Effective from 1st June 2018
Should you need to contact anyone at CLG regarding this policy please address your query to:
Phone: 01422 383 191
The provision of your personal data to us is voluntary. Providing us with your personal data means you will be able to use our membership services, participate in our programmes, take part in consortia, attend our meetings and apply for employment, volunteering or other work with us.
How we collect personal information about you:
We may collect personal information from you when you interact with CLG. There are lots of different examples of interaction, which include: If you sign up for membership, enter for an award, submit resources to the learning library, enquire about our work, join a consortia, or apply for a job or volunteer with us or otherwise provide us with personal information. This may be when you phone us, email us, visit our website, sign up to attend an event or meeting, through the post or in person.
You may give us personal information DIRECTLY
- To sign up for membership
- To enter for an award
- To submit resources to the learning library
- To attend meetings or events
- When you share information from our website on social media (such as ; Facebook, Twitter, LinkedIn)
- When you apply for employment, volunteering of other work
- When you register for any of the programmes we deliver
You may also give us personal information INDIRECTLY:
- The Internet Protocol (IP) address of the device from which you access the platform, which helps us derive the country and city in which you are located.
- The specific actions that you take on the platform
- Any search terms that you may enter.
- The time, frequency and duration of your visits.
- Your browser type and operating system.
- The nature of the device you are using.
- Your information may also be shared with us by, others including users of our services and other stakeholders, accrediting bodies, employment agencies, when you follow us or otherwise interact with on or via Twitter, when you like and/or join our page on Facebook or interact with us in other ways on or via Facebook through these companies.
You may give permission to OTHER ORGANISATIONS to share it or it is PUBLICLY AVAILABLE INFORMATION
- We may combine information you provide to us with information available from external publicly available sources.
- Depending on your privacy settings for social media services, we may also access information from those accounts or services.
We use this information to gain a better understanding of you and to improve our communications, our service offer.
What information do we collect?
Via the Website
Information provided by you
You can access and browse the platform without providing any personal information. However, some services do require you to register for a membership account and, in doing so, to provide us with certain personal information:
Essential information: When you register for a CLG account, you will need to provide your email address, state your real name and choose a password.
Profile information: You may choose to set up a profile on the platform in which case you will be asked to provide:
- A profile name
- Details of where you live
- A profile picture or avatar
- Information about how you categorise yourself with respect to your artistic/professional practice
- Details of your other websites and social media profiles
- Telephone number
Any information you provide may be deleted, edited, changed or amended by you at any time.
Via other normal business interactions:
We may collect, store and use the following kinds of personal data: when we interact with you for the purposes of normal business (i.e – email or on the phone)
- Your name and contact details
- The organisation(s) you work for
- Postal address
- Telephone number
- E-mail address
- Social media identity
- Information about the services you use
- Services and products of interest to you
- Marketing and/or communication preferences
- Information about your computer and about your visits to and use of this website including your IP address, geographical location, browser type, referral source, length of visit and number of page views;
- Any other information you have chosen to share with us
We may also request other information where it is appropriate and relevant, for example:
- Details of why you have decided to contact us and notes relating to any discussions in person or electronically
- Your bank details or debit/credit card details for processing payments (Such information will be collected only on secure pages (https) and using encrypted forms.)
- Details of your interests and participation in our work, surveys you have completed, etc
- Information that you post to online forums. You may provide personal information when you upload content to the platform or when you post comments or contribute to discussions.
Do we process sensitive personal information?
Applicable law recognises certain categories of personal information as sensitive and therefore require more protection including information for equal opportunities monitoring (where appropriate). We may also collect and store sensitive personal data if there is a clear reason for doing so; and will only do so with your explicit consent or where the law requires us to do this.
How and why will we use your personal data?
Personal data, however it has been provided to us, will be used for the purposes specified in this Policy.
- Your email address and password are used to identify you when you log into the platform
- Any additional information you upload as part of your public profile will be published on your profile page. This information will be publicly accessible
- If you subscribe to a paid account, your name, address and payment information will be used to process and collect your payment. CLG complies with all industry security standards.
- Your email address will be used to send you updates and notifications regarding your account, service updates, newsletters and marketing messages (if you have elected to receive them in your preferences).
