Who we are
LAB is a dance class booking platform operated by Labreykjavik, based in Reykjavík, Iceland. We are the data controller for the personal information you provide when using our service.
For privacy-related questions, contact us at: privacy@labreykjavik.is
What we collect
- Account information — Your full name, email address, profile photo, and Instagram handle — provided when you sign up.
- Booking data — Which classes you book, when you book them, and whether you attended.
- Payment data — Processed securely by Stripe. We never store your card number or full payment details.
- Usage data — How you interact with the app, such as which pages you visit, to help us improve the service.
Why we collect it
- To provide the booking service — Processing your bookings and payments requires your account and payment information. Legal basis: performance of a contract.
- To send confirmations and reminders — We email you booking confirmations and class reminders. Legal basis: performance of a contract.
- To improve the service — We use anonymised usage data to understand how the app is used. Legal basis: legitimate interest.
How long we keep it
- Account data — Kept until you delete your account.
- Booking history — Retained for 5 years for record-keeping purposes.
- Payment records — Retained for 7 years in accordance with Icelandic accounting law.
Who we share it with
- Supabase — Our database and authentication provider. Data is stored within the EU.
- Stripe — Payment processing. Only used when you make a booking payment.
- Teachers and studios — Your name and booking status are visible to the teacher of a class you book, and to the studio hosting it.
We never sell your personal data to third parties.
Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate information
- Delete your account and personal data
- Export your data in a portable format
- Object to or restrict how we process your data
- Withdraw consent at any time where processing is based on consent
You can delete your account at any time from your account settings. For other requests, email us at privacy@labreykjavik.is.
Cookies
We use only essential cookies required for authentication and keeping you logged in. We do not use advertising or tracking cookies.
Complaints
If you believe we have handled your data incorrectly, you have the right to lodge a complaint with the Icelandic Data Protection Authority: personuvernd.is