The Journey of the Secret Artist
Version 1.0
Effective Date: 02/08/2026
Last Updated: 02/08/2026
Privacy Policy

1. Introduction

Welcome to The Journey of the Secret Artist.

Your privacy is important to us, and we are committed to protecting your personal
information in accordance with applicable UK data protection legislation.
This Privacy Policy explains:
• what information we collect;
• why we collect it;
• how we use it;
• how we store it;
• your legal rights.
This policy applies whenever you:
• visit our website;
• create an account;
• book a workshop;
• contact us;
• subscribe to future newsletters;
• interact with us via Facebook or Instagram.
By using our website, you acknowledge that you have read this Privacy Policy.

2. Who We Are

The Journey of the Secret Artist is an independent creative workshop business based in the
Cotswolds.
We provide creative workshops and related services throughout the local area.
For the purposes of UK data protection legislation, The Journey of the Secret Artist is the
Data Controller of your personal information.

If you have any questions regarding this Privacy Policy, please contact us using:
Email:
Admin@thesecrestartistjourney.co.uk
Website:
www.thesecretartistjourney.co.uk

We do not publish a correspondence address online for privacy reasons.

3. What Information We Collect

Depending upon how you interact with us, we may collect:

Personal Details
• Name
• Email address
• Telephone number
Booking Information
• Workshop bookings
• Booking history
• Attendance records

Website Information

When you visit our website we may collect:

• IP address
• Browser type
• Device information
• Pages visited
• Website usage statistics

This information is collected using Wix Analytics.

Customer Account Information

If you create an account, we may store:

• Login details
• Booking history
• Saved preferences
Passwords are encrypted by Wix and are never visible to us.

Payment Information

Payments are processed securely using:
• Wix Payments
• PayPal
We do not store your full payment card details.

Contact Form Information

When you contact us via our website we may collect:
• Name
• Email address
• Telephone number (if provided)
• Message content
Photography Preferences
Where relevant, we may record:
• Photography consent
• Media preferences

This helps ensure your wishes are respected during workshops.

4. Information We Do Not Collect

Our workshops are intended for adults aged 18 and over.
We do not intentionally collect personal information from children.

We do not collect:
• Health information unless voluntarily disclosed for accessibility or safety reasons.
• Financial information beyond what is necessary to process payments.
• Special category personal data unless it is necessary to support your participation and
you choose to provide it.

If special category data is provided (for example, information about allergies or accessibility
requirements), we will only use it for the purpose for which it was provided and handle it
with appropriate care.

5. How We Collect Your Information

We collect information directly from you when you:
• Book a workshop.
• Create a website account.
• Complete a contact form.
• Email us.
• Message us through Facebook or Instagram.
• Complete feedback forms.
• Give photography consent.
• Subscribe to future newsletters.

We also collect limited technical information automatically through our website using Wix
Analytics.

6. Why We Collect Your Information

We use your information to:
• Process bookings.
• Manage your account.
• Respond to enquiries.
• Provide customer support.
• Improve our workshops.
• Manage workshop attendance.
• Communicate important workshop information.
• Meet legal and accounting obligations.
• Protect our business against fraud.

Where you have given your consent, we may also use your email address to send newsletters
or updates about future workshops. You can unsubscribe at any time.

7. Lawful Basis for Processing Your

Information

Under the UK General Data Protection Regulation (UK GDPR), we must have a lawful basis
for collecting and using your personal information.

Depending on how you interact with us, we rely on one or more of the following lawful
bases:

Contract

We process your information where it is necessary to fulfil our contract with you, including:
• Processing workshop bookings.
• Managing your customer account.
• Confirming your booking.
• Contacting you regarding your workshop.
• Providing customer support.

Legal Obligation

We may process your information where required by law, including:
• Accounting records.
• Tax obligations.
• Fraud prevention.
• Compliance with applicable legislation.

Legitimate Interests

We may process your information where we have a legitimate business interest that does not
override your privacy rights.

Examples include:
• Improving our website.
• Improving customer experience.
• Managing workshop attendance.
• Responding to enquiries.
• Maintaining business records.
• Preventing misuse of our services.

Consent

In some situations we rely on your consent.