- To operate and maintain your CLG account and provide you with access to the website and any services you subscribe to.
- To identify you as the source of any content that you upload, the comments you post and/or other contributions you make to the platform
- To seek your participation in surveys about CLG
- To provide you with technical support.
- To provide other users with data regarding people accessing their content.
- To analyse the use of membership services in order to improve the services we offer.
- To customise your use of membership services and / or the content you receive.
- With your consent, we will disclose your personal information in your public profile, along with any content you upload and comments you make.
- CLG will never pass your personal data on to third parties without your express consent.
- While it is unlikely, CLG may be required to disclose your personal data by a court order to comply with other legal requirements. We will use all reasonable endeavours to notify you before we do this, unless we are legally restricted from doing so.
- If you have a CLG account, we may share the personal data submitted under your account within the organisation in order to improve the quality of our service.
We may use your personal information to:
- Enable you to use any and/or all of the services or programmes we offer;
- Send you information about our work, campaigns, programmes and any other information, products or services that we provide. The channels we will use to do this are: phone, email, direct mail and digital advertisements (this will not be done without your consent and you may specify which channels of communication you prefer);
- Provide you with the services, products, programmes or information you have requested;
- Improve your browsing experience by personalising your interaction with our website;
- Handle the administration of any donation or other payment you make via credit/debit card, cheque, standing order or BACS transfer;
- Collect payments from you and send statements and/or receipts to you;
- Handle the administration of your employment, volunteering or any other work you apply for and are engaged on;
- Conduct research into the impact of our campaigns or programmes;
- Deal with enquiries and complaints made by or about you relating to the website or us in general;
- Audit and/or administer our accounts.
Supporter and Stakeholder research/profiling
We may use your personal information to undertake research to gather further information about you from publicly accessible sources. This helps us to get a better understanding of your background, interests and preferences in order to improve our communications and/or interactions with you, to help ensure they are targeted to be relevant and appropriate, and to provide information (sometimes through third parties) about our services which we consider may be of interest to you.
Facebook & Instagram marketing
We may use some of your personal information to participate in Facebook’s Custom Audience , Lookalike Audience and programs, which enable us to display adverts to both existing and prospective supporters when they visit Facebook or Instagram. We may provide your email address to Facebook so they can determine whether you are a registered Facebook or Instagram account holder with them. Our adverts may then appear when you access Facebook or Instagram. Some of your data is sent in an encrypted format that is deleted by Facebook (a) if it does not match with a Facebook or Instagram account or (b) after they confirm you are a registered account holder.
For more detailed information please see
and Facebook’s data policy at https://en-gb.facebook.com/policy.php.
We may use some of your personal information to participate in Twitter’s Tailored Audience programs, which enable us to display adverts to both existing and prospective supporters when they visit Twitter. We may provide your email address, and mobile phone number to Twitter so they can determine whether you are a registered account holder with them. Our adverts may then appear when you access Twitter. Some of your data is sent in an encrypted format that is deleted by Twitter (a) if it does not match with a Twitter account or (b) after they confirm you are a registered account holder.
For more detailed information please see https://legal.twitter.com/ads-terms/us.html#twitteradsprogramt%26cs and https://legal.twitter.com/ads-terms/us.html#twitterconversiontrackingprogramt%26cs
We may use some of your personal information to participate in Linkedin’s Contact targeting and Website Retargeting programs, which enable us to display adverts to both existing and prospective supporters when they visit Linkedin. We may provide your email address to Linkedin so they can determine whether you are a registered account holder with them. Our adverts may then appear when you access Linkedin. Some of your data is sent in an encrypted format that is deleted by Linkedin (a) if it does not match with a Linkedinaccount or (b) after they confirm you are a registered account holder.
For more detailed information please see https://www.linkedin.com/legal/sas-terms
We may use some of your personal information to analyse our digital performance, for example to see how our website can be improved to help us achieve the purposes set out in section 11 below, to record how you are using our website or to assess the popularity of marketing campaigns.
Communications, fundraising and marketing
Where you have provided us with your physical address, we will contact you by post; and where you have provided appropriate consent, also by telephone and e-mail, with targeted communications to let you know about our work, events, campaigns and other activities that we consider may be of particular interest.
