Privacy policy

Last updated 12 October 2026

What personal information the Creative Education website collects, why, who helps us handle it, how long we keep it and your rights.

The short version

We collect what you give us in our forms, such as an enquiry, a download or a newsletter sign-up, and use it to reply and to tell you about our training. We only measure visits to the site if you accept cookies. We never sell, rent or exchange mailing lists, and every marketing email has an unsubscribe link. Your courses, account and certificates are on our learning platform, which has its own privacy notice. You can ask to see, correct or delete what we hold at any time. The full policy below takes priority over this summary.

1. Who we are

This website, www.creativeeducation.co.uk, is run by Creative Education Limited, registered in England and Wales, company number 04662664. Our registered office is 49 Station Road, Polegate, East Sussex, BN26 6EA.

We decide how and why your personal information is used, which makes us the “controller” under data protection law. We’re registered with the Information Commissioner’s Office (ICO), number Z2363705.

Our data protection lead is Tom Hesmondhalgh. We don’t have a formal Data Protection Officer. For anything about your information, email [email protected], call 020 8680 4077 (Monday to Friday, 8am to 4pm) or write to us at the address above.

We follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

2. What this policy covers

This policy covers this website and the ways we deal with you from it: our forms, our emails, enquiries, bookings and the people who apply to work with us.

Courses happen on our learning platform, Creative Education Learning, at learn.creativeeducation.co.uk. Your account, your courses and progress, your certificates, membership payments and what your school can see are explained in the platform’s privacy notice. We link to it rather than repeat it here, so the two never disagree.

3. What we collect

We only ask for what we need. Depending on what you do, that can be:

Enquiries and quotes: your name, email address, phone number if you give it, your organisation and your role, and what you tell us you need.
Free downloads: your name, email address, role and school or organisation, and which resource you downloaded.
Our newsletter: your email address, your name if you give it, and the topics you choose.
Job and associate applications: your name, contact details, your experience and anything you send us, such as a CV.
Bookings and purchases: the contact and billing details of the person or organisation buying, what was bought and when. We never see or store card details. Card payments are handled by our payment provider.
Feedback after a course or training session: your answers and comments, and your name and organisation if the form asks for them.
How you use the site: the pages you visit, how you got here and roughly where you are (to the town, not your address), and how you move around a page (where you click and scroll, but never what you type), but only if you accept cookies. See section 10.
Technical details: our hosting keeps short-term logs of requests to the site, which include IP addresses, to keep it secure and working.
Emails and calls: if you contact us directly, what you tell us and how to reply.

If you tell us something sensitive, for example about a disability so we can make adjustments for a training session or an interview, we use it only for that.

4. Why we use it, and our lawful basis

Data protection law says we need a lawful basis for each use. Here’s ours.

To answer an enquiry, send a quote or arrange training: our legitimate interests in replying to people who contact us and running our business, or steps you’ve asked us to take before a contract.
To provide what you’ve bought, and support you afterwards: contract.
To keep records of purchases for tax and VAT: legal obligation.
To send you our newsletter: your consent. You choose to sign up, and you can unsubscribe at any time.
To tell people at schools and organisations about our training and services: our legitimate interests, at work email addresses, with a way to opt out in every email.
To send you a resource you’ve downloaded, and follow up about it: our legitimate interests, with a way to opt out in every email.
To consider a job or associate application: steps you’ve asked us to take before a possible contract, and our legitimate interests in recruiting.
To improve our courses from your feedback: our legitimate interests. If we quote feedback on our website or in our marketing, we do it without your name.
To measure how the site is used: your consent, given in the cookie banner.
To keep the site secure and working: our legitimate interests.

Where we rely on legitimate interests, we’ve weighed them against your rights, and you can object at any time (see section 9).

5. Emails from us

Our newsletter is opt-in only. You sign up yourself on our newsletter page.

We may also email existing customers, and people who have enquired or registered with us, about training and services we provide ourselves.

Every email from us is clearly from Creative Education and has a link to unsubscribe. You can also reply with “unsubscribe” or email us. We never send bulk unsolicited email, and we never sell, rent or exchange mailing lists.

6. Your school or organisation

When you join through your school, trust or another organisation’s membership, or go on a course it has arranged for you, it can follow your progress on the courses it gives you, and we share information about that progress with the right people there, such as its CPD lead.

Your organisation only sees your training while you’re on its staff. It doesn’t see what you did somewhere else, except where a course you finished elsewhere meets one of its requirements: then it sees the course and the date. The details, including what it keeps after you leave, are in the platform’s privacy notice.

We use a small number of companies to run the website and our contact with you. They act on our instructions and can’t use your information for their own purposes.

HubSpot holds our contacts, form entries, emails and, if you accept its cookies, its record of your visits. Our HubSpot account stores data in the EU.
Kinsta hosts this website, on Google Cloud.
Google Analytics measures visits to the site, only if you accept cookies. We use it for analytics only, never for advertising.
Microsoft Clarity shows us how people use the pages of this website, including recordings of visits with anything typed hidden, only if you accept cookies. We use it on this website only, and never for advertising.
Our payment provider and accounting software handle payments and invoices.

The learning platform uses other companies, listed in its privacy notice.

We don’t share your information with partners unless you’ve agreed first. When we ask, we’ll tell you exactly how they’ll use it. We may also share information when the law requires it.

Transfers outside the UK

Some of these companies are based in the US or hold data outside the UK. Where data goes to a company in the US, the transfer is covered by the UK Extension to the EU–US Data Privacy Framework or by the UK Addendum to standard contractual clauses. Transfers to the EU are covered by the UK’s adequacy regulations for the EU.

8. How long we keep it

Enquiries, downloads and contact details: 3 years after we last hear from you, unless you ask us to delete them sooner.
Newsletter sign-ups: until you unsubscribe. After that we keep only your email address on a list of people not to contact, so we don’t email you by mistake.
Payments and invoices: 6 years after the end of the financial year, because HMRC requires it.
Customer records: 3 years after an account or agreement is last used, apart from payments and invoices, as above.
Job and associate applications: for as long as we need them to make a decision and deal with any questions about it. If you become one of our associates, for as long as you work with us.
Feedback: as long as it helps us improve the course. Feedback we keep for longer has names removed.
Analytics: Google Analytics and Microsoft Clarity keep data for a limited time and then delete it automatically. Clarity keeps most recordings for 30 days.
Your account, courses and certificates: as set out in the platform’s privacy notice.

When we no longer need information, we delete it.

9. Your rights

You have the right to:

get a copy of the information we hold about you
have wrong information corrected
have your information deleted
object to how we use it, including at any time to marketing, or ask us to restrict it
take information you gave us to another provider
withdraw your consent at any time, where we rely on it

Asking is free. Email [email protected] or call 020 8680 4077. We reply within one month. We may need to check who you are first.

If you ask us to delete your information, we may not be able to help with something you bought from us before. For training your organisation asked you to do, we may pass your request to it, because it’s responsible for those records.

10. Cookies

We use the cookies the site needs to work. We only use cookies to measure visits, through HubSpot, Google Analytics and Microsoft Clarity, if you accept them when we ask. You can change your mind at any time with “Cookie settings” at the foot of every page. Our cookie policy lists every cookie and what it does.

11. Contact and complaints

If you have a question or a worry about your information, please contact us first. Email [email protected], call 020 8680 4077 or write to Creative Education Limited, 49 Station Road, Polegate, East Sussex, BN26 6EA.

You can also complain to the Information Commissioner’s Office, at ico.org.uk/make-a-complaint or on 0303 123 1113.

When this policy changes, we update it here and change the date below.