Privacy Policy

This policy explains what BSO Latin Dance (Bachata Sensual Orlando, “BSO”, “we”, “us”) collects about you, why, who we share it with, and the choices you have. It covers this website (bsolatindance.com), our classes and events, BSO Online, and the texts and emails we send. Questions about it: info@bsolatindance.com.

The short version

We collect what you give us, like your name, email and phone number, and what we need to run your classes, events and payments.
We don’t sell or rent your personal information for money. Some state privacy laws treat sharing for advertising, like the Meta reporting below, as a “sale” or “sharing”; you can opt out of it.
Optional cookies, for statistics and for marketing, load only if you say yes. You can change your mind any time with Cookie choices, at the bottom of every page.
When you sign up or buy on our website, we report it to Meta (Facebook and Instagram) to measure our ads. Your email and name are hashed (scrambled) first, and we never send your phone number. Your browser’s Global Privacy Control turns this off, or email us and we’ll stop. More about Meta.
Reply STOP to any of our texts to stop them. Our marketing emails tell you how to unsubscribe (a link, or replying “unsubscribe”).

1. What we collect

What you give us

Your details: name, email address and phone number, and anything else you choose to tell us in a form, like your dance experience or the class you’re interested in.
Your account: if you create one, your sign-in details. Your password is stored scrambled; we can’t read it.
What you buy: memberships, class passes, drop-ins, event tickets and BSO Online, with prices, dates, refunds and any promo code you used. Payments go through Stripe. We never see or store your full card number; we may see the card type and last four digits.
Classes and events: your bookings and tickets, when you check in at the door, your membership status, and that you accepted our liability waiver.
BSO Online: which lessons you watch and how far you get, so you can pick up where you left off.
Studio rentals: the details of your rental request.
Messages: the texts and emails we exchange with you, which ones we sent, and whether you opted out.

What we collect automatically

Device and visit details: your IP address, browser and device type, and the pages you visit. Our server records these to run and protect the site.
Which ad or link brought you here: the campaign tags in the link you clicked (for example “facebook / fall classes”) and the ad’s click ID. Our own cookies remember this so that, if you sign up or buy later, we know which ad to credit. See Cookies.
Statistics and marketing cookies: only if you turn them on. See Cookies.

2. How we use it

To run your classes, events, memberships, BSO Online access and studio rentals.
To take payments, issue refunds and prevent fraud.
To send confirmations, receipts, reminders and verification codes, and to answer your questions.
To tell you about classes, events and offers by text or email (see Texts and Emails for how to stop).
To learn which of our ads and promotions work (see Meta).
To improve the website, with statistics, if you allow them.
To keep the website and our records secure, and to follow the law.

3. What we send Meta (Facebook and Instagram), and how to stop it

We advertise on Facebook and Instagram. To learn which ads bring people to our classes, and so Meta can show our ads to people likely to be interested, we tell Meta about sign-ups and purchases in two ways.

From your browser, only if you turn on Marketing cookies. The Meta pixel tells Meta which of our pages you visit and when you sign up or buy.

From our server, whatever you choose in the cookie banner. When you sign up for a class or event, create an account, or buy something on our website, we send Meta:

what happened (for example a sign-up or a purchase), when, and for a purchase its price and type;
a hashed copy of your email and name, and of our customer number for you (never your phone number);
your IP address and browser (its “user agent”);
Meta’s own browser and ad-click IDs, if your browser has them (the _fbp and _fbc cookies, or the ad’s click ID).

Hashing scrambles your details with a one-way code, so they aren’t sent in readable form. Meta compares them with the scrambled details of its own users to match the sign-up to an ad. Meta’s use of this information is covered by Meta’s Privacy Policy.

On our side, the copy we keep to send each report loses your IP address, browser and Meta IDs once it is sent (and always within 7 days), and is deleted after 90 days. Separately, your sign-up or purchase record keeps which campaign brought you, with the ad’s click ID and Meta’s browser IDs when there were any, so we know which ad to credit; that record is kept like the rest of your account (see How long we keep it), including records made before you turned on Global Privacy Control.

