1. Scope and controller
This notice explains how personal information would be handled by the operator of DIY Craft Academy through diycraftacademy.com and related course enquiries. The verified legal entity and registration details were not supplied for this build and must be completed before the site collects personal data.
2. Information we may collect
- Identity and contact details you choose to provide.
- Course interests, preferred dates, group size and access requirements.
- Technical records such as IP address, browser type and consent status if analytics or advertising technology is activated.
- Booking, payment and attendance information only if a separate verified booking system is introduced.
3. Lawful bases and purposes
Information may be used to respond to enquiries, administer requested services, meet legal obligations, protect site security and improve the programme. Depending on the context, the lawful basis may be consent, contract, legal obligation or legitimate interests. Special-category information, such as relevant accessibility or health details, should be requested only when necessary and handled with an appropriate additional condition.
4. Sharing and international transfers
Data may be shared with hosting, email, booking, payment, analytics or advertising providers only where necessary and under suitable terms. If information is transferred outside the UK, the operator should use a recognised safeguard and document the transfer. No such integrations are active in this static build.
5. Retention and security
Keep enquiry records only as long as needed for the purpose, legal obligations and reasonable dispute handling. Use access controls, secure transmission, backups and supplier review appropriate to the risk. The final operator must set specific retention periods before launch.
6. Your rights
Under UK data protection law, you may have rights to access, correct, erase, restrict or object to processing, and to data portability. You may withdraw consent where processing depends on it. Contact the operator at [email protected]. You may also complain to the UK Information Commissioner’s Office.
7. Contact and changes
Questions should be sent to the privacy contact shown in the footer. Material changes will be posted on this page with a revised date. The controller identity must be verified and added before any live collection begins.