Privacy Policy

Effective Date: 21 July 2026

The Creative Impact Studio CIC ("we", "our", "us") is committed to protecting your privacy and ensuring that your personal information is handled securely and responsibly. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, use our services, make a donation, volunteer, contact us, or otherwise interact with us.

This Privacy Policy has been prepared in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK data protection laws.


1. About Us

The Creative Impact Studio CIC is a UK Community Interest Company dedicated to supporting individuals and communities through creative projects, education, collaboration, community engagement, and practical support.

Contact Information

The Creative Impact Studio CIC

Website: https://tcistudio.org

Email: info@tcistudio.org


2. Information We Collect

Depending on how you interact with us, we may collect the following information.

Personal Information

We may collect:

  • Full name
  • Email address
  • Telephone number
  • Postal address
  • Organisation name (if applicable)
  • Donation details
  • Volunteer application information
  • Event registration information
  • Messages sent through contact forms

Technical Information

When you visit our website, we may automatically collect:

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Referral source
  • Pages visited
  • Time spent on our website
  • Date and time of visits
  • Cookie information

3. How We Use Your Information

We use personal information to:

  • Respond to enquiries
  • Deliver our community programmes
  • Process donations
  • Manage volunteers
  • Register participants for events
  • Improve our website and services
  • Communicate important updates
  • Send newsletters where consent has been given
  • Monitor website performance
  • Prevent fraud and misuse
  • Comply with legal obligations

4. Lawful Basis for Processing

Under UK GDPR, we process personal data based on one or more of the following lawful bases:

  • Consent
  • Contract
  • Legal obligation
  • Legitimate interests
  • Vital interests (where applicable)

5. Donations

If you make a donation through our website, payment information is processed securely by trusted third-party payment providers.

We do not store or have access to your full debit or credit card information.


6. Volunteers and Community Members

Where you volunteer with us or participate in our programmes, we may collect information necessary to:

  • Communicate with you
  • Organise activities
  • Manage safeguarding responsibilities
  • Maintain participation records
  • Ensure the safety of participants

7. Children's Information

Some of our projects may involve children, young people, and families.

Where personal information relating to children is collected, we ensure appropriate safeguards are in place and obtain parental or guardian consent where required by law.

We take additional care to protect children's privacy.


8. Cookies

Our website uses cookies to improve your browsing experience.

Cookies may be used to:

  • Keep the website functioning correctly
  • Remember preferences
  • Analyse visitor behaviour
  • Improve website performance
  • Provide website security

You can disable cookies through your browser settings, although some website features may no longer function correctly.


9. Analytics

We may use website analytics services to better understand how visitors use our website.

These services may collect anonymous information including:

  • Device type
  • Browser
  • Country
  • Pages visited
  • Time spent on pages
  • Website performance

Analytics information is used only to improve our website.


10. Sharing Personal Information

We never sell your personal information.

We may share information with trusted third parties including:

  • Website hosting providers
  • Payment processors
  • Email communication providers
  • Cloud storage providers
  • IT support providers
  • Professional advisers
  • Government authorities where legally required

All third parties are required to process information securely and lawfully.


11. Data Security

We use appropriate technical and organisational security measures to protect personal information from:

  • Unauthorised access
  • Loss
  • Misuse
  • Theft
  • Alteration
  • Disclosure
  • Destruction

Despite our efforts, no method of internet transmission can be guaranteed to be completely secure.


12. Data Retention

We retain personal information only for as long as necessary to:

  • Deliver our services
  • Meet legal obligations
  • Maintain financial records
  • Resolve disputes
  • Protect our legal rights

When information is no longer required, it is securely deleted or anonymised.


13. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate information
  • Request deletion of your information
  • Restrict processing
  • Object to processing
  • Request data portability
  • Withdraw consent at any time
  • Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us using the details below.


14. International Data Transfers

Where personal information is transferred outside the United Kingdom, appropriate safeguards will be implemented to ensure an adequate level of protection in accordance with UK GDPR.


15. Third-Party Links

Our website may contain links to external websites.

We are not responsible for the privacy practices or content of third-party websites and encourage users to review their privacy policies before providing personal information.


16. Marketing Communications

We will only send marketing emails where you have given consent or where permitted by law.

You may unsubscribe from marketing communications at any time by:

  • Clicking the unsubscribe link within our emails; or
  • Contacting us directly at info@tcistudio.org.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or best practices.

The latest version will always be published on our website with the updated effective date.


18. Contact Us

If you have any questions regarding this Privacy Policy or how your personal information is processed, please contact us.

The Creative Impact Studio CIC

Website: https://tcistudio.org

Email: info@tcistudio.org


19. Data Controller

For the purposes of the UK General Data Protection Regulation (UK GDPR), The Creative Impact Studio CIC is the Data Controller responsible for the personal information collected through this website.

If you believe we have not handled your personal information appropriately, you have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent authority for data protection.