How to stop it:

Turn on Global Privacy Control (GPC) in your browser. It is built into some browsers, like Firefox, Brave and DuckDuckGo, and available as an extension for others. When your browser sends it, we send Meta nothing from our server, we delete our ad cookies and keep no new ad click ID, and optional cookies stay off.
Or email info@bsolatindance.com with the email address and phone number you use with us, and ask us to stop reporting you to Meta. We add a hashed copy of them to a do-not-send list, and from then on our server sends Meta nothing about sign-ups or purchases made with them. Keep Marketing cookies off (Cookie choices) so your browser doesn’t either.
To see or clear what businesses have shared with Meta about you, use “Your activity off Meta technologies” in your Facebook or Instagram settings.

4. Cookies and similar technologies

Cookies are small files a website stores in your browser. Some are needed for the site to work; the rest are optional. The first time you visit, we ask. Nothing optional loads until you choose, and ignoring the banner counts as no. We remember your choice for up to 6 months (your browser may forget it sooner), then ask again. To change it, use Cookie choices at the bottom of any page. While a category is off, every page of our website deletes its cookies there, including any left from earlier visits; if you turn off one that was on, open pages of our site reload. We can’t delete cookies that other companies keep on their own websites, but you can, in your browser’s settings.

If your browser sends Global Privacy Control, we treat it as “essential only”: you won’t see the banner, and nothing optional loads.

Essential (always on)

bso_consent (us, 6 months): remembers your cookie choices.
Sign-in cookies (us, wordpress_logged_in_ and similar, until you sign out, up to 14 days): keep you signed in to your account.
__stripe_mid, __stripe_sid and m (Stripe, on pages where you pay, from 30 minutes up to about 13 months): process payments and prevent fraud.
bso_ie_v (us, 7 days): protects the Infinity Experience request form from forged or repeated submissions.
bso_design (us, 30 days): only if you open a preview of a new page design, remembers that you did.
Browser storage that makes pages work, like your cart, a sign-up you started, which photo albums you’ve unlocked, and whether we already counted a sign-up, so it isn’t counted twice.

Ad measurement (our own)

bso_utm (us, 30 days) and bso_utm_first (us, 90 days): the ad or link that brought you here most recently, and the first one that did, with the ad’s click ID. Only our website reads them: we use them to credit the right ad when you sign up or buy (see Meta). If your browser sends GPC, we don’t set them, and we delete them if they are already there.
Campaign tags of this visit (your browser’s session storage, until you close the tab): sent with a form you fill in, so we know which campaign it came from. If your browser sends GPC, we keep only the campaign’s name, never the ad’s click ID.

Statistics (only if you turn them on)

Google Analytics (Google, _ga and _ga_ cookies, up to 13 months): counts visits and shows which pages people use.
Microsoft Clarity (Microsoft, _clck up to 1 year and _clsk 1 day, plus _cltk in session storage): shows how people use our pages, including recordings of clicks, taps and scrolling. Clarity also sets cookies on Microsoft’s own websites (such as MUID, CLID, MR, SM and SRM_B).

Marketing (only if you turn it on)

Meta pixel (Meta, _fbp and _fbc cookies, 90 days, plus a few browser-storage entries): tells Meta which pages you visit and when you sign up or buy, to measure our ads and show them to people who may like to dance with us.

Services that load on some pages

These load whenever a page shows them, whatever you choose in the banner, and like any website they see your IP address and browser: Google Fonts (our fonts, on every page), Stripe (pages where you pay, with the cookies listed above), Mux (BSO Online videos and video previews) and WordPress.org (emoji images).

YouTube videos and Google Maps load only when you click to play a video or “Load map”. Until then nothing is requested from YouTube or Google Maps. Once you do, they see your IP address and browser and may use their own cookies or storage (YouTube plays in its privacy-enhanced mode).

Browsers also have an older “Do Not Track” setting. It has no agreed meaning, so we don’t act on it. We do honor Global Privacy Control.

5. Texts

We send texts about things you signed up for or asked for, like verification codes, confirmations and reminders, and texts about classes, events and offers. Message frequency varies. Message and data rates may apply. Reply STOP to any text to stop receiving them, or HELP for help. Agreeing to receive texts is never a condition of buying anything.

Our texting provider, Quo (formerly OpenPhone), and the mobile carriers handle your number only to deliver our texts. We do not share your mobile number or your SMS consent with third parties for their marketing. Text messaging originator opt-in data and consent will not be shared with any third parties. We don’t send your phone number to Meta or any other advertiser.