Donations and other payments
We may process data of people under the age of 16 that participate in our programmes. Where we do this information will be encrypted and access to this information limited to those staff requiring it in order to run the programme and provide necessary reporting only to our funders. We will securely store this information for a reasonable period and as required by company, funder or for legal reasons.
We will disclose your information to regulatory and/or government bodies and/or law enforcement agencies upon request only when required to do so in order to satisfy legal obligations which are binding on us.
Security of and access to your personal data
We take the security of your personal information extremely seriously. We’ve implemented appropriate physical, technical and organisational measures to protect the personal information we have under our control, both on and offline, from improper access, use, alteration, destruction and loss.
Your information is only accessible by appropriately trained staff, volunteers and contractors, or contracted agencies and/or suppliers who are processing data on our behalf.
We may also merge or partner with other organisations and in so doing transfer and/or acquire personal data.
Usually we will only transfer or store data within the European Economic Area (“EEA”). Occasionally, we may transfer and/or store personal data collected from you to and/or at a destination outside the EEA (because a service we require is hosted there). Please note that some countries outside of the EEA have a lower standard of protection for personal data, including lower security requirements and fewer rights for individuals. Such personal data may be processed by agencies and/or suppliers operating outside the EEA. If we transfer and/or store your personal data outside the EEA we will take reasonable steps to ensure that the recipient implements appropriate measures to protect your personal data and will use best practice guides and recommended legal agreements to do this.
Where we rely on your consent to use your personal information, you have the right to withdraw that consent at any time. This includes the right to ask us to stop using your personal information for direct marketing purposes or to be unsubscribed from our email list at any time. You also have the following rights:
- Right to be informed
- You have the right to be told how your personal information will be used. This Policy and other policies and statements used on our website and in our communications are intended to provide you with a clear and transparent description of how your personal information may be used.
- Right of access
- You can write to us to ask for confirmation of what information we hold on you and to request a copy of that information. Provided we are satisfied that you are entitled to see the information requested and we have successfully confirmed your identity, we have 30 days to comply.
- Right of erasure
- You can ask us for your personal information to be deleted from our records. In many cases we would propose to suppress further communications with you, rather than delete it so that we have evidence of your request for audit purposes.
- Right of rectification
- If you believe our records of your personal information are inaccurate, you have the right to ask for those records to be updated.
- Right to restrict processing
- You have the right to ask for processing of your personal data to be restricted if there is disagreement about its accuracy or legitimate usage.
- Right to data portability
- To the extent required by the General Data Protection Regulations (“GDPR”) where we are processing your personal information under your consent, because such processing is necessary for the performance of a contract to which you are party, to take steps at your request prior to entering into a contact or by automated means, you may ask us to provide this information to you – or another service provider – in a machine-readable format.
To exercise these rights, please send a description of the personal information in question using the contact details below. We also have specific pages to unsubscribe from our email list which you can find at the bottom of emails you are sent.
Where we consider that the information with which you have provided us does not enable us to identify the personal information in question, we reserve the right to ask for personal identification and/or further information.
Please note that some of these rights only apply in limited circumstances. For more information, we suggest that you consult ICO guidance – https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/ – or please contact us using the details below.
You are further entitled to make a complaint about us or the way we have processed your data to the Information Commissioner’s Office (“ICO”). For further information on how to exercise this right, please see the guidance at https://ico.org.uk/for-the-public/personal-information. The contact details of the ICO can be found here: https://ico.org.uk/global/contact-us/.
We are required to have one or more lawful grounds to process your personal information. Only 4 of these are relevant to us:
- Personal information is processed on the basis of a person’s consent
- Personal information is processed on the basis of a contractual relationship
- Personal information is processed on the basis of legal obligations
- Personal information is processed on the basis of legitimate interests
We will ask for your consent to use your information to contact you by phone, send you electronic or postal communications such as newsletters and marketing emails, for targeted advertising and profiling, and if you ever share sensitive personal information with us. Where our programmes are enhanced by the sharing of information (ie our consortia work) we will ask your consent to share with other partners and stakeholders.
