ENROL

Privacy Policy

Last Updated: 28th October 2025

About this policy

Creative Art Classes Ltd respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information when you use our website and services.

This policy applies to all users of our website and customers of our art classes. Please read it carefully to understand how we handle your personal data.

Our website and services are intended for adults only. We do not knowingly collect information from anyone under the age of 18.

1. Who we are

Data Controller: Creative Art Classes Ltd
Company Registration Number: 15520620
Registered Address: 43 Highwood Ridge, Basingstoke, Hampshire, RG22 4UU
Contact Email: carrie@creativeartclasses.com
Phone: 07936 646597

For all questions about how we use your personal data, please contact Carolina Partner at the details above.

We operate exclusively in England, United Kingdom. While our website is accessible internationally, we only provide services to customers in the UK.

2. What information we collect

We collect different types of personal information depending on how you interact with us.

Information You Provide Directly

When you enrol in a class, we collect:

  • First name and last name
  • Email address
  • Phone number
  • How you heard about us (optional)
  • Your previous experience with art (optional)
  • Your consent for us to use photographs of you and your artwork for marketing purposes
 

When you join our waiting list, we collect:

  • First name and last name
  • Email address
  • Phone number
  • Which classes you’re interested in
  • Any information you choose to share in your message
 

When you contact us, we collect:

  • Your name
  • Email address
  • Any information you choose to share in your message
 

If you create a My Account page through WooCommerce, you may choose to add:

  • Postal address (entirely optional – we don’t require this)
 

Payment Information:

  • If you pay by credit card through Stripe: we do not see or store your card details – these are handled securely by Stripe
  • If you pay by bank transfer: we receive confirmation of payment but do not store your bank details
 

Information Collected Automatically

When you visit our website, we automatically collect:

  • Your IP address
  • Browser type and version
  • Device type (computer, mobile, tablet)
  • Pages you visit on our website
  • How long you spend on pages
  • How you arrived at our website
  • General location (city/region level, not precise location)
 

This is collected through:

  • Cookies (small files stored on your device)
  • Web server logs
  • Analytics tools (Google Analytics when implemented)
  • Facebook and Instagram pixels for advertising purposes
 

Information We Do NOT Collect

We do not collect or store:

  • Credit or debit card details (handled by Stripe)
  • Bank account details
  • Sensitive personal data such as health information, religious beliefs, or political opinions
  • Information about children or anyone under 18
  • Precise geolocation data

3. How we use your information

We only use your personal data when we have a legal basis to do so. Here’s what we do with your information and why it’s lawful:

To Provide Our Services (Contract)

Legal Basis: Performance of a contract with you

We use your information to:

  • Process your class enrolment
  • Communicate with you about your classes (schedule changes, cancellations, updates)
  • Allow our tutors and assistants to know who’s attending and mark the register
  • Process payments and issue receipts
  • Manage our waiting list and notify you when spaces become available
 

To Run Our Business (Legitimate Interests)

Legal Basis: Our legitimate business interests (balanced against your rights)

We use your information to:

  • Send you updates about classes you’re enrolled in
  • Improve our website and understand how visitors use it
  • Prevent fraud and ensure security
  • Keep our records organized and up to date
  • Analyze which classes are most popular
  • Understand how people find out about us
 

Marketing (Consent)

Legal Basis: Your consent or legitimate interest (for existing customers only)

We may use your information to:

  • Email you about new classes or courses that might interest you (only if you’re an existing student or on our waiting list)
  • Use photographs of you and your artwork in our marketing materials (only if you’ve given specific consent during enrolment)

You can opt out of marketing emails at any time by clicking “unsubscribe” in any email or contacting us directly.

