Home About Join The Arte Club Member Login
JOIN THE WAITLIST

Privacy Policy

 

Welcome to our Privacy Policy. It’s where we tell you all the important stuff about how we collect and process your personal data when you are using our website www.thearteclub.com ( our “Site”) and the membership site ("Members Area") attached to our Site. 

 

ABOUT US

We are Serenwood Limited t/a The Arte Club (“We” “our” or “us”) a company based in the United Kingdom. We are responsible as a “Data Controller” of your personal information for the purposes of the General Data Protection Regulation (GDPR) which applies across the European Union. We are registered with ICO on the Data Protection Register. We use, collect and are responsible for certain personal information about you and because of that we want and need to tell you about how we will act with integrity to comply with legal obligations in that regard. 

You can read all about us and The Arte Club on our Site. If you don’t agree with our Privacy Policy then unfortunately you may wish to cease viewing and using our Site. If you have any questions you can email [email protected]

We have designed our data protection and privacy processes from the outset to accommodate that we provide a service to children aged under 18, and as a result we have incorporated as necessary details on how children’s rights are protected. As a matter of good practice, we use DPIAs to help us assess and mitigate the risks to children.

Highlights : We only use your data to improve your experience with us and to help and benefit you. 

Simple: We’ll do our very best to talk straight, answer your questions, take away your stress. 

Junk-free: we will only contact you to share information that we believe is valuable, and we will never share your details with third parties without your permission. 

Safety first: We take privacy and data protection very seriously. Protected 24/7. 

Age of consent: when you provide us with any subscription and payment information, you warrant to us that you are over 13 years of age. The Arte Club membership subscription is created for children aged 10-18 so we are required to comply with all necessary data protection obligations in this regard. This means that a child aged over 13 years of age can provide their own consent to join The Arte Club and provide sign-up information, whereas children under the age of 13 must be subscribed by a parent or guardian. We make reasonable efforts at the point of signing up to the membership service to ensure that anyone who provides their own consent is at least 13 years old. We also make reasonable efforts to ensure that the parent / guardian subscribing on behalf of the child has genuine responsibility for them. We regularly review available age verification and parental responsibility verification mechanisms to ensure we are using appropriate current technology to reduce risk in the processing of children’s personal data

OUR PROMISES

Let’s start here. 

“Personal data” – any information capable of identifying an individual. [So not anonymised data which is where all the bits which could identify you are removed]

The services we provide are educational in nature and intended for children aged 10-18. We take very seriously our personal relationship with you as the purchaser of services on behalf of your child. That includes the personal information that you share with us and the trust you place in that. 

We collect and handle personal data every day, but with the key purpose of helping and serving you to have a more powerful business offering and a more meaningful life. 

Here are the promises we make to you in that regard. 

  • We promise…. to be open and honest about the information we collect, and why we may collect it. This policy is here to help you understand what information about you we collect, how we use it, how long we keep it for, and reassure you that we protect it. 

  • We promise…. to only use it for the specific purposes we told you that we needed it for. We will not use it for any other purposes, unless we obtain your specific permission, or we are required by law or to fulfil a legal obligation. We won’t collect more information than we need for the service or product or information you ask us for. 

  • We promise…. to check it and make sure its accurate and keep it up to date. If you spot a mistake, then you can write to us and tell us and we’ll update it. And obviously, if you change your details then let us know. 

  • We promise…. that we won’t keep that information any longer than it is needed. The length of time varies depending the information and the reason we use or keep it. We’ll explain this more below. 

  • We promise…. to protect your information and your privacy. Safety and security is a priority for us in all areas.

  • We promise…. to explain your Privacy Rights and how you can exercise them.

  • We promise…. to respond quickly and with care to any questions or concerns which you raise with us. We’re a small business but we’re responsive and available to help you. 

  •  Above all, we promise….to respect your privacy and that of your child(ren) and your information and treat it as if it were our own. We will treat you and your information lawfully and fairly. 

