Privacy Policy

The Creative Tribe Art Class

Last updated: 19 October 2026, 19:00

1. Introduction

The Creative Tribe Art Class respects your privacy and is committed to handling your personal information responsibly. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have over your personal information when you visit our website, contact us, book a workshop or purchase artwork.

Please also read our Terms & Conditions, Cancellation & Refund Policy, Photograph Policy, and Equality, Diversity & Inclusion Policy, which explain other aspects of how we operate.

2. Who we are

The Creative Tribe Art Class is an art workshop and artwork business offering creative workshops and displaying and selling existing artwork.

For privacy enquiries, you can contact us at:

Email: thecreativetribeart@gmail.com

3. What information we collect

3.1 Contact enquiries

When you contact us through our website, we may collect your name, email address, enquiry type and message. We use this information to respond to your enquiry and manage our communication with you.

Enquiry records are retained for as long as reasonably necessary to respond to and manage the conversation. We do not currently apply a single fixed retention period to all enquiry records.

3.2 Workshop bookings

Workshop bookings will typically be made through Eventbrite, an external booking platform.

Eventbrite may collect information such as your name, contact details, ticket information and payment-related information when you book. Eventbrite handles information it collects through its own platform in accordance with its own privacy arrangements.

We may receive or access relevant booking information where necessary to organise, administer and deliver a workshop. We may also retain information needed to manage attendance, respond to booking enquiries or deal with cancellations and refunds.

Please review Eventbrite's privacy information for details of how it processes information through its services.

3.3 Accessibility information

You may choose to tell us about accessibility requirements or adjustments that would help you participate in a workshop. We use relevant information to consider and arrange reasonable adjustments where possible.

Please share any relevant requirements through the booking form, where available, so that we can consider them in advance. You can also contact us at the email address above.

Accessibility information may reveal sensitive information about you. We ask that you share only the details needed to help us understand and consider your requirements. Where information about health or disability is involved, we will handle it with appropriate care and only process it where we have a lawful basis to do so.

3.4 Artwork enquiries, purchases and delivery

We may offer artwork for sale through an external website or third-party selling platform. If you choose to purchase artwork, you may be redirected to an external website to complete your purchase.

Where a third-party platform handles your order, payment, delivery details or other personal information, that information will be processed in accordance with the platform’s own privacy policy and terms. We encourage you to review these before completing your purchase.

The personal information we receive or retain in connection with an artwork purchase will be used for relevant purposes, such as managing your order, arranging delivery or collection, responding to enquiries and meeting applicable legal obligations.

The Creative Tribe Art Class sells existing artwork and does not currently offer commissioned or personalised artwork. Delivery by post and collection may be available, with the relevant arrangements confirmed at the point of purchase.

3.5 Photography and consent records

We may take photographs at workshops or events for purposes such as documenting activities and promoting The Creative Tribe Art Class.

We will follow our Photograph Policy and use separate consent choices where applicable. We will take particular care with photographs involving children and will obtain appropriate consent before using their images.

Where needed, we may retain records of consent, permissions or requests to withdraw consent so that we can respect your choices.

3.6 Website security and technical information

When you visit our website, technical information may be processed to deliver the website, maintain security, identify technical problems and protect against automated or malicious activity. This may include information such as your IP address, browser details, device information and connection logs, depending on the services involved.

4. How we use your information

We may use personal information to:

Respond to enquiries and communicate with you.
Administer and deliver workshops and manage bookings.
Consider accessibility requirements and arrangements.
Process artwork purchases and arrange postal delivery or collection.
Handle cancellations, refunds, complaints and customer support.
Record and respect photography permissions and consent choices.
Protect the website, prevent abuse and maintain its security.
Understand general website usage through Vercel Web Analytics.
Meet applicable legal, accounting and regulatory obligations.

We do not sell your personal information.

5. Our lawful basis for processing

UK data protection law requires us to have a lawful basis for processing personal information. Depending on the circumstances, we may rely on:

Contract: where processing is necessary to fulfil a booking, purchase or other agreement with you.
Legitimate interests: where processing is necessary for legitimate business purposes, such as responding to enquiries, managing our operations or protecting our website, provided your rights do not override those interests.
Consent: where you have freely agreed to a particular use, such as certain promotional photography or optional communications.
Legal obligation: where we need to retain or disclose information to comply with applicable law.

Where we process special-category information, such as information revealing health or disability, we will also identify an applicable additional condition under data protection law. We will not assume that ordinary consent to a booking automatically authorises every use of sensitive information.

Where we rely on consent, you can withdraw it at any time. Withdrawal does not make processing carried out lawfully before withdrawal unlawful.

