Privacy Policy

Privacy Policy 

Drawing Room | Tannery Arts is registered with the Co-Operative and Community Benefit Societies Act 2014 under the name Tannery Arts Limited. At Drawing Room | Tannery Arts we take your privacy very seriously and we are committed to protecting it. Please read this privacy policy carefully as it contains important information about who we are and how and why we collect, store, use and share your personal information. It also explains your rights in relation to your personal information and how to contact us or supervisory authorities if you have a complaint.

In order to provide the services you’ve requested or to help us better understand the needs of the people we engage with, we collect and use certain personal information about you. When we collect and use your personal information, we are the Data Controller for your personal data and will ensure it is used and stored in accordance with the General Data Protection Regulation (GDPR), and the Data Protection Act 2018.

We aim to be clear when we collect your personal information and not to do anything you wouldn’t reasonably expect. The principles we apply in dealing with your personal information are:

• We never sell your personal information
• We won’t share your personal information externally except

• • for marketing purposes with your express consent; or
  • with specific processors legitimately acting on our behalf and with proper/appropriate safeguards in place; or
  • if legally required

• We keep all personal information within managed systems where access is carefully controlled
• We will only take and use your personal information where necessary and for a legitimate purpose
• We will only retain your personal information for as long as it is necessary to do so.
• We will not routinely send your personal information outside the EEA (the European Economic Area). If need to do this in specific circumstances in compliance with the principles above, we will ensure that any data processor outside the EEA will store and process your information in compliance with GDPR and Data Protection Act 1018.

If you have any questions about how we process your personal information or if you wish to opt out of certain types of processing or communications please contact us at [email protected] 

Why do we collect your personal information 

We use (or ‘process’) your personal information to provide the services you’ve requested, or to help us better understand the needs of the people we engage with. We will also use your information to contact you regarding non-contractual information, such as share our news and upcoming events, if we have your consent to do so. In all cases we will process your information if we have a proper reason for doing so. This can include:

Because it is necessary:

• for the performance of our contract with you, including processing tickets and online sales, or to take steps at your request before entering into a contract;
• for our legitimate interests or those of a third party, as long as this is not overridden by your own rights and interest;

• to comply with our legal and regulatory obligations; or
• where you have given consent.

We may also process your special category personal information where:

• it is necessary for medical purposes (e.g. in a medical emergency);
• it is necessary to protect your or another person’s vital interests; or
• we have your explicit consent to do so.

How do we collect your personal information 

We collect most of your personal information directly from you. You may give us information by filling in forms on website or by corresponding with us by telephone, email, face-to-face or otherwise. For instance, we gather information when people book for an event or workshop, buy items for our shop in person or online, directly sign up with an account through our Biennial website, enter into an agreement with us, donate to us, or sign up to one of our mailing lists.

However, we may also collect information:

• from publicly accessible sources, e.g. Companies House or social media (e.g. LinkedIn, Facebook)
• from public sources for charities (in order to find information about those charities’ employees, trustees, etc. and to find information about donations and support)
• from public sources for individuals (collated lists that are publicly available)
• press sources (e.g. newspaper articles and databases), which may include media monitoring (e.g. Google alerts)
• directly from a third party, e.g.:

• • customer due diligence providers
  • sanctions screening providers
  • credit reference agencies

• from a third party with your consent
• from cookies on our website—for more information on our use of cookies, please see our Cookie Section below

• via our IT systems:

• automated monitoring of our websites and other technical systems, such as our computer networks and connections, CCTV and access control systems, communications systems, email and instant messaging systems.

• in photographs documenting an event or activity where it would not be necessary, appropriate or practicable to obtain your specific consent (for example, we may seek specific consent for prominent or impactful uses, but typically not for group shots, background inclusion or internal use). We will always aim to obtain consent if we are aware of a minor (under 18) included in a photo.

The information we get from other organisations may depend on your privacy settings or the responses you give to these websites. We recommend that you check these settings regularly.

What information do we collect? 

We may collect and use the following personal information about you:

• your name and contact information, including email address and telephone number and (if applicable)
• your address
• Information to enable us to check and verify your identity, e.g. your date of birth
• your gender information, if you choose to give this to us
• your billing information, transaction and partial payment card information, including event payments, donations and Gift Aid declarations
• your previous booking history
• your contact history, purchase history and saved items
• information you make available on our social media accounts e.g. ‘likes’, posts and responses to our Instagram feed
• information to enable us to undertake credit or other financial checks on you
• information about how you use our website, IT, communication and other systems
• your responses to surveys, competitions and promotions
• information provided by you for specific purposes (e.g. disability and dietary preferences for event management purposes)
• records of Drawing Room or Tannery Arts events you register for and attend
• emergency contact details, if you have shared this with us

• records of communications and interactions we’ve had with you
• information relating to your philanthropy and other giving, including donations to other organisations (which you may tell us about, or about which we may learn through the media)
• images of you when captured in photographs or video of our events, or through CCTV

this is not an exhaustive list and we may retain different types of information for different individuals based on the service we are providing or relationship with you.