 

Legal Compliance

Legal Basis: Legal obligation

We may use your information to:

  • Comply with tax and accounting requirements
  • Respond to legal requests or court orders
  • Comply with regulations from authorities

4. Who we share your information with

We do not sell your personal data to anyone. We only share your information in the following limited circumstances:

Our Team

Tutors and Class Assistants receive your:

  • First name and last name
  • Phone number
 

They need this information to:

  • Know who’s attending their class
  • Complete class registers
  • Contact you if there’s an urgent class issue
 

Service Providers

We use trusted third-party companies to help us run our business. They only process your data on our instructions:

Hostinger (Website Hosting)

  • Hosts our website and stores the data you enter
  • Location: European Union data centers
  • Purpose: Website operation and data storage
 

Stripe (Payment Processing)

  • Processes card payments securely
  • Location: Operates globally with UK presence
  • Purpose: Secure payment processing
  • Note: Stripe has its own privacy policy and handles your card details – we never see your full card number
 

Mailchimp (Email Communications)

  • Sends emails to students and waiting list members
  • Location: Mailchimp (Intuit) operates globally with servers including EU
  • Purpose: Email delivery and management
 

Facebook and Instagram (Meta)

  • Advertising pixels on our website
  • Location: Global
  • Purpose: Show relevant ads to people who’ve visited our website, measure ad effectiveness
 

Google Analytics (when implemented)

  • Website analytics
  • Location: Google operates globally
  • Purpose: Understand how visitors use our website
 

Legal Requirements

We may share your information if:

  • Required by law or court order
  • Necessary to protect our legal rights
  • Required by HMRC for tax purposes
  • Needed to prevent fraud or crime
 

Business Transfers

If we sell our business or merge with another company, your information may be transferred to the new owners. They would be required to use your data in accordance with this privacy policy.

5. International Data Transfers

We primarily operate within the UK, and your data is stored on servers within the European Union (through Hostinger).

Some of our service providers (Stripe, Mailchimp, Meta/Facebook) operate globally and may transfer data outside the UK. When this happens, we ensure:

  • They provide adequate protection for your data
  • They comply with UK data protection laws
  • Appropriate safeguards are in place (such as Standard Contractual Clauses)
 

Your data is never transferred to countries without adequate data protection.

6. How we protect your information

We take the security of your personal data seriously and have implemented appropriate measures:

Technical Measures:

  • SSL encryption on our website (https)
  • Secure password protection for accounts
  • Regular security updates and patches
  • Secure hosting infrastructure
  • Encrypted payment processing through Stripe
 

Organizational Measures:

  • Limited access to personal data (only staff who need it)
  • Confidentiality agreements for tutors and assistants
  • Regular review of who has access to data
  • Procedures for reporting and handling data breaches
 

Please note: While we use secure methods, no internet transmission is 100% secure. Please do not send sensitive information by regular email. For sensitive matters, please call us or use secure methods we provide.

7. How long we keep your information

We keep your personal data only as long as necessary for the purposes we collected it.

Active Students

While you’re enrolled in our classes:

  • We keep all your enrolment information
  • We need this to provide our service to you
 

After you finish your courses:

  • We’ll keep your basic information for up to 1 year in case you want to re-enrol
  • After 1 year of inactivity, we’ll delete your account unless you ask us to keep it
 

Waiting List

  • If you’re on our waiting list, we keep your information until you enrol, ask us to remove you, or for up to 2 years if we haven’t heard from you
 

Financial Records

  • Payment and invoice information: 6 years (required by UK tax law)
  • This includes transaction records but not card details (which we don’t store)
 

Marketing Photographs

  • Photographs where you’ve given consent: we keep these until you withdraw consent
  • You can ask us to stop using your images at any time
 

Enquiries and Communications

  • General enquiries: up to 1 year
  • Important communications about your classes: kept with your student record
 

You can request deletion of your data at any time (subject to legal retention requirements). See “Your Rights” below.

8. Your rights

Under UK data protection law, you have the following rights:

Right to Access

You can request a copy of the personal data we hold about you, free of charge.

Right to Correction

If information we hold about you is inaccurate or incomplete, you can ask us to correct it.

