Privacy Policy
Who we are and Introduction
We are Creative Response (Arts) charity number 1096890. We operate as Creative Response Arts and we have our registered office at Vernon House, 28 West Street, Farnham, Surrey GU9 0BD, (“we”, “us” or “our”). We are committed to protecting and respecting your privacy.
This Privacy Policy (and any other documents referred to in it) sets out the basis on which we will process and use any personal data about our website visitors who are our supporters, participants, our community, donators, friends, potential supporters and visitors (together “supporters”) to our website WWW.CREATIVERESPONSEARTS.ORG -that we collect from them, that they provide to us, or that we collect from third parties. Please ensure you read this Privacy Policy carefully to understand our practices regarding these individuals’ personal data and how we will treat it.
For the purpose of the Data Protection Act 2018, (the “DPA”) and the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, (the “GDPR”), we are the data controllers and are located at Vernon House, 28 West Street(, Farnham, Surrey GU9 0BD,
We comply with the DPA and the GDPR in respect of handling personal information – the collection, holding, storage, use, and processing of personal data about our supporters (such personal data is held in both manual and electronic records).
From time to time we may make changes to this Privacy Policy If and when we do so, we will post the changes on this page and they will apply from the time we post them. Individuals should check back frequently to see any updates or changes to this Policy. This policy was last updated on 22nd May 2025.
Personal data we collect
On our website, we collect and use the following types of personal data about our supporters:
Personal information such as
· Name;
· Postal address;
· Phone numbers (home, work and mobiles as applicable);
· Email address(es);
· Contact preferences;
· Information provided when completing forms on our website;
· Information on donations given;
· information that our supporters give us – for example when making donations, such as bank account details for setting up regular direct debits, credit card details for processing credit card payments, employer details for processing a payroll gift, or taxpayer status for gift aid purposes;
· Information given when using our website; and
· Messages left on our contact forms
· Technical information, for example, internet protocol (“IP”) addresses, login information, browser type and version, pages accessed, files downloaded, full Uniform Resource Locators, (“URLs”)
The information we collect is given directly from our supporters.
Our supporters are not required to disclose personal data to us to browse the website or to use our social media sites, but supporters do need to provide us with certain personal data in order for us to provide them with certain services.
We do not knowingly collect the personal data of those who are under 16 years old without the consent of their parent or guardian. The safety of children is very important to us.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
Cookies also allow us to improve our website.
Why do we need your personal information and how do we use it
We obtain, collect, record, hold, store, organise, adapt, alter, retrieve, consult, disclose, destroy and otherwise use personal data of supporters, as set out in this Privacy Policy, for the following purposes:
– Providing supporters with the services, object and information that they ask us for;
– Corresponding with supporters and recording any relevant communications;
– Keeping records of donations made and actions taken by our supporters;
– Claiming gift aid on donations;
– Supporting and corresponding with new volunteers
– Recording campaigning activities by supporters;
– Performing our obligations under any contracts that we enter into with supporters;
– Telling supporters about changes to our services;
– Administering our website and for operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
– Keeping our website safe and secure.
How we share personal data
We will not share your information to third parties for marketing purposes. We may allow our suppliers to access and use your personal data to allow them to perform services on our behalf (e.g payment processing). In these circumstances we will not give these organisations any rights to use your personal information except to provide services to us and in accordance with our instructions.
We will not sell or share supporters’ information with other organisations other than as stated above.
On occasions we may collect statistical data, for example for funding arrangements require this. Any reporting of this data would be done anonymously.
Legal basis for processing personal data
We rely on various legal bases to justify our processing of supporters’ personal data. These are set out below.
CONSENT: The supporters have given their consent to the processing of their personal data for the specific purposes mentioned above.
LEGITIMATE INTEREST: The processing is necessary for our legitimate interests. These legitimate interests include processing, mailing and delivering purchases made, answering questions about us and any services we provide, carrying out research or analysis to assist us in our mission and processing credit card payments.
The processing is necessary for us, as the data controller, to comply with our legal obligations, such as sharing personal data where we are legally required to do so e.g. by law or by an order of a court.
Where we transfer and store personal data
All information that supporters provide to us is stored on our secure servers and/or on the servers of our suppliers who we have engaged to host various IT systems for us.
Unfortunately, the transmission of information via the internet is not completely secure. We will do our best to protect supporters’ personal data, however we cannot guarantee the security of data transmitted to our website; any transmission is at supporters’ own risk. Once we have received personal information, we will use strict procedures and security features to try to prevent unauthorised access.
We will keep supporters’ information only for as long as they engage with us in any of the above ways,
– They continue to support us
– They comply with the law; or
– To ensure we do not communicate with supporters who have asked us not to.
We will review on a regular basis the personal data of supporters that we collect and hold to ensure that such data is only kept for an appropriate length of time.
Your Data protection rights- Under data protection law, you have the following rights :
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to update information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising these rights. If a request is made, we will respond to you within one month in writing. To make a request please use our details at the end of this notice.
How to complain
If you have any concerns or queries about our use of your personal information, or to make a complaint, you can write to us at :
FAO: The Data Controller- Creative Response Arts, Vernon House, 28 West Street, Farnham, Surrey, GU9 0BD Tel: 01252 716876 E-mail: contact@creativeresponsearts.org
Please add subject tile in emails: For the attention of the Data Controller
You can also complain to the ICO if you are unhappy about how
