Privacy Policy

At Sunny Art Centre, we value and respect your privacy. This policy explains what personal data we collect, how and why we use it, who we share it with, how long we keep it, and the rights you have. We handle your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Last updated: 19 June 2026.

Who we are

Sunny Art Centre is the trading name of Sunny Art Centre Limited, the data controller responsible for your personal data.

  • Data controller: Sunny Art Centre Limited (trading as Sunny Art Centre)
  • Address: Kemble Street, London WC2B 4AW
  • Email: info@sunnyartcentre.co.uk
  • Telephone: 020 8616 5990
  • ICO registration number: ZC015094

How we collect your information

Directly from you — when you subscribe to our newsletter, sign up or book one of our courses, create an account, submit work for the Sunny Art Prize or related events, use our online chat, or contact us through our forms. You provide this information knowingly and, where required, by giving your consent.

Automatically (cookies and analytics) — we use cookies and similar technologies to understand how visitors use our website. This information is statistical and anonymised. You can control or disable cookies through your browser settings and via our cookie banner. See our Cookies Policy for details.

By inference — we may analyse anonymised records of activity to improve our products, services and content. This data is anonymised.

The personal data we collect

Depending on how you interact with us, we may collect: your name, address, email address, telephone number, date of birth, age, the courses or events you book or apply for, your booking and attendance history, marketing preferences, and technical data such as your IP address and how you use our website.

Where a student is under 18, we collect limited details about the student together with a parent or guardian's details and consent.

We do not store full payment card details. Payments are processed securely by our third-party payment providers (see "Sharing your information" below).

How we use your information, and our lawful basis

We use your personal data to:

  • Process bookings, payments and your enrolment on our courses and educational activities — lawful basis: performance of a contract.
  • Communicate with you about your bookings, lessons and any changes to our services, policies or terms — contract / legitimate interests.
  • Verify your identity, age and address where needed for courses or competitions — contract / legal obligation.
  • Process entries and administer competitions such as the Sunny Art Prize — contract / consent.
  • Process job applications and enquiries — legitimate interests.
  • Send you marketing about products, services and events that may interest you — consent.
  • Prevent fraud and protect the security of our customers and services — legitimate interests / legal obligation.
  • Meet our legal, accounting and safeguarding obligations — legal obligation.

Marketing

We will only contact you for marketing or promotional purposes where you have given us your consent. You can change your preferences or unsubscribe at any time by emailing info@sunnyartcentre.co.uk or using the unsubscribe link in our emails. We do not sell your personal data, and we do not share it with third parties for their own marketing.

Sharing your information

We share personal data only where necessary, with:

  • Payment providers — Stripe, PayPal and WooCommerce (our website checkout) process payment transactions securely. We recommend reviewing their own privacy policies to understand how they handle your data.
  • Analytics and website tools — for example Google Analytics and similar services, which provide anonymised, statistical insight into website use.
  • Service providers acting on our behalf (such as IT and booking systems) under written agreements that require them to protect your data.
  • Authorities or regulators where we are required to do so by law, or to prevent fraud or protect the safety of our customers and services.

These providers act as our processors or, where applicable, as independent controllers in respect of their own services.

International transfers

We store and process your personal data within the UK and, where relevant, the European Economic Area (EEA). If we ever need to transfer personal data outside the UK (for example, for a touring exhibition connected to the Sunny Art Prize), we will ensure an appropriate safeguard recognised under UK data protection law is in place.

How long we keep your information

We keep your personal data only for as long as necessary for the purposes set out above, including to meet our legal, accounting, tax and safeguarding obligations. Booking and account records are generally retained for the duration of your relationship with us and for a reasonable period afterwards; marketing data is kept until you withdraw consent. When data is no longer needed, it is securely deleted.

Security

We take the security of your data seriously. Information transmitted through our website is encrypted using TLS/SSL technology, and access to personal data is restricted to authorised staff. Account areas are protected by passwords that only you control — please choose a secure password and keep it private. No transmission over the internet can be guaranteed completely secure, so any non-sensitive information you provide is given at your own risk.

Children and young people

If you are 16 or under, we require the consent of a parent or guardian to handle your data. Where a student under 18 enrols on a course, an adult must complete the enrolment and create the account on their behalf. Staff and tutors working with children and young people hold Enhanced DBS checks and follow our safeguarding procedures.

Your rights

Under UK data protection law you have the right to:

  • be informed about how we use your data;
  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased (in certain circumstances);
  • restrict or object to our processing of your data;
  • data portability; and
  • withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, contact us at info@sunnyartcentre.co.uk. We will respond within one month.

Complaints

If you are unhappy with how we have handled your data, please contact us first at info@sunnyartcentre.co.uk so we can try to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.