Right to Deletion (“Right to be Forgotten”)

You can ask us to delete your personal data in certain circumstances:

  • We no longer need it for the purpose we collected it
  • You withdraw consent (where that was the legal basis)
  • You object to processing and we have no overriding legitimate grounds
  • We’ve processed it unlawfully

Note: We may not be able to delete financial records we’re legally required to keep for 6 years.

Right to Restrict Processing

You can ask us to temporarily stop using your data in certain situations:

  • You’re questioning the accuracy of the data
  • You’ve objected to processing and we’re verifying whether we have legitimate grounds
  • The processing is unlawful but you don’t want deletion
  • We no longer need the data but you need it for a legal claim

Right to Data Portability

You can ask us to provide your data in a structured, machine-readable format or transfer it to another service provider (where technically feasible).

Right to Object

You can object to:

  • Processing based on legitimate interests
  • Direct marketing (at any time, for any reason)
  • Processing for research or statistics

Right to Withdraw Consent

Where we process your data based on consent (such as marketing or photographs), you can withdraw consent at any time. This doesn’t affect processing that occurred before you withdrew consent.

How to Exercise Your Rights

To exercise any of these rights, please contact us:

 

We will respond within 1 month (or within 3 months for complex requests – we’ll let you know).

No fee required in most cases. We may charge a reasonable fee or refuse requests that are clearly unfounded or excessive.

Identity verification: We may ask you to provide ID to confirm your identity before disclosing personal data.

9. Cookies and tracking

Our website uses cookies and similar technologies. We use the Complianz plugin to manage cookies and provide you with detailed information about the cookies we use.

When you first visit our website, you’ll see a cookie consent banner that explains:

  • What cookies we use
  • Why we use them
  • How you can manage your preferences
 

You can change your cookie preferences at any time by clicking the cookie settings in the footer of our website or through your browser settings.

Brief summary of cookies we use:

  • Essential cookies to make our website work properly
  • Analytics cookies to understand how visitors use our site (when you consent)
  • Advertising pixels from Facebook and Instagram (when you consent)
 

For detailed information about specific cookies, please see the cookie declaration managed by Complianz on our website.

10. Third-party websites

Our website may contain links to other websites, including social media platforms. This privacy policy only applies to our website.

When you click on links to other websites, you should read their privacy policies. We’re not responsible for how other websites use your data.

Our social media: When you interact with us on Facebook or Instagram, those platforms have their own privacy policies that govern how they use your data.

11. Changes to this policy

We may update this privacy policy from time to time to reflect changes in:

  • Our business practices
  • Technology
  • Legal requirements
 

When we make significant changes, we’ll:

  • Update the “Last Updated” date at the top
  • Notify active students by email if the changes significantly affect your rights
  • Post the updated policy on our website
 

We encourage you to review this policy periodically.

12. Questions and complaints

Contact Us

If you have any questions about this privacy policy or how we handle your data:

Email: carrie@creativeartclasses.com
Phone: 07936 646597
Post: Creative Art Classes Ltd, 43 Highwood Ridge, Basingstoke, Hampshire, RG22 4UU

We aim to respond to all queries within 7 working days.

Make a Complaint

You have the right to complain to the UK data protection authority if you’re unhappy with how we’ve handled your personal data.

Information Commissioner’s Office (ICO)

Website: https://ico.org.uk/make-a-complaint/
Phone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We’d appreciate the opportunity to resolve your concerns before you contact the ICO, but you have the right to complain to them at any time.

Summary

We collect your name, email, and phone number when you enrol in classes or join our waiting list. We use this to run your classes, keep you informed, and occasionally tell you about new courses. We share your basic details with tutors so they know who’s in their class. We use trusted companies like Stripe for payments and Mailchimp for emails. We keep your data secure and only as long as needed. You can ask us to delete your information or stop marketing emails anytime. We don’t sell your data to anyone.

Creative Art Classes Ltd
Registered in England and Wales
Registration Number: 15520620
43 Highwood Ridge, Basingstoke, Hampshire, RG22 4UU

© 2025 Creative Art Classes Ltd. All rights reserved.