YOUR PERMISSION

We will only collect, use and share your personal information if you’ve given us your permission and / or if we have either a legal right or obligation. This is known as the legal basis and the law says that we have to tell you what the legal basis is for each of our activities involving this information. So we’ve summarised this below in a nice, neat table at the end of this Privacy Policy. So hopefully (despite the inevitable jargon) you’ll find it easy to understand. 


YOUR RIGHTS

You have certain rights by law – legal rights that the Information Commissioning Office (www.ico.gov.uk) will help you to enforce if you need to at any time.

Here’s a list to help you understand what your specific rights are.

  • Right to access your information at any time. Just write to us and we’ll respond quickly and efficiently.

  • Right to stop receiving emails, correspondence, notifications or messages from us. We will always give you an “opt-out” option and you can unsubscribe at any time. 

  • Right not to be profiled for marketing purposes. So even though we love to find out more about you, get curious and ask questions so we can serve you better, connect and collaborate to get closer to you…you can ask at any time for us to stop doing this. 

  • Right to prevent processing of your information. By which we mean you can ask us to just hold onto your information in case you need it in the future, but not to process it in any way. 

  • Right to be forgotten. It means that you can ask us to erase and delete permanently your information, and although there are some bits we need to keep by law we will honour this request happily. 

  • Right to portability. In non-legalese it means you can ask us to transfer your information to another organisation. Just let us know what to include and who you want to send it to, and we can. It’s yours, remember, we’re just here to help. 

  • Right to make a complaint. The regulating body is the Information Commissioner’s Office (www.ico.gov.uk) and they are there to help you on all things data-related. You can also find a complaint form on their website. 

You can email us [email protected] with any requests to use those rights. 

We promise to come back to you very quickly. In accordance with legal requirements it will always be within 30 days of your request. Usually we reply within 3-4 working days. If you feel it’s very urgent please mark that in your email for the attention of Scott Eason, our Data Protection Officer

QUESTION AND RESPONSE

In this next section, we’ve set out questions you may have about our Privacy Policy and our answers. This section is to help you. You don’t have to read it if you don’t want to, of course. But the law says that we MUST tell you these things, so you are informed as our customer or potential customer. We’ve made it as simple and helpful as we can.. 

YOU: “HOW DO YOU COLLECT PERSONAL INFORMATION FROM OR ABOUT ME OR ABOUT MY CHILD(REN)?”

Us: We may collect information about you in the following ways:

  • when you visit our Site (or Members' Area) it may happen automatically by the use of cookies or similar technologies;

  • when you purchase a product or service from us you may have to provide the information (and if you choose not to, we may not be able to finalise the contract with you and of course we’ll tell you that and we can decide what to do);

  • when you meet with us at a live event and we exchange contact details;

  • when you contact us on the telephone, by email, or by filling in a form on our website or social media pages;

  • if you are referred to us by a friendly advocate of our service;

  • we may receive data from public sources such as Companies House or electoral records in the UK or EU;

  • and obviously when you become a customer to us and we do great work with you, then we will collect more information than when you’re just browsing and enjoying hanging out in our world. This information may be collected through the Site’s membership area, or if you (or your child(ren)) send us documents or share in our online resources. 

YOU: “WHAT INFORMATION DO YOU COLLECT ABOUT ME?”

Us: The information we collect may include:

  • Your name and the name(s) of your child(ren);

  • Contact information such as email address, phone number, correspondence address;

  • Demographic information such as postcode, lifestyle interests, business pursuits. This might include your needs, interests, preferences and you’ll always be invited to share this, not forced. It’s a choice. This will usually be through surveys, research projects, offers or questionnaires;

  • Photographic evidence and video footage (this is only if you attend one of our events and you’ll have given specific consent for this);

  • As a customer, we will need to collect financial information for the transaction, and sometimes your signature on contracts or other personal data in the context of our work together and as we safely operate our advisory business in accordance with the law.

