Privacy Policy

Rise & Play Inc. is the data controller for personal data collected through our programs. This Policy explains how we collect, use, share, store, and protect personal information of participants, guardians, and program staff related to our services.

We may collect: (a) identifiers and contact information (names, addresses, emails, phone numbers); (b) guardianship and emergency contact details; (c) age or date of birth; (d) health and accessibility information provided by guardians; (e) enrollment and attendance data; (f) payment and transaction details; (g) communications and feedback; (h) device and usage data when using our online portals or apps.

For EU/EEA participants, processing is based on consent, performance of a contract (program enrollment), legitimate interests (administration and improvement of programs), and compliance with legal obligations. Where required, we obtain consent for sensitive data and provide mechanisms to withdraw consent.

We use data to administer enrollments, deliver programs, communicate with families, personalize activities, process payments, and comply with safety and legal obligations. We may also analyze data for program evaluation and improvement. Data may be aggregated and de-identified for reporting.

We may share with: program staff, instructors, partners essential to program delivery, and mandated authorities when required by law. Third-party service providers (e.g., payment processors, IT systems) may process data on our behalf. In some cases, data may be transferred to subprocessors within the EU/UK or outside, including the United States, under appropriate safeguards such as standard contractual clauses and data processing agreements.

We retain personal data only as long as necessary for the purposes described and to comply with legal obligations. We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the data to protect against unauthorized access, alteration, destruction, or disclosure.

Depending on your location, you may have rights to access, rectify, erase, restrict processing, object to processing, data portability, and withdraw consent. EU/UK residents have rights under GDPR and applicable data protection laws. To exercise rights or make complaints, contact the designated Data Protection Officer at the contact information below.

We recognize special protections for children's data. We obtain verifiable parental consent for processing personal data of children and limit data collection to what is necessary for program participation. Parents/guardians may review and request deletion of their child’s data where applicable.