What do we use your information for?  

We process personal information collected for the purposes of:

• Providing information about products and services
• Providing and personalising our services
• Dealing with your enquiries and requests
• Administering orders and accounts relating to our suppliers or customers
• Administering membership records
• Administering our contract with you
• Providing reservation or booking services for our events
• Conducting market research
• Producing publications about our programme including our events and other activities

Marketing 

Please note that your information may be used to send you details of those products or services that we offer that we have identified as likely to be of interest to you.  This will be in accordance with the preferences that you indicated when you completed an online form.

If at any point you would like to opt-out of receiving communications from us, or would like to change the channels (such as email or post) that we use to contact you, please contact us at [email protected]

How do we protect your data? 

Your information will be held and processed on Tannery Arts Limited systems or systems managed by suppliers on our behalf. All third parties we instruct to hold and otherwise process your information will be legitimately acting on our behalf and with proper and appropriate safeguards in place.

We have appropriate security measures to prevent personal information from being accidentally lost, or used or accessed unlawfully. We limit access to your personal information to those who have a genuine business need to access it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality. Your special category information is only made available to members of staff or contractors who have a reason to work with it.

We also have procedures in place to deal with any suspected data security breach. We will notify you and the UK regulator (the Information Commissioner’s Office (ICO)), of a suspected data security breach where we are legally required to do so.

Disclosures 

We will only disclose data when obliged to disclose personal data by law, or the disclosure is ‘necessary’ for purposes of national security, taxation and criminal investigation, or we have your consent, in our publications, and to the following:

• Business partners;
• Suppliers we engage to process data on our behalf;
• Suppliers we engage to process publications on our behalf;
• Successors in title to our business.

Other websites 

Our website may contain links to other websites that are outside our control and are not covered by this Privacy Policy.  If you access other sites using the links provided, the operators of these sites may collect information from you that will be used by them in accordance with their privacy policy, which may differ from ours.

Internet-based transfers 

Given that the Internet is a global environment, using it to collect and process personal data necessarily involves the transmission of data on an international basis.  This means for instance that data you pass to us may be processed outside the European Economic Area, although the data will always be held securely and in line with the requirements of UK data protection legislation.  By communicating electronically with us, you acknowledge and agree to our processing of personal data in this way.

Your rights 

You have right to:

• Access information we hold about you.
• Require us to correct any mistakes in your personal information.
• Require us to delete your personal information. However there are situations where we are not able to comply with this request, if holding your data is necessary to fulfil the requirements of a contract or our legal obligations.
• Restrict processing of your personal information. If you contest the accuracy of the information for example.
• Receive your personal information in a structured, commonly used format.
• Object to your information being used for direct marketing, or in certain situations to our continued processing of our processing of your personal information.
• Not to be subject to a decision based solely on automated processing that produces legal effect concerning you or significantly affects you.

To exercise any of your rights above, please email us at [email protected]. Please note that we reserve the right to charge a modest administrative fee if we feel the request would require a considerable amount of administrative time to respond to.

How to complain 

We hope that we can resolve any query or concern you may raise about our use of your information by contacting us directly.

However, if we haven’t been able to do so, you also have the right to lodge a complaint with the ICO, who may be contacted at https://ico.org.uk/concerns or telephone: 0303 123 1113.

Use of cookies 

A cookie is a small piece of information sent by a web server to a web browser, which enables the server to collect information from the browser.  Find out more about cookies on www.allaboutcookies.org.

This website requires cookies in order to function correctly. These cookies are used only to improve the user experience on our site.  We also use cookies to identify you when you visit this website and to keep track of your browsing patterns and build up a demographic profile. They are not stored, collected or resold for marketing purposes, they are purely to help us track how people are using our site, and to ensure it functions correctly. Most browsers will allow you to turn off cookies.  If you want to know how to do this please look at the menu on your browser, or look at the instruction on www.allaboutcookies.org.  Please note however that turning off cookies will restrict your use of our website.

We are not responsible for third party cookies on this site, although the only ones our site uses are from trusted sources as outlined below. The cookies used are as follows:

1. Google Analytics – Google analytics javascript runs on our site to tell us who is using our site and how. This script requires a cookie to record this data. These are third party cookies.

1. Twitter – The twitter widget present on some pages creates cookies if you interact with it. These are third party cookies.

1. Content Management System and associated plugins – Our website is powered by a Content Management System and as such it creates cookies to store session information in order to help it remember user interactions and states, for example if you are logged in our not. These are the only first party cookies we create, and they are required for the site to function correctly. they are not used in any way outside of their technical applications.

1. E-Commerce – Cookies may be used to store your shopping cart

If you are unhappy about cookies being stored on your computer, you should change your browser settings to prevent them. By continuing to use this site you are agreeing to the use of cookies as detailed above.

Changes to this privacy policy 

This privacy policy was most recently updated on 9 May 2024.

This privacy policy may change from time to time so please check this page occasionally to ensure you are happy with any changes.