Privacy policy

Our commitment 

At Creative Youth Network, we are committed to maintaining the trust and confidence of our visitors to our website, subscribers to our newsletter, show audiences who buy tickets through our website and course attendees who sign up through our website.

We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.

Creative Youth Network is the controller and responsible for your personal data (collectively referred to as “Creative Youth Network”, “we”, “us” or “our” in this privacy policy).

Creative Youth Network may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 25/05/2018.

We have appointed a Data Protection Lead Manager who is responsible for overseeing questions in relation to this privacy policy.  If you have any questions about this privacy policy, including requests to exercise your legal rights, please contact the Data Protection Officer using the details set out below:

Email address: dpo@creativeyouthnetwork.org.uk

Postal address: Creative Youth Network, 20 Old School House, The Kingswood Estate, Britannia Road, Bristol BS15 8DB

What we collect

We may collect the following information:

• Name and job title
• Contact information including email address and telephone number
• Demographic information such as postcode, preferences and interests
• Other information relevant to event bookings or course sign ups, including age

How and why we use your personal information

We process your personal information under one or more of the following lawful bases:

• Contract – where processing is necessary to provide tickets, courses, events, activities or services that you have requested.
• Consent – where you have specifically agreed to receive marketing communications or newsletters from us.
• Legitimate Interests – where processing is necessary for the effective administration of Creative Youth Network, improving our services, analysing website use, managing events and ensuring the security of our systems.
• Legal Obligation – where processing is required to comply with applicable laws, regulations or statutory reporting requirements.

Where we rely on consent, you have the right to withdraw your consent at any time.

Special category data

In some circumstances, we may collect and process information relating to health, disability, ethnicity, safeguarding matters or other special category data.

We will only process this information where necessary and where an appropriate lawful condition under UK data protection law applies.

Children and young people’s data

Creative Youth Network works with children and young people. We are committed to protecting their privacy and handling their personal information with appropriate safeguards.

Where required, we will obtain consent from a parent, guardian or other authorised person before collecting or using personal information relating to a child.

We only collect information necessary for the delivery of our services, activities, safeguarding responsibilities and funding requirements.

Website visitors

When you visit www.creativeyouthnetwork.org.uk we use Google Analytics to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is processed in a way which does not identify anyone. We do not make any attempt to find out the identities of those visiting our website. You can find out more about how cookies are used on this website in the Cookies Policy below.

If we do want to collect personally identifiable information through our website, we are up front about this. You can find out Ticketing Data Policy below.

Website Cookies

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences. 

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system. 

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. 

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

We are also on a number of social media pages. Although this policy covers how we will use any data collected from those pages, it does not cover how the providers of social media websites will use your information. Please ensure you read the privacy policy of the social media website before sharing data and make use of the privacy settings and reporting mechanisms to control how your data is used.

Wi-fi

When you use our Wi-fi on any of our sites, we may collect data about:

• your device
• the volume of data which you use
• the websites and applications which you access
• your usage by access time, frequency and location.

We use  Nebula IT Services Ltd, our business tech support contractor, to process this information. We do this in order to measure, monitor and manage wi-fi usage.

You can find information about Nebula IT Services Ltd’s privacy policy here.

Mailing lists

As part of the registration process for our newsletters, we collect personal information. We use that information to deliver the newsletter (e.g. your email address), to tell you about the services you’ve asked us to tell you about (e.g. through our vacancies newsletter), to contact you if we need to obtain or provide additional information, to check our records are right and to check every now and then that you’re happy and satisfied with our services. We don’t rent or trade email lists with other organisations or businesses.

We use a third-party provider, MailChimp based in the United States, to deliver our newsletter. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see MailChimp’s privacy notice. You can unsubscribe to general mailings at any time of the day or night by clicking the unsubscribe link at the bottom of any of our emails or by emailing marketing@creativeyouthnetwork.org.uk

Mailchimp may process personal information outside the United Kingdom. Where personal information is transferred internationally, appropriate safeguards will be implemented in accordance with UK data protection legislation.

Ticketing data

When you purchase a ticket or sign up to an activity through the Creative Youth Network website, your name and email address will be stored in our Box Office system provided by Beacon Fundraising Database, based in the United Kingdom. We might also ask you to provide other information such as age, address, telephone number, organisation you work for, but this data is not mandatory for the purchasing of a ticket. You may, of course, purchase a ticket in person without supplying the aforementioned personal data. Please be assured that we do not share your personal details with any other company without your consent.

We may share anonymised personal information with other organisations, mainly our funders, who use this to analyse our audience development programmes, ticket sales and self-generated funding to understand the impact of the investment made in Creative Youth Network.

We may use an external provider such as Headfirst or Eventbrite to support events. If you redirected to an external site they will have their own privacy notices available.

We also hold events, courses and performances in partnership with other organisations. We will let them know about your booking and share your name with them but they can’t contact you unless you have selected that you are happy to be contacted in the future by our partners.

Financial transactions

Any financial transactions you make on our website are handled by our payment service provider, Stripe. We share transactional data with Stripe only to the extent necessary for the purposes of processing your payments, refunding and dealing with complaints and queries relating to payments and refunds. You can find information about Stripe’s privacy policies here.

Our website provider

Your data may also be available to our website provider, Nebula Design to enable us and them to deliver their service to us, carry out analysis and research on demographics, interests and behaviour of our users and supporters to help us gain a better understanding of them to enable us to improve our services. This may include connecting data we receive from you on the website to data available from other sources. Your personally identifiable data will only be used where it is necessary for the analysis required, and where your interests for privacy are not deemed to outweigh their legitimate interests in developing new services for us. In the case of this activity the following will apply:

(a)        Your data will be made available to our website provider

(b)        The data that may be available to them include any of the data we collect through our website as described in this policy

(c)        Our website provider will not transfer your data to any other third party, or transfer your data outside of the EEA.

(d)        They will store your data for a maximum of 7 years.

International data transfers

Some of our service providers may process personal information outside the United Kingdom.

Where this occurs, we will ensure appropriate safeguards are in place to protect personal information, including the use of adequacy regulations, International Data Transfer Agreements (IDTAs), or other lawful transfer mechanisms recognised under UK data protection law.

Access to your personal information

You are entitled to view, amend, or delete the personal information that we hold. Under UK data protection law, you have the right to:

• Request access to your personal information.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information in certain circumstances.
• Request restriction of processing in certain circumstances.
• Object to processing carried out under legitimate interests.
• Withdraw consent at any time where processing is based on consent.
• Request transfer of your personal information to another organisation where technically feasible.

To exercise any of these rights, please contact:

dpo@creativeyouthnetwork.org.uk

Email your request to dpo@creativeyouthnetwork.org.uk or send by post to Creative Youth Network, 20 Old School House, The Kingswood Estate, Britannia Road, Bristol, BS15 8DB.

Please also let us know if the personal information that we hold about you needs to be corrected or updated.

Complaints

If you have concerns about how we process your personal information, please view our complaint and compliments policy.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent authority for data protection.

Website: https://www.ico.org.uk

Telephone: 0303 123 1113

Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.