Privacy Policy — The Creative Arts Studio Last updated: November 14, 2025 IntroductionThe Creative Arts Studio (“we,” “us,” or “the Studio”) operates thecreativeartsstudio.org and is committed to protecting the privacy of visitors, students, parents/guardians, and other users of our website, online registration tools, and services. This Privacy Policy explains what personal information we collect, how we use it, how we share it, your rights, and important legal notices (including Florida requirements and protections for children).Summary of key points (quick view)We collect contact and registration details, payment info (where applicable), and technical information (such as IP addresses) to run our programs and website.Parents/guardians must consent before we collect personal information from children under 13; we follow COPPA requirements. Federal Trade Commission+1We act to comply with the Florida Information Protection Act (F.S. §501.171) and will provide required breach notifications to affected individuals and authorities as required by law.Florida Legislature+1We use Wix and other third-party service providers; Wix operates under its Data Processing Agreement and many third parties may process PII on our behalf. You remain encouraged to review third-party privacy terms. Wix Support+11. Information we collectWe collect the following categories of personal information in order to offer classes, camps, events, and other services:A. Information you provide directlyFull name, parent/guardian name (for minors), email address, phone number, postal address.Date of birth or age (to determine minor status and appropriate class placement).Emergency contact details and medical/allergy information required for safe participation.Billing and payment information (credit card or payment processor details) when you purchase classes, camps, or tickets.Photos or video releases when you or your child consent to media use for marketing or documentation.Any messages you send via contact forms, registration forms, or email.B. Information collected automaticallyIP address, device and browser information, pages visited on the site, referral source, and analytics data collected by cookies and similar technologies.Usage data from our booking/registration tools and payment processors.C. Sensitive categoriesWe may collect limited health information (e.g., allergies, disabilities) that you provide so we can provide safe services. We only collect such sensitive data when necessary and with explicit consent.2. How we collect informationWe collect personal information when you or your child:Complete a registration, application, or interest form on our site.Purchase classes, workshops, or tickets through our site or booking partners.Email, call, or otherwise contact us.Interact with our website where cookies or analytics tools are used.Provide media release consent (photos/videos) for promotional use.We also receive information from third parties when you elect to register or pay via third-party platforms (e.g., Wix, Stripe, PayPal, or an external booking platform) and when you choose to import contact data from social logins or third-party accounts. Wix Support+13. Why we collect and how we use personal informationWe use personal information for these business and operational purposes:To provide services: Registering students, scheduling classes, communicating class details, emergencies, and managing enrollment and waitlists.Payment & billing: To process tuition, camp fees, refunds, vouchers, and to comply with financial recordkeeping.Safety & health: To maintain emergency contacts and inform staff of health or accessibility needs.Communication: To send confirmations, reminders, schedule changes, invoices, and administrative notices. With consent, we may also send marketing or promotional emails; you may opt out at any time.Legal compliance & protection: To comply with laws (including Florida breach notification law) and to protect the Studio’s legal rights. Florida LegislatureSite operation & improvement: To analyze website usage, improve user experience, and apply analytics.Marketing & promotions: Where authorized, to send newsletters, class promotions, and event announcements.4. Cookies, tracking, and third-party analyticsOur site uses cookies and similar technologies (including analytics tools) to improve site performance, analyze usage, and support marketing.We may use first- and third-party cookies (session cookies and persistent cookies), web beacons, and similar tools for analytics and marketing. Examples include Google Analytics and Wix analytics apps. These tools collect technical and usage information. See Wix and the specific third-party privacy policies for more details. Wix Support+1You can control cookies through your browser settings and opt-out of certain analytics tools via provided opt-outs where available.5. Sharing, disclosure, and processorsWe do not sell personal information to third parties.We may disclose personal information to:Service providers and processors that help run our business (payment processors, scheduling/booking platforms, email services, hosting providers, background-check providers, or marketing vendors). Wix is a primary processor for site hosting/registration functionality; we and Wix have a Data Processing Agreement governing processing. Wix