Last updated: May 2026

Who We Are

Creative Oasis with Artist Gunja is a programme run by Gunja Bhatt, trading as Artist Gunja, based in Reading, UK. We offer after school art clubs and creative workshops for children and adults in Reading.

Data Controller: Gunja Bhatt (trading as Artist Gunja)

Website:www.creativeoasis.uk

Email:artist.gunja@gmail.com

Phone: +44 07467 131164

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what your rights are under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What Data We Collect

When you make a booking or contact us, we may collect the following information:

About you (the parent, guardian, or adult participant):

- Full name

- Email address

- Phone number

About the participant (if a child):

- Full name

- Age

- School name, school year, and class name (After School Clubs only)

- Any relevant medical conditions, allergies, or additional needs

- Emergency contact name and phone number

Payment information:

- Payments are processed through Squarespace Payments. We do not see or store your full card details. Squarespace handles payment processing and is subject to its own privacy policy.

Photography and media:

- If you have consented (or not opted out), photographs or short video clips taken during sessions for marketing use.

Communications:

- Any messages, emails, or enquiries you send to us.

Why We Collect It — Our Lawful Basis

We only collect data we genuinely need. Here is why we hold each type and the lawful basis under UK GDPR:

| Data | Purpose | Lawful Basis |

| Contact details | Managing your booking, sending confirmations and updates | Performance of a contract |

| Participant name and age | Ensuring sessions are appropriate and safe | Performance of a contract |

| Medical conditions, allergies, additional needs | Safeguarding the health and safety of the participant during sessions | Vital interests / Legal obligation |

| Emergency contact details | Contacting a responsible adult in an emergency | Vital interests |

| Payment data | Processing your booking fee | Performance of a contract |

| Photographs / video | Marketing and promotion of our classes | Consent (you may opt out — see Section 5 of our Terms & Conditions) |

| Newsletter signup (email address) | Sending updates about upcoming workshops and clubs | Consent |

We do not use your data for automated decision-making or profiling.

How We Store Your Data

Your data is stored securely within the Squarespace platform, which hosts our website and booking system. Squarespace is a third-party provider that stores data on servers based in the United States, operating under appropriate data protection safeguards (Standard Contractual Clauses).

We take reasonable steps to keep your data secure and limit access to it to only what is necessary.

How Long We Keep Your Data

We retain your personal data only for as long as necessary:

- Booking and participant records — retained for the duration of the programme plus up to 2 years for accounting and administrative purposes.

- Health and medical information — deleted at the end of the programme unless there is a specific legal or safeguarding reason to retain it.

- Marketing consent records — retained until you withdraw consent or request deletion.

- Enquiry messages — retained for up to 12 months.

When data is no longer needed, we will delete or securely dispose of it.

Who We Share Your Data With

We do not sell or share your personal data with third parties for marketing purposes.

We may share data in the following limited circumstances:

- Squarespace — our website, booking, and email campaigns platform. Squarespace processes payment, booking, and newsletter subscriber data on our behalf as a data processor. Their privacy policy is available at squarespace.com/privacy.

- Legal authorities — if required by law, a court order, or a safeguarding obligation (for example, referral to a local authority under our safeguarding policy).

- Venue partners — on a need-to-know basis only (for example, a school may need to know which children are attending an after school club for sign-in purposes). We share only the minimum information necessary.

We do not share data with any other third parties without your explicit consent.

Cookies

Our website is built on Squarespace, which uses cookies to operate the site and booking system. Cookies are small text files stored on your device when you visit a website.

Squarespace sets cookies for the following purposes:

- Strictly necessary cookies — required for the site and booking system to function (for example, keeping your session active during checkout). These cannot be disabled.

- Functional cookies — remember your preferences and improve your experience on the site.

- Analytics cookies — Squarespace may collect anonymised data about how visitors use the site. We do not currently use Google Analytics or any additional third-party analytics tools.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of the booking system.

For full details of the cookies Squarespace sets, see Squarespace's Cookie Policy at squarespace.com/privacy

Email Marketing and Newsletter

If you choose to sign up to our mailing list, we will use your email address to send you updates about upcoming workshops, new club dates, and news from Creative Oasis.

How we collect consent: Sign-up is always opt-in — either through a signup form on our website or at the point of booking where you actively choose to receive marketing emails. We do not add you to our mailing list without your explicit consent.

How we send emails: We use Squarespace Email Campaigns to manage and send our newsletter. Your email address is stored within Squarespace and processed in accordance with Squarespace's privacy policy at squarespace.com/privacy.

Unsubscribing: Every marketing email includes an unsubscribe link. You can opt out at any time. Once you unsubscribe, we will not send you further marketing emails. Your booking and participant data may still be retained as described above.

We do not use your email address for any purpose other than sending you the communications you have consented to receive.

Children's Privacy

We take children's privacy seriously. We collect information about child participants only for the direct purpose of running safe, appropriate sessions. This information is provided by a parent or guardian at the time of booking and is not used for any other purpose.

We do not knowingly collect personal data directly from children under the age of 13.

If you believe we hold data about a child that should be reviewed or deleted, please contact us at artist.gunja@gmail.com

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

- Right of access — you can request a copy of the personal data we hold about you.

- Right to rectification — you can ask us to correct inaccurate or incomplete data.

- Right to erasure — you can ask us to delete your data in certain circumstances (for example, where it is no longer needed for the purpose it was collected).

- Right to restriction — you can ask us to limit how we use your data while a dispute is being resolved.

- Right to object — you can object to us processing your data where we rely on legitimate interests as our lawful basis.

- Right to data portability — where we process your data by automated means and on the basis of a contract or consent, you can ask for a copy in a portable format.

- Right to withdraw consent — where processing is based on consent (for example, photography), you can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at: artist.gunja@gmail.com

We will respond within one calendar month. We may need to verify your identity before processing your request.

Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's data protection authority:

Information Commissioner's Office (ICO)

Website: ico.org.uk

Helpline: 0303 123 1113

We would always prefer to resolve any concerns directly with you first, so please contact us before raising a complaint with the ICO.

Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available at www.creativeoasis.uk/privacy-policy. If we make significant changes, we will notify registered customers by email where possible.