PRIVACY POLICY

Effective date: 1 October 2026

This Privacy Policy explains how Colter Music & Inspiration B.V., trading as Euphoria Dance Academy (“Euphoria”, “we”, “us”), collects and uses personal data through its website, mobile application, classes, memberships, events, studio rental and related services.

1. DATA CONTROLLER

Colter Music & Inspiration B.V. (Euphoria Dance Academy) is responsible for the processing described in this policy.

Address: Eerste Oosterparkstraat 72, 1091 HE Amsterdam, Netherlands

Email:

Telephone: +31 6 30428457

Chamber of Commerce (KvK): 81320353

VAT number: NL862047109B01

2. PERSONAL DATA WE PROCESS

Depending on how you use our services, we may process:

• identity and contact details, including name, email address, telephone number and date of birth where necessary;

• account and membership details, including membership type, start and end dates, credits and account status;

• booking, attendance and cancellation records;

• course, workshop, event and studio-rental registrations;

• transaction, invoice and payment-status information. Payment-card or bank details may be handled directly by our payment providers and are not necessarily stored by Euphoria;

• communications with us, including support, cancellation, pause and data-rights requests;

• notification, language and marketing preferences;

• app and device information needed for security, troubleshooting and push notifications, such as device type, app version, technical logs and notification token;

• photo or video consent choices where relevant.

We do not sell personal data.

3. WHY WE PROCESS PERSONAL DATA

We process personal data for the following purposes and legal bases:

• creating and administering accounts, memberships, credits and bookings: performance of a contract or steps requested before entering a contract;

• processing payments, refunds and invoices: performance of a contract and compliance with legal obligations;

• recording attendance, cancellations and membership eligibility: performance of a contract and our legitimate interest in operating the academy fairly;

• handling studio-rental requests and availability: steps requested before entering a contract and performance of a contract;

• sending service messages, booking confirmations and important membership notices: performance of a contract and legitimate interests;

• preventing fraud, protecting accounts and troubleshooting the app: legitimate interests in security and reliable operation;

• keeping financial and tax records: compliance with legal obligations;

• sending marketing or academy news: consent, where required. You may unsubscribe at any time;

• using optional photos or videos for promotional purposes: consent or another valid basis explained when the material is collected.

Where processing is based on consent, you may withdraw consent at any time without affecting processing that occurred before withdrawal.

4. SOURCES OF PERSONAL DATA

We receive personal data directly from you, from your parent or guardian where applicable, and from service providers used to administer Euphoria services, including Trainin. If data is synchronized from Trainin into the Euphoria app, the app will display information associated with the same student account.

5. SERVICE PROVIDERS AND RECIPIENTS

We may share personal data only as necessary with:

• Trainin, for memberships, schedules, credits, bookings, attendance, payments and invoices;

• payment and banking providers that process transactions;

• app hosting, cloud infrastructure, security and notification providers, including Expo and Apple where their services are used;

• email and customer-communication providers;

• accountants, legal advisers, insurers and other professional advisers;

• public authorities where disclosure is required by law.

These providers may process data only for the agreed service and must apply appropriate security and confidentiality safeguards.

6. INTERNATIONAL TRANSFERS

Some technology providers may process personal data outside the European Economic Area. Where this occurs, Euphoria will use an approved transfer mechanism, such as an adequacy decision or Standard Contractual Clauses, together with any additional safeguards required by law.

7. RETENTION

We keep data only for as long as necessary. Our standard retention periods are:

• membership, account and contractual records: during the relationship and up to 2 years afterwards, unless needed longer for a dispute or legal obligation;

• booking and attendance history: up to 24 months after the relevant class or membership ends;

• support, cancellation and pause requests: up to 2 years after resolution;

• technical and security logs: up to 12 months, unless required longer to investigate an incident;

• marketing preferences: until consent is withdrawn or after 24 months of inactivity;

• financial administration and invoices: 7 years, or longer where Dutch tax law requires it.

Data may be retained longer where required to establish, exercise or defend legal claims. Where a shorter legal or operational period applies, data will be deleted or anonymized sooner.

8. YOUR RIGHTS

Subject to the GDPR and applicable exceptions, you may request:

• access to your personal data;

• correction of inaccurate or incomplete data;

• deletion of data;

• restriction of processing;

• portability of data you provided;

• objection to processing based on legitimate interests or direct marketing;

• withdrawal of consent.

You may submit a request through the app, where available, or by emailing . We may request reasonable information to verify your identity. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): .

9. CHILDREN

Where services involve children, Euphoria will collect only the data necessary to administer the activity and will obtain authorization from a parent or legal guardian where required. Parent or guardian contact details may be used for account administration, safety and service communications.

10. SECURITY

Euphoria uses appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration and disclosure. Access is limited to people who need the data for their work. No system is completely secure, but suspected incidents will be investigated and reported where required by law.

11. AUTOMATED DECISIONS

The app may automatically calculate credits, eligibility dates and booking availability using membership rules. Euphoria does not intend to make decisions based solely on automated processing that produce legal or similarly significant effects without appropriate human review.

12. CHANGES

We may update this policy when our services, providers or legal obligations change. The current version and effective date will be published on our website and made accessible in the app. Material changes will be communicated where required.

13. CONTACT

Questions or privacy requests may be sent to or to Euphoria Dance Academy, Eerste Oosterparkstraat 72, 1091 HE Amsterdam, Netherlands.