Privacy notice

Creative Education Learning (learn.creativeeducation.co.uk) is run by Creative Education Limited, registered in England and Wales, company number 04662664. Our registered office is 49 Station Road, Polegate, East Sussex, BN26 6EA.

We are registered with the Information Commissioner's Office as a data controller, number Z2363705.

For anything about your data, contact our data protection lead, Tom Hesmondhalgh: happytohelp@creativeeducation.co.uk, 07590 446792, or by post to Creative Education Limited, 49 Station Road, Polegate, East Sussex, BN26 6EA.

• Creative Education is responsible for your account, for personal and parent memberships, and for your learning record, which stays with you when you move school.
• Your school, trust or other organisation is responsible for the training it asks you to do: what it assigned to you and whether you did it. We keep those records for it, on its instructions.

Your organisation sees your training while you are on its staff. It does not see what you did somewhere else, except where a course you finished elsewhere meets one of its requirements. Then it sees the course and the date.

• Your name and email address, and how you sign in.
• Your job role and job title, if you give them.
• The organisations you belong to, and any role you hold at them.
• Your learning: courses started and finished, how much of each video you watched, your answers, your certificates, and training you add yourself.
• What you write after a course: your reflections, what you plan to do differently, and any comments.
• Courses you save, your notification settings, and which emails from us you have switched off.
• Your memberships, single courses and payment records. Stripe holds your card details, not us.
• If you start a school trial: the school, your job, and a phone number if you give one.
• A record of the emails we send you, and which links in them you click.
• When you signed in, and on what browser and kind of device, such as “Chrome on Windows”.
• Technical details: IP addresses in hosting logs, and error reports without personal details.

Reflections are free text. Please don't include pupils' names. Creative Education staff don't read reflections, except to answer a request from the person who wrote them.

Parents have accounts of their own. We don't ask for children's names or dates of birth. The age filter is a range you choose, and it isn't stored against your child.

• To give you a membership, a single course or a free account you signed up for: contract.
• To give you the account and courses your organisation arranged, and keep your learning record: our legitimate interests. Your organisation decides its own lawful basis for asking you to train. For state schools and academies it is usually public task or legal obligation.
• To keep your organisation's training records as safeguarding evidence, under Keeping Children Safe in Education: on your organisation's behalf, on its lawful basis.
• To take payments and keep invoices: contract, and legal obligation.
• To keep the platform secure and working, including limiting repeated tries and fixing errors: legitimate interests.
• To email you about new courses, events and offers:
  • at a work address: legitimate interests;
  • if you are a paying member or on a trial: because you bought or tried similar courses from us (the “soft opt-in” in the Privacy and Electronic Communications Regulations);
  • if you have a free account: only with your consent.
  You can say no at any time in Account, or with the unsubscribe link in every one. At most 4 in any 30 days.
• To load the help chat, and to count how people find our public pages and whether they sign up, start a trial or buy, only after you accept cookies: consent.

We don't use your data to train AI.

• Administrators at your organisation, as described above.
• Creative Education staff, to answer support requests. When a member of staff looks at the platform as you, nothing can be changed, and it is recorded in the activity log your organisation can read.
• Anyone you send a link to your record, until you turn it off.
• Anyone with a certificate's link or code, who sees your name, the course and the dates.
• The companies below, who process data for us.

Where data goes to a company in the US, the transfer is covered by the UK Extension to the EU–US Data Privacy Framework or the UK Addendum to standard contractual clauses.

When you delete your account

• Your name, email address, sign-in, job title and role, reflections, comments, notes, added training and saved courses are removed.
• Your completions and answers stay, tied to “a deleted person”, so course results and a school's totals don't change. A certificate check says the certificate is valid, without a name.
• Each organisation you belonged to in the last six years keeps your name, the course and the date, as safeguarding evidence, for six years after your account is deleted.
• Payments and invoices stay for six years.
• We send one email to confirm the deletion and say what was kept.

• Sign-in cookies from Clerk, which keep you signed in. The site doesn't work without them.
• Your answer to our cookie question, kept for a year. It counts on creativeeducation.co.uk too, so you are asked once.
• The email address you give when starting a school trial, kept for 30 minutes.
• If you close an announcement without signing in, which ones you closed, kept for 90 days.
• Google Analytics cookies, only after you accept them, kept for up to 2 years. Google Analytics runs on our public pages only, never inside your account.
• HubSpot's cookies, for the help chat and to see which pages you open, only after you accept them.

The same answer covers our main website, creativeeducation.co.uk. There, a yes also allows Microsoft Clarity, which shows us how people use that website, with anything you type hidden. Clarity never runs on this site. Our main website's cookie page says more.

Rejecting is as easy as accepting, and you can change your answer here, or on your Account page.

You have the right to:

• get a copy of your data. Use Download my data on your Account page, or ask us
• have wrong data corrected
• have your data deleted. Use Delete my account on your Account page, or ask us
• object to how we use your data, or ask us to restrict it
• take your data to another provider
• withdraw your consent at any time, where we rely on it

We reply within one month. For training your organisation asked you to do, we may pass your request to it, because it is responsible for those records.

Complaints

Contact us first at happytohelp@creativeeducation.co.uk. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

When this notice changes, the date at the top changes. Our accessibility statement is on its own page.