📋 Table of Contents
- Who We Are
- Information We Collect
- How We Use Your Information
- Legal Basis for Processing (GDPR)
- How We Share Your Information
- Cookies & Tracking
- Children's Privacy (COPPA)
- Data Retention
- Data Security
- Your Rights — Texas & U.S.
- Your Rights — GDPR (EEA/UK)
- International Data Transfers
- Third-Party Links
- Changes to This Policy
- Contact Us
Who We Are
Laughter School ("Laughter School," "we," "us," or "our") is a teen acting and improv camp program operated in the State of Texas, United States. We operate the website located at www.laughterschool.com (the "Site") and provide in-person camp services (the "Services").
For purposes of the General Data Protection Regulation (GDPR), Laughter School is the data controller of personal data collected through our Site and Services.
Our principal place of business is:
Laughter School
Coppell, TX 75019
United States
Email: [email protected]
Phone: 214-432-0600
Information We Collect
We collect personal information in the following ways:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Parent/guardian name, camper name, date of birth, age | Enrollment form, direct communication |
| Contact Data | Email address, phone number, mailing address | Enrollment form, contact forms |
| Financial Data | Payment method type, last 4 digits of card, billing address | Payment processor (we do not store full card numbers) |
| Health & Safety Data | Allergies, medical conditions, emergency contacts | Camper information forms |
| Usage Data | IP address, browser type, pages visited, time on site | Automatically via cookies and analytics |
| Communications Data | Emails, DMs, inquiries sent to us | Direct contact from you |
| Marketing Data | Preferences, responses to emails, referral source | CRM (Go High Level), email interactions |
| Photo/Video Data | Camp photos and showcase recordings | Created during camp activities (with consent) |
We do not knowingly collect Social Security numbers, government-issued ID numbers, or financial account login credentials.
How We Use Your Information
We use the personal information we collect for the following purposes:
| Purpose | Data Used |
|---|---|
| Process and manage camp enrollment | Identity, Contact, Financial |
| Send confirmation emails and camp logistics | Identity, Contact |
| Ensure the health and safety of campers | Identity, Health & Safety |
| Process payments and manage billing | Financial, Identity, Contact |
| Send marketing communications (with consent) | Contact, Marketing |
| Improve our website and services | Usage Data |
| Comply with legal obligations | All applicable categories |
| Distribute camp photos and showcase videos to enrolled families | Photo/Video, Contact |
We will not use your personal information for any purpose incompatible with the purposes listed above without first obtaining your consent.
Legal Basis for Processing (GDPR)
We rely on the following legal bases:
| Legal Basis | When We Rely On It |
|---|---|
| Contract (Art. 6(1)(b)) | Processing necessary to fulfill your enrollment and deliver camp services |
| Legitimate Interests (Art. 6(1)(f)) | Improving our services, fraud prevention, site analytics |
| Consent (Art. 6(1)(a)) | Marketing emails, photo/video use, non-essential cookies |
| Legal Obligation (Art. 6(1)(c)) | Compliance with applicable U.S. and EU laws |
| Vital Interests (Art. 6(1)(d)) | Health and safety emergencies involving campers |
Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing before withdrawal.
How We Share Your Information
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information only in the following limited circumstances:
| Recipient | Purpose | Safeguards |
|---|---|---|
| Go High Level (CRM) | Contact management, enrollment pipeline, automated emails and SMS | Data Processing Agreement in place |
| Payment Processor (e.g., Stripe) | Secure payment processing | PCI-DSS compliant; we do not store card data |
| Email / SMS Service Providers | Sending confirmations and marketing communications | Data Processing Agreement in place |
| Analytics Providers | Website usage analytics | Anonymized or pseudonymized where possible |
| Law Enforcement / Legal | When required by law, court order, or to protect rights | Only to the extent required by law |
| Business Transfers | In the event of a merger, acquisition, or sale of assets | Successor bound by this policy or you will be notified |
Cookies & Tracking Technologies
Our Site may use cookies and similar tracking technologies to improve functionality and analyze usage. The types of cookies we may use include:
| Type | Purpose | Can You Opt Out? |
|---|---|---|
| Strictly Necessary | Required for the site to function (e.g., form submissions) | No — required for operation |
| Analytics | Understand how visitors use our site (e.g., Google Analytics) | Yes — via cookie banner or browser settings |
| Marketing | Track effectiveness of our campaigns | Yes — consent required |
EEA/UK visitors will be presented with a cookie consent banner on their first visit. You may withdraw cookie consent at any time by adjusting your browser settings or contacting us. Note that disabling certain cookies may affect site functionality.