(2) Contractual relationships
By joining as a member you may enter into a contractual relationship with us. The terms and conditions of membership can be found here: https://creativelearningguild.co.uk/terms-and-conditions
Also, if you apply for employment or to volunteer with us, if you book on our events, participate in programmes you may also enter into a contractual relationship with us. Full terms and conditions will be provided to you at the point at which you sign up.
(3) Legal obligations
Sometimes we will be obliged to process your personal information due to legal obligations which are binding on us. We will only ever do so when strictly necessary.
(4) Legitimate interests
Applicable law allows personal information to be collected and used if it is reasonably necessary for our legitimate activities (as long as its use is fair, balanced and does not unduly impact individuals’ rights).
We will rely on this ground to process your personal data when it is not practical or appropriate to ask for consent.
Achieving our purposes
- These include (but are not limited to) promoting any philanthropic or benevolent purpose including without limitation to advancing the education of children and young people by developing programmes and strategies to promote engagement and access arts, design and craft and advancing the education of young people and adults through the provision of accredited and non-accredited vocational and life-skills training.
- Internal and external audit for financial or regulatory compliance purposes
- Statutory reporting
Publicity and income generation
- Conventional direct marketing and other forms of marketing, publicity or advertisement
- Unsolicited commercial or non-commercial messages, including campaigns, newsletters, income generation or charitable fundraising
- Analysis, targeting and segmentation to develop and promote or strategy and improve communication efficiency
- Dissemination of our work through our website, publications, conferences, training events and social media
- Personalisation used to tailor and enhance your experience of our communications
- Employee, contractor and volunteer recording and monitoring for recruitment, safety, performance management or workforce planning purposes
- Provision and administration of staff benefits such as pensions
- Physical security, IT and network security
- Maintenance of suppression files
- Processing for historical, scientific or statistical purpose
Purely administrative purposes
- Responding to enquiries
- Delivery of requested products or information
- Communications designed to administer existing services including administration of programmes and financial transactions
- Thank you communications and receipts
- Maintaining a supporter database and suppression lists
Financial Management and control
- Processing financial transactions and maintaining financial controls
- Prevention of fraud, misuse of services, or money laundering
- Enforcement of legal claims
- Reporting criminal acts and compliance with law enforcement agencies
When we use your personal information, we will consider if it is fair and balanced to do so and if it is within your reasonable expectations. We will balance your rights and our legitimate interests to ensure that we use your personal information legally and fairly.
Membership information is stored and removed in line with the terms and conditions which can be found here: https://creativelearningguild.co.uk/terms-and-conditions
For other types of information, unless still required in connection with the purpose(s) for which it was collected and/or is processed as outlined in our Data Protection / Retention Procedure, we remove your personal information from our records. However, if before that date your personal information is no longer required in connection with such purpose(s), we are no longer lawfully entitled to process it or you validly exercise your right of erasure, we will remove it from our records at the relevant time.
In the event that you ask us to stop sending you direct marketing/fundraising/other electronic communications, we may keep your name on our internal suppression list to ensure that you are not contacted again.
Third party websites
CLG shall be entitled to display advertisement or other contents that contain hyperlinks to third-party websites. Only the provider of the website referred to shall be liable for illegal, erroneous or incomplete contents and particularly for damages that result from use or non-use of these links. We have no influence particularly on the data protection measures and contents of the sites linked to.
You may ask us at any time to update your details, correct or remove information you think is inaccurate or to check the information we hold about you by contacting us via post or email. provides mechanisms for members to update and correct account information via the ‘update my profile’ button after log-in. More details can be found in the terms and conditions: https://creativelearningguild.co.uk/terms-and-conditions
Any data breaches will be reported to the Information Commissioners Office (ICO) within 72 hours. You will also be notified any breach, the nature of this, what has happened, the likely consequences and any action being taken by us. You will also be provided with contact details of the person to refer to for more information.
We are registered with the Information Commissioners Office (ICO). The Managing Director is our Registered Data Controller and Data Processing Officer. Please let us know if you have any queries or concerns whatsoever about the way in which your data is being processed by either emailing us at firstname.lastname@example.org telephone 01422 383 191 or writing to us at Causey Hall, Dispensary Walk, Halifax, HX1 1QR