Support+1Legal and safety disclosures: When required by law or to respond to legal process, to protect rights or safety, or to cooperate with law enforcement.Emergency needs: When necessary to protect the health or safety of a participant or the public.Mergers and transfers: In connection with a sale, merger, or reorganization of the Studio’s assets (we will notify you where required by law).When we share with third-party processors, we require contractual safeguards consistent with applicable law.6. Children and parental consent (COPPA & related protections)Our programs often serve minors. For children under 13, we follow the Children’s Online Privacy Protection Act (COPPA) and FTC guidance:We obtain verifiable parental or guardian consent before collecting personal information online from children under 13, unless an exception applies. Federal Trade Commission+1Parents may review, request deletion, and refuse further collection or use of their child’s information.If you believe we collected a child’s information without required parental consent, contact us immediately (see Contact section below).Note: COPPA rules and FTC guidance have been recently updated and expanded; we monitor regulatory changes and will update our practices accordingly. White & Case7. Data retention and deletionWe retain personal information only as long as necessary to fulfill purposes described here, to comply with legal obligations, to resolve disputes, and for legitimate business needs (for example, student records and financial records required for tax or audit purposes).If you wish to request access to, update, restrict, or delete your personal information, or the personal information of your child, contact us (see Contact section). We will respond to requests in accordance with applicable law and identity-verification procedures.8. Your rights & choicesDepending on your location, you may have certain legal rights, including the right to:Access and obtain a copy of personal information we hold about you.Request correction of inaccurate information.Request deletion of personal information (subject to legal retention requirements).Withdraw consent to processing where we rely on consent.Opt-out of direct marketing communications at any time.To exercise these rights, please contact our Privacy Contact (below). We may need to verify your identity before processing requests.9. Security measures and breach notification (Florida)We maintain reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction. Examples include access controls, secure servers, encryption where practicable, and staff training.If we become aware of a security incident or data breach that affects personal information, we will comply with applicable law, including the Florida Information Protection Act (F.S. §501.171) and any required notification procedures. Typically, Florida law requires covered entities to notify affected individuals and, in certain cases, state authorities within statutory timeframes; we will provide notification containing required information and steps to mitigate harm. Florida Legislature+110. International transfersIf personal data is transferred or processed outside your country (for example, servers or processors located abroad), we will use contractual measures and safeguards required by law to protect your personal information.11. Changes to this Privacy PolicyWe may update this Privacy Policy from time to time. The “Last updated” date at the top will indicate when changes were made. Material changes will be notified via email or a prominent notice on our site as required by law.12. How to withdraw consent or opt-outTo stop receiving marketing or promotional communications, follow the unsubscribe link in the email or contact our Privacy Contact (below). To withdraw consent for any other processing that depends on consent, contact us and specify the processing you want to stop. Withdrawal of consent will not affect processing that occurred prior to withdrawal or processing required by law.13. Contact usIf you have questions about this Privacy Policy, to make a privacy request (access, correction, deletion), or to report a potential data breach, please contact:Privacy & Accessibility Coordinator: Anna PeriloEmail: [insert email address]Phone: [insert phone number]Mailing address: The Creative Arts Studio, [insert physical address]We aim to respond to inquiries within 7 business days.14. Additional legal notes and recommendationsWe rely on Wix and other third-party vendors to provide hosting, analytics, payment processing, and booking features. Please review third-party privacy policies for details about their practices. Wix Support+1This Privacy Policy is provided for informational purposes and does not constitute legal advice. We strongly recommend that The Creative Arts Studio obtain legal review to ensure that this policy meets all applicable federal, state (including Florida), and international legal requirements for your specific programs and data processing activities.References (examples & guidance)Florida Information Protection Act (F.S. §501.171) — breach notification requirements. Florida Legislature+1Children’s Online Privacy Protection Rule (COPPA) — FTC guidance and amendments. Federal Trade Commission+1Wix: Preparing Your Wix Site for GDPR / Wix Data Processing Agreement. Wix Support+1