  • Your child(ren) will create a user profile as part of their membership of The Arte Club and this will be their avatar as they use the Site and Members’ Area. This includes the option to include a name and add a photo. Many members create anonymised avatar names and add cartoon photos to preserve privacy within the Members’ Area. If you have concerns about this please email [email protected]

     

YOU: AND HOW DO YOU USE THE INFORMATION?

Us: We may use information held about you in the following ways:

  • To respond to you if you contact us for help or a query;

  • To fulfil our contractual obligations to you when you’ve bought from us;

  • To send you valuable information which we think you’ll enjoy and like relating to our services, events, what we’re up to, how you can connect with us. But ONLY if you consent to this and if you ask us to stop then we will. 

  • To make sure that our websites are helpful and attractive for you and working effectively for your computer and devices and so we can meet the preferences and interests that you’ve told us about;

  • To allow you to play properly with our websites and online services, so you can be interactive with us when you choose to do so. 

  • To tell you if we make important changes to our service.

  • Generally, we only use it for purposes which we need to - to protect ours and your interests and prevent illegal activity and make sure that what we offer and do in the world is safe and secure. 

     

 YOU: WHO DO YOU SHARE IT WITH AND WHO HAS ACCESS TO IT?

Us: We only share it when there’s a real, actual need. This may be when you ask us to, or if we need to do so in line with a service we’re providing for you and you’ve given us express permission. We may have to share it with companies in our group who provide services to us, or to service providers who provide IT and system administration services in order to make sure all our technology is linked and working properly. This will be done in accordance with the appropriate legal standards and requirements. 

We will of course have to share personal information with law enforcement or other authorities if required by an applicable law.

But otherwise, we do not and will not share your personal information with any other third party for marketing purposes. We definitely won’t ever be selling your information on to any third parties because that’s just not what we do. 

 

YOU: WHERE DO YOU STORE AND PROCESS THE INFORMATION?

Us: We use computer systems to help us to safely store and process the information. Because these are provided by third parties it is possible that some of your information is stored and processed overseas and in particular outside of the European Economic Area (EEA). But the agreements in place with these third-party providers are protected to the same high standards as required by the law here in the UK. We will not otherwise ever transfer your personal data outside of the EEA or to any organisation or third party without your specific consent. 

 

YOU: HOW DO YOU PROTECT AND SECURE IT?

Us: We use up to date security measures in line with latest technology, which may include encryption, security certificates, access controls, procedures and policies within our business, and taking steps to mitigate any potential security risks and monitoring/testing our systems on a regular basis. We also anonymise data where we can so it’s not identifiable. We seek expert advice and help on this wherever necessary because we want to make sure we’re always doing the right thing. 

 

YOU: HOW LONG DO YOU KEEP MY INFORMATION?

Us: The short answer to this is only as long as necessary or where relevant to your relationship with us or our obligations under the law. If you transact with us we have to keep certain information for 6 years (this includes Contract, Identity, Financial and Transaction Data) after you stop being a customer. 

We respect your confidentiality and whilst you are engaged with us and are happy you want to be in contact with us. We won’t stay in touch where you don’t want us to (obviously) and so take a look back at the “Rights” we’ve set out above and remember they are there to help and protect you. 

 

YOU: WHY DO YOU COLLECT AND USE MY INFORMATION IN THE WAYS YOU’VE DESCRIBED?

Us: In the main it’s because we’re here to help and we believe you like us and want to be connected with us. We’re a small but growing business and so we rely on having a legitimate interest to be in contact with you to share our work in the world and let you choose whether to play with us, or not. It may be because: 

  • You specifically gave us your permission (your “consent”)

  • We had to seek your consent for certain to add cookies to your device;

  • We needed to use your information to run our business successfully (the law calls this “legitimate interests”) but we will only do this when we’re happy that there is little or no risk to you and your personal information. Of course, we want you to know about us and the services we provide because they may be exactly what you need! But we’ve also made it easy for you to stop receiving that type of information at any time (by unsubscribing or opting out) 

  • We had to collect the information to deliver the contract to you or to comply with a law or legal obligation. In this case, we are allowed to do so, as long as we only then use it for that purpose.

