Privacy policy

Who we are

Art Sparks Wales is the trading name of Art Sparks Cardiff Ltd, a company registered in England and Wales (company number 17019333). We are the “data controller” for the personal information described in this policy, which means we decide how it is used and are responsible for keeping it safe.

Registered office: 1 Playhill, The Common, Dinas Powys, CF64 4DU
Email: artsparkswales@gmail.com

What information we collect

When you contact us

If you use our contact form, email, phone or message us, we collect your name, email address, phone number (if you give it) and whatever you tell us in your message.

When you join our mailing list

When you sign up through the form on our website, we collect your first name and email address, along with a record of when you signed up and that you ticked the box agreeing to hear from us. We add these details to Brevo, the service we use to send our emails.

When you book a workshop

Bookings are made through Eventbrite, which collects your name, email address and payment details. We receive your name, contact details and booking information so we can run the workshop. We never see or store your full card details.

When you come to a workshop

We may ask about access needs so we can make the session work for you. We only ask for what we need and only use it for that purpose.

How we use your information, and why we’re allowed to

Data protection law requires us to have a lawful reason for using your information. Ours are:

• To run the workshops you’ve booked, including sending joining details and contacting you about changes. This is necessary to carry out our agreement with you.
• To reply to your enquiries. This is in our legitimate interests, and in yours, as you’ve asked us to get in touch.
• To send you our newsletter and news about workshops, only if you’ve agreed to receive them. This is based on your consent. If you have booked with us before, we may also tell you about similar workshops, as long as you were given the chance to opt out when you booked and in every email we send.
• To keep financial records, which we are legally required to do.

We will never sell your information or pass it to anyone for their own marketing.

Who we share it with

We use a small number of trusted services to run Art Sparks Wales. They only use your information to provide their service to us:

• Eventbrite, for bookings and payments. Eventbrite’s own privacy policy also applies when you book.
• Brevo, to manage our mailing list and send emails. Brevo stores data in the European Union.
• Google, for our email account (Gmail) and the fonts used on this website.
• Netlify, which hosts this website and receives the contact messages and mailing list sign-ups sent through our website forms, passing them on to us.

Some of these companies may process information outside the UK. Where they do, they use legal safeguards approved under UK data protection law.

How long we keep it

• Mailing list: until you unsubscribe. After that, we keep only a record that you unsubscribed, so we don’t email you again by mistake.
• Enquiries: up to 12 months after our last contact with you, unless you go on to book.
• Booking and payment records: six years, as required for our company accounts.

Cookies

This website does not use advertising or tracking cookies. When you click through to Eventbrite or Instagram, those sites use their own cookies under their own policies.

Your rights

You have the right to:

• ask for a copy of the information we hold about you
• ask us to correct anything that’s wrong
• ask us to delete your information
• object to, or ask us to limit, how we use it
• withdraw your consent at any time, for example by clicking “unsubscribe” in any of our emails

To use any of these rights, email artsparkswales@gmail.com. We’ll reply within one month.

Making a complaint

If you’re unhappy with how we’ve handled your information, please tell us first and we’ll do our best to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.

Changes to this policy

We’ll update this policy when we add new services, such as children’s holiday camps. The date at the top shows when it was last changed.