Examples include:
• Photography consent.
• Future marketing emails.
• Optional newsletters.

You may withdraw your consent at any time.
Withdrawal will not affect processing that occurred before consent was withdrawn.

8. Marketing Communications
At present, The Journey of the Secret Artist does not operate a regular email marketing
programme.

If this changes in the future:

• We will only send marketing communications where you have chosen to receive them
or where permitted by applicable law.
• Every marketing email will contain a simple unsubscribe option.
• You may unsubscribe at any time.

Unsubscribing from marketing emails will not affect essential service emails relating to
bookings you have made.

9. Sharing Your Information

We respect your privacy.
We do not sell your personal information to third parties.
We only share information where necessary to operate our business or where required by law.
This may include trusted service providers who help us run our business.

Wix

Our website, booking system and customer accounts are hosted by Wix.
Information you submit through our website may be processed securely by Wix to provide
these services.

Payment Providers

Payments made through our website are securely processed by:
• Wix Payments
• PayPal

We do not have access to your full payment card details.

Please refer to the privacy notices of these providers for information on how they process
your payment information.

Professional Advisers

Where necessary we may share information with professional advisers such as:
• Accountants
• Solicitors
• Insurers
This will only occur where required for legitimate business purposes or legal compliance.

Legal Requirements

We may disclose information where required by law, including:

• Court orders.
• Law enforcement requests.
• Regulatory authorities.

10. International Data Transfers

Some of the companies we use to operate our business (including website and payment
providers) may process personal information outside the United Kingdom.
Where this occurs, appropriate safeguards are used in accordance with UK data protection
legislation.
These safeguards are designed to ensure your personal information receives an equivalent
level of protection.

11. Cookies

Our website uses cookies to improve your browsing experience.
Cookies are small text files stored on your device.

Cookies help us:
• Remember your preferences.
• Improve website performance.
• Analyse visitor behaviour.
• Maintain website security.

Some cookies are essential for the website to function correctly.
Others help us understand how visitors use our website.

Managing Cookies

Most web browsers allow you to:
• Accept cookies.
• Reject cookies.
• Delete existing cookies.
• Control cookie settings.

Please note that disabling certain cookies may affect the functionality of our website.
A separate Cookie Policy provides further information about the cookies used on our
website.

12. Website Analytics

We currently use Wix Analytics to understand how visitors use our website.

Analytics information may include:
• Pages visited.
• Time spent on pages.
• Device type.
• Browser type.
• General location information.
• Website performance statistics.

This information helps us improve our website and customer experience.

Analytics information is generally collected in an aggregated form and is not used to identify
individual visitors.

13. Social Media

Our website links to our official Facebook and Instagram pages.
If you interact with us through these platforms, your information will also be subject to the
privacy policies of those providers.

We encourage you to review the privacy notices of any social media platforms you use.
Please avoid sending sensitive personal information through social media messaging services.

14. Keeping Your Information Secure

Protecting your information is extremely important to us.
We take reasonable technical and organisational measures to help safeguard the personal
information we hold.

These measures include:
• Secure website hosting.
• Password-protected business accounts.
• Restricted access to personal information.
• Use of trusted third-party service providers.
• Regular review of our business processes.
• Secure disposal of information when it is no longer required.

While we work hard to protect your information, no online system can ever be guaranteed to
be completely secure.

For this reason, we encourage all users to protect their own login credentials and to contact us
immediately if they believe their account has been compromised.

15. How Long We Keep Your Information

We only retain personal information for as long as necessary to fulfil the purposes for which
it was collected or to meet legal and regulatory obligations.

As a general guide:
Information Typical Retention Period

Workshop
bookings Up to 7 years (for accounting and tax purposes where applicable)
Customer enquiries Up to 2 years after the enquiry is resolved.

Customer account information
Until you request deletion or your account is inactive for an
extended period, subject to legal requirements.

Photography
consent records While relevant consent remains valid or until withdrawn.

Marketing
preferences Until you unsubscribe or withdraw consent.
Website analytics In accordance with Wix Analytics retention settings
When information is no longer required, it will be securely deleted or anonymised where
appropriate.

16. Your Rights Under UK GDPR

Under UK data protection law, you have a number of rights regarding your personal
information.