 

For those of you who love the detail, we’ve got a super table for you below. This summarises the categories of data we may collect and also explains to you why we collect it and the lawful grounds upon which we do so. 

 

CATEGORY 

EXAMPLES

LAWFUL GROUNDS

Communication Data

Pretty much any communication that you send to us. For example, via the contact form on our website, an email, a text, any social media messaging, or any social media posting.

We process this data for the purposes of communicating with you, for record keeping and for the establishment, pursuance or defence of legal claims. Our lawful ground for this processing is our legitimate interests which in this case are to reply to communications sent to us, to keep records and to establish, pursue or defend legal claims.

Customer Data

This includes data relating to any purchases of goods and/or services such as your name, title, billing address, delivery address email address, phone number, contact details, purchase details and your card details. 

We process this data to supply the goods and/or services you have purchased and to keep records of such transactions. Our lawful ground for this processing is the performance of a contract between you and us and/or taking steps at your request to enter into such a contract.

User Data

This includes data about how you use our Site and any online services together with any data that you post for publication on our Site or through other online services.

Our lawful ground for this processing is our legitimate interests which in this case are to enable us to properly administer our Site and our business. We process this data to operate our Site and ensure relevant content is provided to you, to ensure the security of our website, to maintain back- ups of our Site and/or databases and to enable publication and administration of our website, other online services and business.

Technical Data

This is data about your actual use of our Site and other online services. It might include your IP address, your login data, details about your browser, length of visit to pages on our Site, page views and navigation paths, details about the number of times you use our Site, time zone settings and other technology on the devices you use to access our Site. The source of this data is from our analytics tracking system.

We process this data to analyse your use of our Site and other online services, to administer and protect our business and Site, to deliver relevant Site content and advertisements to you and to understand the effectiveness of our advertising.  Our lawful ground for this processing is our legitimate interests which in this case are to enable us to properly administer our Site and our business and to grow our business and to decide our marketing strategy.

Marketing Data

This could include data whether you agree to receive marketing from us (and our third parties) and your communication preferences. We process this data to enable you to partake in our promotions such as competitions, prize draws and free give-aways, to deliver relevant Site content and advertisements to you and measure or understand the effectiveness of our communications and advertising.  

Our lawful ground for this processing is our legitimate interests, for example in order to evolve and improve our services we like to study how customers use our products/services, and this helps us to expand and develop them, to grow our business and to decide our marketing and commercial strategy.

 

YOU: WHAT ABOUT SENSITIVE DATA?

Us: The legal definition of “sensitive data” refers to data that includes details about race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. We do not collect any Sensitive Data about you or your child(ren). 

Nor we do not collect any information about criminal convictions and offences.

We would require your explicit consent for processing sensitive data, so if our position on this changed in the future we would send you a further communication asking for you to confirm your specific consent to this type of processing. 

 

YOU: AND WHAT ABOUT COOKIES? WHAT ARE THEY AND WHY DO I CARE?

Us: Essentially cookies are small files stored on a user’s computer or device. They are used to help the provider to tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences. We do use traffic log cookies to identify which pages are being used and this helps us analyse data about web page traffic and improve our website site for customer needs. We only use this information for analysis purposes and then it’s removed from the system. A cookie in no way gives us access to your computer or any information about you other than the information you choose to share with us. You can choose to accept or decline cookies and you will have seen a pop-up request when you first visited our site. You can read our Cookie Policy for more information on this. 

 

YOU: OK, I THINK YOU’VE ANSWERED ALL MY QUESTIONS

Us: GREAT! Thanks for reading and listening. Was it fun? Maybe you love reading Privacy Policies? Or perhaps you’re just very sensible and wanted to make sure we’re doing the right thing with your personal information and the information you are sharing about your child(ren) when they join The Arte Club. 

We hope that you’re reassured that we take our obligations around privacy, processing, storage and protection of information seriously. Any questions or feedback drop us a note [email protected]. We regularly review this policy and also the ways we collect information. We’d love to hear from you! 


Thank you for being here on our Site and in the world of The Arte Club!