Privacy Policy (UK GDPR)
Effective Date: 1 January 2026 | Last Updated: 30 July 2026
1. Introduction & Data Controller
Watercolour Learning Hub Ltd ("we", "our", "us") is committed to respecting your privacy and safeguarding your personal data. This Privacy Policy sets out how we collect, store, handle, and protect your information when you visit watercolourlearninghub.com or enroll in our art courses.
The Data Controller responsible for your personal data under the Data Protection Act 2018 and UK General Data Protection Regulation (UK GDPR) is:
Watercolour Learning Hub Ltd
Data Protection Officer: Eleanor Vance
42 Royal Crescent, Bath, BA1 2LS, United Kingdom
Email: [email protected] | Telephone: +44 1225 840931
2. Personal Data We Collect
We may collect and process the following categories of personal information:
- Identity & Contact Data: Your name, email address, telephone number, and postal address.
- Financial & Payment Data: Payment card details processed securely via encrypted UK payment gateways (we do not store raw card numbers on our servers).
- Student Learning Data: Course enrollments, video completion progress, artwork photo submissions, and instructor review transcripts.
- Technical Data: IP address, browser type, device information, operating system, and cookie identifiers.
3. Legal Bases for Processing Data
We process your data under the following legal bases recognized by the UK ICO:
- Contract Performance: Processing necessary to fulfill course enrollment and deliver educational services.
- Legal Obligation: Compliance with UK financial reporting, tax (HMRC), and Companies House requirements.
- Consent: Sending email newsletters or non-essential cookies where explicit opt-in has been given.
- Legitimate Interests: Improving website security, analyzing course quality, and preventing fraud.
4. Data Retention & Third Parties
We retain student record data for a maximum of 6 years following contract completion in accordance with UK statutory accounting guidelines. We do not sell or rent your personal data to third parties. We share data only with authorized UK cloud hosting providers, encrypted payment gateways, and shipping partners under strict confidentiality agreements.
5. Your Rights Under UK GDPR
Under UK data protection law, you hold the following rights:
- Right of Subject Access to request a copy of your personal data.
- Right to Rectification of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten") where processing is no longer required.
- Right to Restrict or Object to processing.
- Right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.