Privacy Policy

Introduction

brightsonar operates creative learning workshops across the United Kingdom. This privacy policy explains how we collect, use, store, and protect information about individuals who interact with our services.

We take data protection seriously and comply with all applicable UK data protection legislation, including the UK General Data Protection Regulation and the Data Protection Act 2018.

Information We Collect

We collect information that you provide directly when booking workshops, joining our mailing list, or contacting us with enquiries.

Personal Details

When you book a workshop, we collect your name, email address, and postal address. We may also request information about accessibility requirements or dietary restrictions if relevant to the workshop format.

Payment Information

Financial transactions are processed through third-party payment providers. We do not store complete payment card details on our systems. We retain transaction records including amounts, dates, and workshop details for accounting purposes.

Communication Records

We maintain records of email correspondence, support enquiries, and feedback you provide. This helps us improve our services and resolve issues efficiently.

Website Usage Data

Our website collects technical information including IP addresses, browser types, device information, and pages visited. This data helps us understand how people use our site and identify technical problems.

How We Use Your Information

We use collected information for specific purposes related to delivering our educational services and maintaining our business operations.

Service Delivery

Your contact details enable us to send booking confirmations, venue information, schedule changes, and workshop-related updates. We use accessibility information to ensure appropriate accommodations are available.

Payment Processing

Transaction data allows us to process payments, issue refunds when applicable, and maintain accurate financial records required by law.

Communication

If you've joined our mailing list, we'll send monthly newsletters featuring new workshops, instructor profiles, and community updates. You can unsubscribe at any time through links provided in each email.

Service Improvement

We analyse feedback and usage patterns to refine our workshop offerings, improve our website, and develop new programmes that align with community interests.

Legal Basis for Processing

We process personal data under several legal grounds depending on the context.

When you book a workshop, processing is necessary to fulfil our contractual obligations. For marketing communications, we rely on your explicit consent. Certain processing activities are conducted under legitimate business interests, such as maintaining financial records or improving our services, provided these interests don't override your rights and freedoms.

Data Sharing and Disclosure

We do not sell personal information to third parties. We share data only in specific circumstances necessary for our operations.

Service Providers

We work with companies that provide essential services including payment processing, email delivery, and website hosting. These organisations process data on our behalf under strict contractual terms that require them to protect your information and use it only for specified purposes.

Workshop Instructors

We share participant names and relevant accessibility information with instructors teaching workshops you've booked. This enables them to prepare appropriate materials and accommodations.

Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request. We may also share data when necessary to protect our rights, property, or safety, or that of our community members.

Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law.

Workshop booking information is retained for seven years to comply with accounting and tax regulations. Marketing consent records are kept until you withdraw consent. Website usage data is typically deleted after two years.

When data is no longer needed, we securely delete or anonymise it so it cannot be associated with individual persons.

Your Rights

UK data protection law grants you several rights regarding your personal information.

Access and Portability

You can request a copy of the personal data we hold about you. We'll provide this in a commonly used electronic format within one month of your request.

Correction and Deletion

If information we hold is inaccurate or incomplete, you can ask us to correct it. In certain circumstances, you can request deletion of your data, though legal obligations may require us to retain some records.

Objection and Restriction

You can object to processing based on legitimate interests or ask us to restrict processing in specific situations, such as while we verify data accuracy.

Withdrawal of Consent

Where we process data based on your consent, you can withdraw that consent at any time. This doesn't affect the lawfulness of processing conducted before withdrawal.

To exercise any of these rights, contact us at [email protected]. We'll respond within one month and won't charge fees unless requests are manifestly unfounded or excessive.

Security Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.

Our systems use encryption for data transmission and storage. Access to personal information is restricted to employees and contractors who need it to perform their duties. We regularly review our security practices to ensure they remain effective against evolving threats.

Despite our efforts, no security system is impenetrable. If we become aware of a data breach that poses risks to your rights and freedoms, we'll notify you and relevant authorities as required by law.

Children's Privacy

Our workshops are designed for adults aged eighteen and over. We do not knowingly collect personal information from individuals under eighteen. If we discover we've inadvertently gathered such data, we'll delete it promptly.

International Transfers

We operate exclusively within the United Kingdom and store data on servers located in the UK. Some service providers we use may process data outside the UK. When this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by regulatory authorities.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify active community members via email and update the "last updated" date at the top of this document.

We encourage you to review this policy regularly to stay informed about how we protect your information.

Contact and Complaints

If you have questions about this privacy policy or how we handle your personal data, contact us at [email protected] or write to:

brightsonar Creative Studios
42 Eastgate
Leeds LS2 7JL
United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office, the UK's supervisory authority for data protection, if you believe we've processed your data unlawfully. Visit ico.org.uk for more information.