Privacy Notice

The Artsy Room operates The Artsy Room art studio and this website. We decide how and why your personal data is used, which makes us the data controller. You can reach us at theartsyroomhixson@gmail.com.

• Sign-up details — parent or guardian name, email, phone number, child's first name and age, chosen class and any message. Used to reserve a spot, run the class safely and contact you about it. Legal basis: performance of our agreement with you.
• Waitlist details — name, email, phone and the session you want. Used to notify you when a spot opens. Legal basis: performance of our agreement, or your consent.
• Contact messages — name, email, subject and message content. Used to answer your question. Legal basis: our legitimate interest in responding to enquiries.
• Order records — transaction reference, amount, currency and payment date received from our payment provider. Used to confirm bookings, issue receipts and keep accounting records. Legal basis: performance of our agreement and our legal obligations.
• Technical data — IP address, device and browser information, and basic usage logs generated when you visit the site. Used for security, fraud prevention and keeping the site working. Legal basis: our legitimate interest in a secure, reliable service.

We do not knowingly collect data directly from children. Information about a child is provided by their parent or guardian at sign-up.

• Merchant of Record — Paddle.com, who processes the sale, payments, subscription management, tax compliance and invoicing for our orders.
• Service providers — our website hosting and database provider, and email delivery tools used to send booking confirmations and notifications.
• Professional advisers — accountants or legal advisers, where needed.
• Authorities — where we are required to disclose information by law.

We do not sell your personal data.

Sign-up and waitlist records are kept while your child attends and for a reasonable period afterwards so we can handle follow-up questions. Contact messages are kept until the query is resolved and for a short period after. Order and tax records are kept for as long as accounting law requires. After that, data is deleted or anonymised.

Depending on where you live, you may have the right to access the personal data we hold about you, have it corrected or deleted, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent where we rely on it. You can also complain to your local data protection authority. To exercise any of these rights, email theartsyroomhixson@gmail.com and we will respond within one month.

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls on our database, and restricting sign-up and message records so they cannot be read publicly from the website.

We use only essential cookies and local storage needed to make the site and checkout work. We do not use advertising cookies. Our payment provider may set cookies within its checkout to process your payment securely. You can block or delete cookies in your browser settings, though checkout may then not work.

Some of our providers, including our hosting and payment partners, may process data outside your country. Where that happens, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.

We may update this notice. The version published here is the current one.