6. Emails

We send account and booking emails, like receipts, confirmations, reminders and payment links, and some follow-up emails (for example after an event) from our Google (Gmail) account. We send newsletters and promotions through Brevo. Every marketing email tells you how to stop them: an unsubscribe link, or replying “unsubscribe”. You can also email us and we’ll take you off our list. Emails about something you bought or booked still reach you after you unsubscribe from marketing.

We share personal information only with the companies that help us run BSO, for that purpose, and as described here:

Stripe: online payments, the card readers at our studios, refunds and fraud prevention. stripe.com/privacy
Quo (formerly OpenPhone): our texts and phone calls.
Google: our email (Gmail), our business documents and backups (Google Drive and Sheets), our fonts and map, and Google Analytics if you allow statistics.
Brevo: newsletters and promotional emails.
Meta: sign-ups and purchases for ad measurement, and the Meta pixel if you allow marketing cookies. See Meta.
Microsoft: Microsoft Clarity, if you allow statistics.
Mux: hosts and streams BSO Online videos.
Hetzner: hosts our website and its database, on servers in the United States (Virginia).
Anthropic: Claude, the AI assistant our staff use to look up and summarize our own records when they answer questions and run the studio.

Our instructors and staff see what they need to run classes and events, like class rosters and check-ins. We may also share information when the law requires it, to protect people’s safety or our rights, or with professional advisers like our accountants. If BSO is ever sold or merged, your information would pass to the new owner under this policy.

8. Photos and video

We take photos and videos at classes and events and may use them on our website and social media, as described in section 7 of our liability waiver. If you’d rather not appear, tell the photographer or email us, and we’ll take down photos of you that we posted, where we can.

To get an event’s photo album, either give us your name, email and phone number, confirm the number with a code and agree to receive our texts (that unlocks every album on our site), or just give us your email address and we’ll email you that album’s link on Google Drive, with no texts.

Face matching. We don’t use face recognition. Earlier versions of our waiver and photo-album form mentioned it as a possible feature; agreeing to them never switched it on. If we ever offer it, it will be optional, we’ll ask for your separate permission before using it, it will be only for people 18 and over, and it will follow these rules: we’ll use face data only to find and organize event photos; we won’t sell it or share it except with a provider doing that work for us, or when the law requires; we’ll delete it when you ask, and no later than three years after your last class, event, purchase or sign-in; and we’ll protect it with care that matches how sensitive it is.

9. How long we keep it

We keep your account, purchase and attendance records while you’re a customer, and afterwards for as long as we need them for taxes, accounting, refunds and disputes, or as the law requires. If you ask us to delete your information, we’ll delete or anonymize what we aren’t required to keep. Cookies last as long as listed in Cookies; what we send Meta is kept on our side as described in Meta.

10. How we protect it

We use reasonable technical and organizational safeguards, like encrypted connections, restricted staff access and backups. No website or storage system is perfectly secure, so we can’t promise that nothing will ever go wrong. If something does and it affects you, we’ll tell you as the law requires.

11. Your choices and rights

See, correct or delete your information: update your details in your account, or email info@bsolatindance.com. We may ask you to confirm it’s you, for example by replying from the email address we have for you.
Texts: reply STOP to any text.
Emails: use the unsubscribe link, or email us.
Cookies: Cookie choices, at the bottom of every page.
Meta: Global Privacy Control, or email us (see Meta).

Depending on where you live, your state’s law may give you more rights, including the right to opt out of the “sale” or “sharing” of personal information for advertising: Global Privacy Control or an email to us does that here (see Meta). Email us and we’ll honor the rights the law gives you. California residents can also ask once a year, free of charge, which categories of personal information (if any) we shared with other companies for their own direct marketing, under California’s “Shine the Light” law.

12. Children

Our website isn’t meant for children under 13, and we don’t knowingly collect their personal information. If you think a child has given us information, email us and we’ll delete it.

13. Changes to this policy

This policy takes effect on the date shown at the top (“Last updated”). When we change it, we’ll update that date, and for a big change in how we use your information we’ll also post a notice on our website.

14. Contact us

Email info@bsolatindance.com, or write to:

Bachata Sensual Orlando
7800 S US Hwy 17-92 #124
Fern Park, FL 32730
United States

Help us improve BSO