Privacy Policy

Effective date: 1 January 2025

Who we are

Silvercreek Drawing Courses is a UK-based education provider registered in London, United Kingdom.

Registered business address: 221B Baker Street, London NW1, United Kingdom.

Contact: [email protected], telephone: +44 20 3808 1234.

We act as the “controller” of your personal data for the purposes of the UK GDPR and the Data Protection Act 2018.

Data we collect

We collect the following categories of data when you use our services:

  • Account data: name, email address, password (hashed), billing address (if applicable).
  • Communications: messages you send us, support tickets, survey responses, and course feedback.
  • Technical data: IP address, device and browser information, timezone, approximate location, and usage logs for security and analytics.
  • Transaction data: course purchases, payment status, refunds. We do not store full card numbers.
  • Cookie data: identifiers that help us keep you signed in and measure site performance.

Special category data is not required to use our courses. Please do not provide sensitive information in free‑text fields.

Why we process data

We process your data to provide and improve our services, including:

  • Setting up and managing your account and course access.
  • Providing customer support and responding to enquiries.
  • Processing payments and preventing fraud.
  • Improving content, features and site performance.
  • Complying with legal and tax obligations.

Lawful bases under UK GDPR:

  • Contract: to deliver courses you purchase or request.
  • Legitimate interests: to secure our platform, deliver relevant content and measure performance. We balance these interests against your rights.
  • Consent: for certain analytics or marketing where required. You can withdraw consent at any time.
  • Legal obligation: to maintain records and comply with laws.
Cookies

We use essential cookies to keep you signed in and remember preferences, and analytics cookies to understand how our site is used. Some cookies are session‑based and expire when you close your browser, others are persistent.

  • Essential: strictly necessary for core functionality (cannot be switched off).
  • Analytics: help us improve content and performance. You can opt out at any time using your browser settings or the cookie banner.

You can control cookies in your browser settings and via our cookie preferences panel if shown.

Your rights

Under the UK GDPR you have the right to:

  • Access your personal data and receive a copy.
  • Rectify inaccurate or incomplete data.
  • Erase data (“right to be forgotten”) where applicable.
  • Restrict or object to certain processing.
  • Data portability in a structured, commonly used format.
  • Withdraw consent where processing is based on consent.

To exercise your rights, email [email protected]. We may ask for verification to protect your account. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Data retention

We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying legal, accounting or reporting requirements:

  • Account data: kept while your account is active and up to 24 months after closure.
  • Support communications: up to 24 months.
  • Transaction records: 6 years for tax and accounting.
  • Analytics data: 26 months or less when consent is withdrawn sooner.

When retention periods expire, we securely delete or anonymise data.

International transfers

Where we transfer personal data outside the UK, we use appropriate safeguards such as adequacy regulations, Standard Contractual Clauses (SCCs) and supplementary measures as needed.

Security

We employ technical and organisational measures to protect your data, including HTTPS/TLS, encryption at rest for critical systems, role‑based access controls, logging and staff training.

No method of transmission or storage is 100% secure. We monitor for vulnerabilities and aim to respond quickly to incidents.

Third‑party processors

We use trusted service providers to deliver our services (for example, hosting, email delivery, analytics and payments). We require processors to protect your data and only process it on our documented instructions.

Payments

Payments are processed by third‑party providers. We receive payment status and basic billing details but do not store full card numbers or security codes on our servers.

Children’s privacy

Our services are not directed to children under 13. If you believe a child has provided us personal data without consent, contact us and we will take appropriate steps.

Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the “Effective date”. Material changes may be communicated by email or in‑app notice.

How to contact us

Email: [email protected]

Phone: +44 20 3808 1234

Address: Silvercreek Drawing Courses, 221B Baker Street, London NW1, United Kingdom.