Introduction
This privacy notice explains in detail the types of personal data Chesil Creative may collect about you when you interact with us on the Chesil Creative website and/or book one of our classes, workshops, clubs or parties. It also explains how we’ll store and handle that data, and keep it safe. This Privacy policy will need to be updated from time to time in line with General Data Protection regulations.

Our Contact Details
The information on this page refers to pages on www.chesilcreative.co.uk and other data handling by the organisation – if you have any queries, please contact Ellie Newbury, founder of Chesil Creative: info@chesilcreative.co.uk 07596140005

What type of information we have
In specific situations, we collect, process and hold your personal information with consent. This data may include: full names, email addresses, phone numbers, children’s medical conditions, photographs.  We do not collect or store customer’s financial information. We direct customers to PayPal or Stripe in order for them to make their payment (view PayPal’s Privacy Policy here: https://www.paypal.com/en/webapps/mpp/ua/privacy-full / view Stripe’s Privacy Policy here: https://stripe.com/en-gb/privacy )

How we get the information
Most of the personal information we process is provided to us directly by you for one of the following reasons: when you use the ‘contact us’ form; when you book onto one of our classes, workshops, clubs or parties; when you engage with us on social media; when you agree to join our mailing list; when you contact us by any other means with queries or complaints etc; when you choose to complete any surveys which we send out from time to time.
By contacting Chesil Creative, you won’t be added to any mailing lists unless you positively choose to do so.

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information is: Your consent. You are able to remove your consent at any time. You can do this by contacting us: info@chesilcreative.co.uk

Why we have the information and what we do with it
Names, email addresses and phone numbers are collected in order to inform you about our services, including providing you with details about a class, workshop, club or party that you have booked into or enquired about.  

We ask to be made aware of children’s relevant medical conditions when booking a child into a club, workshop or class where a parent or guardian is not present so that we are equipped with the necessary knowledge to ensure the health and safety of your child whilst they are under our supervision.  

We like to take photographs of our customers enjoying our classes, workshops, clubs and parties so that we can, with their consent, use the photographs for marketing purposes (including for social media, website, email marketing and newsletters, blogs, leaflets, brochures, posters etc.) We will only publish photographs of an individual with their prior consent. For adults, consent is asked for and given verbally at the time of taking the photograph. For children attending classes where their parent/guardian is not present, consent is given by the parents/guardians via an optional checkbox within the booking page. For children attending classes and workshops where their parent/guardian is also present, consent is given verbally by the parents and children at the time of taking the photograph.

Who we share your information with
All data we receive via this website will only be used for the purpose expressed on the particular form and in this privacy policy. We won’t pass on your personal details to third-parties (except for those listed below).

We are currently using Mail Chimp to manage our mailing list. Your details may be shared with Mail Chimp if you have subscribed to our mailing list or have booked your child onto one of our after-school clubs. This is so that we can send you emails about services that may be of interest to you or specific to the after-school club that you have booked.

If you choose to email us or complete any of our online forms, such as our ‘contact us’ form, our ‘register your interest’ form, or any form you complete when booking onto a class, workshop, club or party, your email address and any other information you provide will be stored in an email system so that we can respond to your message.

This web site makes use of Google Analytics to monitor how visitors use our web site. This does not gather any personal information about visitors. In order to support this, the site uses analytics cookies. These cookies are used only to monitor use of the site and are not used for tracking purposes.

How we store your information

Your information is initially stored on our email system and then securely transferred to a spreadsheet on a password protected computer. Personal details are duplicated into paper registers and taken along to classes to ensure that everyone is present and that we have contact details in case of an emergency. This paper copy is stored in a locked filing cabinet between classes and is shredded once the class or term has ended.  

Paper copies of personal information is shredded once the class or term relevant to the data has ended. For those who have booked onto a class, workshop, club or party, their electronic information is stored for the following lengths of time:

• If consent has been provided to use photographs of people and/or artwork, these consent forms are retained for as long as Chesil Creative hold and share the photographs relevant to these people.
• Photographs of people that have been taken with consent will be kept for as long as they are needed by Chesil Creative. You may retract your permission for Chesil Creative to use or store a photograph of you or your child at any time by contacting: info@chesilcreative.co.uk
• For those who have provided consent to be added to our mailing list, their information will remain on our database until consent is withdrawn. When customers unsubscribe to our mailing list, their details will be deleted from our spreadsheet and from our Mail Chimp list.
• Contact details are also retained for 21 days for NHS Test and Trace purposes. 
• If permissions are not required to be retained for the purposes set out above, customer’s information will be kept for one year after their last class with us, in case they need to be contacted for any further consent, permissions or communications. We will then dispose of the information by deleting the relevant row on our spreadsheet.

Your data protection rights

Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at info@chesilcreative.co.uk if you wish to make a request.

How to complain
If you wish to make a complaint, please contact us in the first instance: info@chesilcreative.co.uk

Privacy Policy Last Updated: 11/08/19