At Surrey Art School, we are committed to protecting your privacy. This policy sets out how we collect, use and store your personal information.
Who we are
Full name of legal entity: Ellie Green (sole trader) trading as: Surrey Art School
Email address: email@example.com
Postal address: Surrey Art School, Dean House Farm, Newdigate, RH5 5DL
I, Ellie Green, Founder and Director of Surrey Art School, am the data controller and I am responsible for your personal data (referred to as “I” and “my” in this privacy notice).
Surrey Art School is committed to protecting your personal information and making every effort to ensure that your personal information is processed in a fair, open and transparent manner. If you have any questions about our privacy practices, please contact our Founder and Director, Ellie Green by:
Emailing us at firstname.lastname@example.org
Writing to us at Surrey Art School, Dean House Farm, Newdigate, RH5 5DL
Calling us on 07861 761 167
By providing us with your information, you consent to our collection and use of the information you provide in the way(s) set out in this policy.
What information we collect about you
We collect two types of information:
Personal information which means any information that can be used to identify you. The type and quantity of information we collect, and how we use it, depends on why you are providing it, but we will only ever collect the information we need, including data that can help us to improve our services.
Personal Information that we collect may include the following:
Identity Data may include your first name, maiden name, last name, username, marital status, title, date of birth and gender.
Contact Data may include your billing address, delivery address, email address and telephone numbers.
Financial Data may include your bank account and payment card details.
Transaction Data may include details of purchases made by you.
Technical Data may include your login data, internet protocol addresses, browser type and version, browser plug-in types and versions, time zone setting and location, operating system and platform and other technology on the devices you use to access this site.
Profile Data may include your username and password, purchases or orders, your interests, preferences, feedback and survey responses.
Usage Data may include information about how you use this site, products and services.
Marketing and Communications Data may include your preferences in receiving marketing communications from Surrey Art School and your communication preferences.
Non-personal information is data that does not reveal your identity, such as website pages accessed, and files downloaded. This helps us to monitor how many people use our websites, how many people visit on a regular basis, and how popular different pages are. This information doesn’t tell us anything about you, it simply allows us to monitor and improve our service.
Where we collect information about you from
When you give it to us directly - this could be when you sign up to one of our classes or workshops through our website, subscribe to our newsletter, engage with our social media, contact us via email or on the phone, or leave your contact details at one of our open days or exhibitions.
When you give permission to third party organisations to share it with us, for example if you sign up to one of our events through Facebook.
When you visit our website. Like most websites, we use “cookies” to help us make our site – and the way you use it – better. Cookies are used by most major websites and work by placing small amounts of information on to your computer. A cookie often contains a unique number, which can be used to recognise your computer when a user of your computer returns to a website that it visited previously.
What we do with your information
Depending on your relationship with Surrey Art School, and the preferences you have indicated, information you give us may be used to:
· Fulfil your requests or provide you with the services, classes or information you asked for - such as entry to our classes, workshops and courses, sending you our newsletters, and participation in open studios or gallery events.
· Keep a record of your relationship with us
· Ensure we know how you prefer to be contacted
· Carry out research and analytics on the demographics, interests and behaviour of our students and supporters to help us improve our service
· Communicate with you. Tools may be used to monitor the effectiveness of our communications with you, including email tracking, which records when an e-newsletter from us is opened and/or how many links are clicked within the message. The data from this tracking is used in an aggregated and anonymised form.
· With your consent, we will contact you to keep you up to date with Surrey Art School’s news, classes and events. Occasionally we may include information about partner organisations who are collaborating with us on joint projects. Our forms and website have clear marketing preference questions and we include information on how to opt out when we send you any marketing material. If you don’t want to hear from us, please just let us know when you provide your data, by unsubscribing from our newsletters at any time or by contacting us at email@example.com
Sharing your data and keeping it safe
We take looking after your information very seriously and we ensure that there are appropriate technical controls in place to protect your personal details. Unfortunately, information transmitted over the internet is never 100% secure, so while we do our best to try to protect the security of your information, we cannot guarantee that loss, misuse or alteration of data will not occur whilst data is being transferred.
The information we collect about you will mainly be used by our staff so that we can support you and provide you with the services you have requested. We will never sell or share your personal information with organisations so that they can contact you for any marketing activities.
We will sometimes share your information with our trusted suppliers and partners who work with us, deliver our services or process personal data on our behalf. For example:
Outsourced team members, for example our tutors.
Service providers who provide IT and system administration services.
Professional advisers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services. We may also need to disclose your details if required to the police.
HM Revenue & Customs, regulators and other authorities based in the United Kingdom and other relevant jurisdictions who require reporting of processing activities in certain circumstances.
Third parties to whom I may sell, transfer or merge parts of my business or my assets.
Applications and tools that we use to run the business, for example Googlemail and Mailchimp. Some of these suppliers run their operations outside the European Economic Area (EEA). For example, when you sign up to receive information from us, you will be added to our MailChimp list(s). MailChimp (registered in the US) process your data by collecting and storing the information you give us via our sign up forms in order for us to create and use distribution lists, and send marketing and email campaigns. Although they may not be subject to the same data protection laws as companies based in the UK, we will take steps to make sure all of our suppliers provide an adequate level of protection in accordance with UK data protection law. By submitting your personal information to us, you agree to this transfer, storing or processing at a location outside the EEA.
How long will we keep your data?
We will only keep your data for as long as we need to in order to operate the service which you have requested and for as long as required in accordance with legal requirements and tax and accounting rules. When your data is no longer needed, we will dispose of it in a secure manner.
For tax purposes, we have to keep basic information about our customers (including contact, identity, financial and transaction data) for seven years after they cease being customers.
You have various rights under the data protection act and the EU General Data Protection Regulations in respect of the personal information we hold about you. These include the right to:
Request access to your personal data.
Request correction of your personal data.
Request erasure of your personal data.
Object to processing of your personal data.
Request restriction of processing your personal data.
Request transfer of your personal data.
You can see more about these rights on the ICO website.
If you wish to exercise any of the rights set out above, please email firstname.lastname@example.org
You will need to tell us what information you would like to see and prove your identity with two pieces of approved identification. We will aim to respond to your request as soon as possible and always within one month of receipt.
Please note that some of these rights only apply in certain circumstances and we may not be able to fulfil every request. If for any reason we are unable to fulfil your request, we will inform you as soon as possible and always within one month of receipt of the request.
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. Surrey Art School does not control third-party websites and we are not responsible for their privacy statements. When you leave this website, we encourage you to read the privacy notice of every website you visit.
Reporting a data breach
If we become aware that there has been a security breach, which will cause adverse effects to the individual whose data has been breached, we will report this to the relevant supervisory authority within 72 hours of becoming aware of the breach. We will also notify the individual as soon as possible.
Concerns or Complaints
If you have any questions relating to your personal information, please contact Ellie Green, Director, Surrey Art School at email@example.com or by calling 07861 761 167
If having contacted us you still have any concerns regarding the way we handle your personal information, you have the right to lodge your concern with the Information Commissioner’s Office. Visit https://ico.org.uk/concerns/ for more information.
Reviewing this policy
This policy was last updated in May 2019.
If you have any questions regarding this policy, please email firstname.lastname@example.org