These include the right to:

Access Your Information
You have the right to request a copy of the personal information we hold about you.
Correct Your Information
If any information we hold is inaccurate or incomplete, you may ask us to correct it.
Request Deletion
You may ask us to delete your personal information where there is no lawful reason for us to
continue processing it.
Please note that we may need to retain certain information to comply with legal obligations,
such as accounting and tax requirements.
Restrict Processing
You may request that we temporarily restrict the way we use your information in certain
circumstances.
Object to Processing
You may object to our processing of your information where we rely on legitimate interests
as our lawful basis.
Data Portability
Where applicable, you may request a copy of information you have provided to us in a
structured, commonly used and machine-readable format.
Withdraw Consent

Where we rely on your consent (for example, marketing communications or photography),
you may withdraw that consent at any time.
Withdrawal of consent does not affect processing that took place before consent was
withdrawn.

17. How to Exercise Your Rights

If you would like to exercise any of your rights, please contact us by email.
To help protect your privacy, we may ask you to verify your identity before responding to
your request.

We aim to respond to requests within one calendar month, although this may be extended
where permitted by law if a request is particularly complex.
In most cases, there is no charge for making a request.

However, we reserve the right to charge a reasonable fee or refuse requests that are
manifestly unfounded or excessive, as permitted by UK GDPR.

18. Third-Party Websites

Our website may contain links to third-party websites, including:
• Facebook
• Instagram
• PayPal

These websites operate independently from The Journey of the Secret Artist and have their
own privacy policies.

We are not responsible for the privacy practices, content or security of third-party websites.
We encourage you to review the privacy policies of any external websites you visit.

19. Photography and Media

During workshops, we may occasionally take photographs or short videos to promote The
Journey of the Secret Artist.
We will only use identifiable images of participants where we have obtained the appropriate
consent.

Photography preferences are managed separately through our Photography Consent Form.
Participants may:
• Consent to photographs.
• Decline photographs.
• Withdraw consent for future use at any time.

Where consent is withdrawn, we will stop using new images of you. However, we may not be
able to remove images that have already been published in printed materials or content
created before your request was received.

20. Data Breaches

We take the security of personal information seriously.
If we become aware of a personal data breach that is likely to result in a risk to your rights
and freedoms, we will:

• investigate the incident promptly;
• take appropriate steps to contain and resolve the issue;
• notify the Information Commissioner’s Office (ICO) where required by law; and
• inform affected individuals where legally required.

We continually review our processes to reduce the likelihood of data breaches.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes in legislation;
• changes to our business operations;
• improvements to our services;
• new technologies; or
• changes in our website functionality.

The latest version will always be available on our website.
Where significant changes are made, we will take reasonable steps to notify customers where
appropriate.

22. Complaints

If you have any concerns about how we handle your personal information, we encourage you
to contact us first so that we have the opportunity to resolve your concerns.

Please contact us at:
Email: admin@thesecretartistjourney.co.uk

We are committed to handling all concerns fairly, respectfully and as quickly as possible.
If you remain dissatisfied, you have the right to lodge a complaint with the Information
Commissioner’s Office (ICO), the UK’s independent authority for data protection.
Information about making a complaint can be found on the ICO’s official website.

23. Contact Us

If you have any questions about this Privacy Policy or how we process your personal
information, please contact:
The Journey of the Secret Artist
Founder: Kayleigh Martin
Email: admin@thesecretartistjourney.co.uk
Website: www.thesecretartistjourney.co.uk
Location: The Cotswolds, England

Document Control
Document Title: Privacy Policy
Business: The Journey of the Secret Artist
Version: 1.0
Owner: Kayleigh Martin
Approved By: Founder
Effective Date: 02/08/2026

Review Frequency: Annually or sooner if required by changes in legislation or business
operations
Next Review Date: 02/08/2027

 

Privacy Summary

At The Journey of the Secret Artist, we believe trust is built on openness and respect. We
only collect the information we genuinely need to provide our services, we never sell your
personal information, and we are committed to handling your data responsibly, securely and
in line with UK data protection legislation.

Our aim is to create a welcoming, creative community both in person and online. Protecting
your privacy is an important part of that commitment.