6. Website hosting and Vercel Analytics

Our website is hosted using Vercel. Vercel may process technical information needed to serve the website, maintain its security and operate its infrastructure.

We plan to use Vercel Web Analytics as our website analytics service. We do not currently plan to add other analytics tools or advertising pixels.

Vercel Web Analytics is designed to provide website usage insights without relying on traditional tracking cookies for its standard analytics functionality. The information processed depends on the actual configuration and services enabled on our website.

For further information, please consult Vercel's privacy information: https://vercel.com/legal/privacy-policy

If our analytics configuration or use of third-party tracking changes materially, we will review this Privacy Policy and any applicable consent requirements.

7. Cloudflare Turnstile

Our contact form and staff sign-in page may use Cloudflare Turnstile in Invisible mode when the required keys are configured.

Turnstile operates in the background to help distinguish genuine users from automated or malicious submissions. It may process technical signals from your browser or device for this security purpose.

The website's public-facing site key may be provided to your browser. The secret key is kept on the server and is used to validate security tokens through Cloudflare's verification service. Contact messages and staff passwords are not deliberately submitted to Cloudflare as part of that token validation.

If a security token is missing, invalid, expired, reused or cannot be verified, the relevant submission or sign-in may be blocked.

Cloudflare's Turnstile privacy information is available at: https://www.cloudflare.com/turnstile-privacy-policy/

8. Staff Sign-in and Cookies

The website includes a staff sign-in area. This area may use a session cookie or similar technology to maintain staff authentication and support secure access to staff-only areas.

Any cookies or similar technologies used by the website will be reviewed to ensure that appropriate information is provided and consent is obtained where required under applicable UK law.

9. Who we share information with

We may share relevant information with service providers where necessary to operate our business, including:

Vercel, for website hosting and, if enabled, website analytics.
Cloudflare, for Turnstile website security.
Eventbrite, where workshop bookings are made through its platform.
Payment providers, where used to process artwork or other payments.
Postal, delivery or collection services, where needed to fulfil artwork orders.
Professional advisers or public authorities, where reasonably necessary or legally required.

We only intend to share information that is relevant to the purpose. Service providers may process information under their own terms and privacy notices, as well as any applicable arrangements with us.

10. International transfers

Some of the service providers we use may process information outside the United Kingdom. Where personal information is transferred internationally, the relevant provider's arrangements and applicable UK data protection requirements will determine the safeguards used.

You can consult the privacy information linked above and the relevant information provided by Eventbrite or any payment or delivery provider involved in your interaction with us.

11. How long we keep information

We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including responding to enquiries, managing bookings and purchases, maintaining appropriate records and meeting legal obligations.

We do not currently have a single fixed retention period for website enquiry records. These records are kept so that we can reply and manage the conversation. They should be deleted or anonymised when they are no longer reasonably needed, subject to any legitimate need to retain them.

Other records, such as transaction, accounting, consent or dispute records, may need to be retained for different periods depending on their purpose and applicable legal requirements.

12. How we protect your information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no website or electronic transmission can be guaranteed to be completely secure. You should avoid including unnecessary sensitive information in website messages.

13. Your data protection rights

Depending on the circumstances, you may have the right to:

Request access to the personal information we hold about you.
Ask us to correct inaccurate or incomplete information.
Ask us to erase information where the law gives you that right.
Request restriction of certain processing.
Object to processing based on legitimate interests.
Request a portable copy of certain information.
Withdraw consent where processing is based on consent.
Complain to the Information Commissioner's Office (ICO).

Some rights are subject to legal conditions and exceptions. We may need to verify your identity before responding to a request.

To exercise your rights, contact thecreativetribeart@gmail.com.

You can also find information about making a complaint to the ICO at: https://ico.org.uk/make-a-complaint/

14. Children

Our workshops or events may be attended by children where the relevant activity permits it. Where personal information or photographs of children are involved, we will take appropriate care and follow our Photograph Policy and applicable legal requirements.

Parents or guardians should contact us if they have questions about information concerning a child.

15. Links to other websites

Our website may link to external services, including Eventbrite. When you follow an external link, that provider's website and privacy practices apply to the information you provide directly to it. We are not responsible for the privacy practices of external websites.

16. Related policies

This Privacy Policy should be read alongside the following The Creative Tribe Art Class policies, where applicable:

17. Changes to this policy

We may update this Privacy Policy to reflect changes to our services, website, technology or legal obligations. The latest version will be published on our website with its updated date.

18. Contact us

If you have any questions about this Privacy Policy or how your personal information is handled, please contact:

The Creative Tribe Art Class
Email: thecreativetribeart@gmail.com