Privacy

The short version

This site sets no cookies of its own and uses no third-party analytics or advertising trackers. Nothing follows you around the internet, and there is no consent banner to dismiss because there is nothing to consent to. What you send in the enquiry form goes to Kirsten and is used to reply to you.

Who is responsible

Kirsten's Art Classes is the data controller for the information described here. The easiest way to reach us about anything on this page — including a request to see or delete what we hold — is by email: seasonsartclassrichmond@gmail.com.

What is collected, and why

When you send an enquiry

Your name, and whichever of your email address and phone number you choose to give, along with your message, which class interests you and — only if you answer it — how you heard about us. This is used to reply to you and to keep track of the conversation. The lawful basis is our legitimate interest in answering someone who has asked us a question.

When you join the mailing list

Your email address, plus the date you subscribed and where you subscribed from, kept as a record that you asked for it. The lawful basis is your consent, which you can withdraw at any time — see below.

When you book a place

Your name and contact details, which course or workshop you booked, and a record of what you paid and when. The lawful basis is performing our contract with you, and for the payment records, our legal obligation to keep financial records.

Card details never reach this site. Payment is taken by SumUp on their own pages; we are told only that a payment succeeded, for how much, and against which booking.

While you read the site

Which pages are opened, how long they are open, roughly how fast they loaded, the site you arrived from, and your country. This is our own counter, not Google Analytics or anything like it, and it is deliberately built so that it holds nothing personal:

• No cookie is set, and nothing is stored in your browser.
• Your IP address is never written down.
• To tell one visit from another we use a fingerprint made by scrambling your IP address and browser together with a secret that changes every day. It cannot be turned back into your IP address, and because the secret changes daily, the same person visiting tomorrow looks like someone else. We cannot follow you from day to day, and nor can anyone reading the database.
• If you leave the site by tapping WhatsApp, an email address or a social link, we record that a visitor did so. We do not record who.

The lawful basis is our legitimate interest in knowing whether the site works and where visitors come from — weighed against a design that keeps no personal data at all.

Who else sees it

We use a small number of services to run the site. They are:

• Cloudflare — hosts the site, the database, the photographs and the class videos, and forwards email sent to our address.
• Amazon Web Services — sends our email, from servers in Ireland.
• SumUp — takes card payments and holds the card details we never see.

That is the whole list. Nothing else is loaded from anywhere else — the typefaces the site is set in are served from this site rather than from Google, so opening a page contacts no one but us.

We do not sell your information, and we do not share it with anyone for marketing.

The contact page offers a Google map of the venue. It does not load unless you press the button to show it, because loading it lets Google set its own cookies. If you would rather it did not, simply do not press it — the address is written out beside it.

How long it is kept

• Enquiries — two years after we last heard from you, then deleted.
• Bookings and payment records — six years, which is how long HMRC requires financial records to be kept.
• Mailing list — until you unsubscribe.
• Visit statistics — kept indefinitely, because they contain nothing that identifies anyone.

What you can ask for

You can ask to see what we hold about you, to have it corrected, to have it deleted, or to object to us holding it at all. Email us and we will do it — there is no form, and it costs nothing.

To stop the newsletter you do not need to ask anyone: every email we send has an unsubscribe link, and one click is enough.

If you think we have handled your information badly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, at ico.org.uk, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.