Privacy Policy (GDPR)

1.0 Data Controller Identification

Golden Rose Sewing School is the data controller responsible for the personal data collected through this website, course enrolments, communications, and transactions.

Data Controller:   Golden Rose Sewing School Chapel‑en‑le‑Frith, Derbyshire, United Kingdom Email: sarah@goldenrosesewingschool.co.uk

Telephone: 07542 548116

We determine the purposes and lawful bases for processing your personal data.

1.1 Data Protection Principles

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR). Personal data shall be:

• Processed lawfully, fairly, and transparently

• Collected for specific, explicit, and legitimate purposes

• Adequate, relevant, and limited to what is necessary

• Accurate and kept up to date

• Stored no longer than necessary

• Processed securely using appropriate technical and organisational measures

1.2 General Provisions

This policy applies to all personal data processed by Golden Rose Sewing School. The Responsible Person oversees ongoing compliance with this policy. This policy is reviewed at least annually. We are registered with the Information Commissioner’s Office (ICO).

1.3 Lawful Bases for Processing

We process personal data under the following lawful bases:

• Consent – when you opt in to communications or marketing

• Contract – when you enrol in a course or purchase a product

• Legal obligation – where required by law

• Legitimate interests – for business operations, fraud prevention, and website analytics

Where consent is used, you may withdraw it at any time.

1.4 Data We Collect

We may collect the following categories of personal data:

• Name, email address, phone number

• Billing and payment information

• Course enrolment details

• Website usage data (analytics, cookies, browsing behaviour)

• Communications sent to us

• Technical data such as IP address, device type, and browser

1.5 Data Minimisation

We ensure personal data is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.

1.6 Accuracy

We take reasonable steps to ensure personal data is accurate and kept up to date. You may request correction of inaccurate data at any time.

1.7 Data Retention & Archiving

We retain personal data only for as long as necessary for the purposes for which it was collected. Retention periods are reviewed annually. When data is no longer required, it is securely deleted or anonymised.

1.8 Security

We use modern, secure systems to store personal data. Access is restricted to authorised personnel. Data is protected against unauthorised access, alteration, disclosure, or destruction. Secure deletion methods are used when data is removed.

1.9 Breach Notification

In the event of a personal data breach, we will assess the risk to individuals and notify the ICO and affected individuals where legally required.

1.10 Data Subject Rights

Under UK GDPR, you have the following rights:

• Right of access

• Right to rectification

• Right to erasure

• Right to restrict processing

• Right to object

• Right to data portability

• Right to withdraw consent

Requests can be made via sarah@goldenrosesewingschool.co.uk. We respond within one month.

1.11 Third‑Party Tracking & Cookies

Our website uses third‑party services that may collect technical and behavioural data:

• Google Analytics 4

• Meta (Facebook) Pixel

• PayPal

• Bing UET

• Snapchat Pixel

• Wix Analytics

These services may collect IP address, device type, browsing behaviour, and interactions with our pages.

Non‑essential cookies (analytics and marketing) are not activated until you provide consent via our cookie banner.

Full details are provided in our Cookie Policy.

1.12 International Data Transfers

Some third‑party providers process data outside the UK. Where international transfers occur, providers rely on:

• UK International Data Transfer Agreements (IDTA)

• UK Addendum to EU Standard Contractual Clauses

• UK adequacy decisions

These safeguards ensure your data remains protected.

1.13 Cookie Consent Mechanism

Our website uses a cookie banner that allows visitors to accept or reject non‑essential cookies. Analytics, marketing, and tracking cookies will not be set until consent is given. You may change or withdraw consent at any time.

1.14 Third‑Party Links & Embedded Content

Our website may contain links to external sites or embedded content (e.g., YouTube). We are not responsible for the accessibility or privacy practices of third‑party providers.

1.15 Policy Updates

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated revision date. For significant changes, we will notify users directly via email or website notification.

1.16 Contact Information

For questions about this policy or your personal data, contact:

Email: sarah@goldenrosesewingschool.co.uk

Telephone: 07542 548116

Address: Chapel‑en‑le‑Frith, Derbyshire, United Kingdom

Accessibility Statement

Our Accessibility Policy is available in the Policies section and linked in the website footer.