We currently do not respond to browser "Do Not Track" signals, but we honor opt-out requests submitted directly to us.
Children's Privacy (COPPA)
Laughter School does not knowingly collect personal information directly from children under the age of 13 through our website. All enrollment and registration is completed by a parent or legal guardian on behalf of the minor camper.
If you believe we have inadvertently collected personal information from a child under 13 without verifiable parental consent, please contact us immediately at [email protected] and we will take prompt steps to delete such information.
For campers ages 13–17, we collect information provided by the enrolling parent or guardian. We limit the collection of camper personal data to what is strictly necessary for the safe and effective delivery of camp services (identity, health/safety, and emergency contact information).
Parents or guardians have the right to review, correct, or request deletion of their child's personal information at any time by contacting us.
Data Retention
We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable law.
| Data Type | Retention Period |
|---|---|
| Enrollment and contact records | 3 years after last camp session attended, or as required by law |
| Financial / payment records | 7 years (IRS record-keeping requirement) |
| Health and safety forms | Duration of enrollment plus 1 year |
| Marketing communications | Until you unsubscribe or opt out |
| Website analytics data | Up to 26 months (anonymized) |
| Camp photos and videos | Until you request deletion; not shared publicly without consent |
When personal data is no longer required, we will securely delete or anonymize it. If deletion is not immediately possible (e.g., data stored in backups), we will isolate it from further processing until deletion is feasible.
Data Security
We implement reasonable and appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
• SSL/TLS encryption for data transmitted through our Site
• Use of PCI-DSS compliant third-party payment processors (we do not store credit card numbers)
• Password-protected access to our CRM and internal systems
• Limiting access to personal data to staff with a legitimate need
Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and any applicable regulatory authorities as required by law.
Your Rights — Texas & United States
Right to Access
You have the right to know whether we are processing your personal data and to access that data.
Right to Correction
You have the right to correct inaccuracies in your personal data, taking into account the nature and purposes of the processing.
Right to Deletion
You have the right to request deletion of personal data you have provided or that we have obtained about you.
Right to Portability
You have the right to obtain a copy of your personal data in a portable and readily usable format.
Right to Opt Out
You have the right to opt out of the sale of personal data, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects.
Right to Appeal
If we decline to act on your request, you have the right to appeal our decision. Contact us to initiate an appeal.
To exercise any of these rights, contact us at [email protected]. We will respond within 45 days of receipt of your request. We may extend this period by an additional 45 days where reasonably necessary, with prior notice. We will not discriminate against you for exercising any of these rights.
We do not sell personal data as defined under the TDPSA or any other applicable U.S. state privacy law.
Your Rights — GDPR (EEA & UK Residents)
Right of Access (Art. 15)
Request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification (Art. 16)
Request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure (Art. 17)
Request deletion of your personal data where there is no legitimate reason for continued processing.
Right to Restriction (Art. 18)
Request that we restrict processing of your personal data in certain circumstances.
Right to Portability (Art. 20)
Receive your personal data in a structured, machine-readable format and transmit it to another controller.
Right to Object (Art. 21)
Object to processing based on legitimate interests or for direct marketing purposes.
To exercise your GDPR rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority. For UK residents, this is the Information Commissioner's Office (ICO) at ico.org.uk. For EEA residents, contact your relevant national supervisory authority.
Withdrawing Consent: Where we rely on consent as our legal basis, you may withdraw it at any time by emailing us or clicking "unsubscribe" in any marketing email. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
International Data Transfers
Laughter School is based in the United States. If you are accessing our Site from outside the U.S., including from the EEA or UK, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.
Where we transfer personal data from the EEA or UK to the United States, we ensure that appropriate safeguards are in place, including:
• Relying on the EU-U.S. Data Privacy Framework where our service providers are certified participants
• Using Standard Contractual Clauses (SCCs) approved by the European Commission
• Relying on your explicit consent, where required
You may request information about the specific safeguards applied to transfers of your personal data by contacting us.
Third-Party Links
Our Site may contain links to third-party websites, including social media platforms (Instagram, Facebook, etc.) and payment portals. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the content or privacy practices of those sites.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
• Update the "Last Updated" date at the top of this page
• Notify enrolled families by email where required by law
• Post a prominent notice on our Site where appropriate
We encourage you to review this policy periodically. Your continued use of our Site or Services after any changes constitutes your acceptance of the updated policy, to the extent permitted by applicable law.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Get in Touch
We take your privacy seriously and will respond to all inquiries promptly — within 2 business days for general questions, and within the statutory timeframes for formal rights requests.
Laughter School · Flower Mound, TX 75028]