. If a child needs additional support, we would rather know so that we can plan for it.

7. Photographs, video and social media

We ask for photo consent on the enrolment form. Saying no does not affect your child's place in any way, and you can change your mind at any time by telling us.

Where consent has been given, photographs may be used on this website and on our social media to show what the classes are like. We do not publish a child's full name alongside their photograph. If you ask us to remove a photograph we will do so, although we cannot always control copies that other people have already saved or shared.

8. Who we share it with

Nobody. Your information is not shared with the venue, with other parents, with any other organisation, or with anyone else outside The Future Performer. We do not sell it, we do not rent it, and we do not pass it to any third party for their own purposes.

There are two exceptions, and both are the kind you would want:

Emergency and medical care. If your child needs medical help, we will give the ambulance service or hospital the information they need.
Safeguarding and the law. If we believe a child is at risk of harm, we may share information with children's social care, the police or another appropriate agency, as set out in our Safeguarding Policy. We may also share information where we are legally required to.

9. Where the information lives

Enrolment information is collected through a Google Form and is held in Kim's own Google account. Booking and payment records are held in the same place. Google acts as a processor on our behalf and does not use the information for its own purposes.

Nothing is stored on any other system, and there is no separate database, mailing platform or customer system holding your child's details.

10. How we keep it secure

Access is limited to Kim Thursfield. Accounts are protected by a password and two step verification. Paper records taken to a session, such as the register and the accident book, stay with Kim and are not left unattended.

11. How long we keep it

Enquiries that do not lead to a booking: up to twelve months, then deleted.
Enrolment and attendance records: three years after a child stops attending, then deleted.
Payment and accounting records: six years, because tax law requires it.
Safeguarding and incident records: longer, where safeguarding guidance requires us to keep them. These are kept securely and separately.

12. Your rights

Under UK GDPR you have the right to ask us to:

Tell you what information we hold about you or your child, and give you a copy.
Correct anything that is wrong or out of date.
Delete information, where there is no legal or safeguarding reason for us to keep it.
Restrict or object to how we use it.
Withdraw consent, including photo consent, at any time.
Receive the information in a portable format.

Email info@thefutureperformer.co.uk and we will respond within one month. There is no charge.

13. Complaints

If you are unhappy with how we have handled your information, please tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

14. Changes to this notice

If we change how we handle information, we will update this page and change the date below. Where a change is significant, we will tell parents directly.

First published: September 2026