Privacy Notice

1. Who we are

Daniela Draganova, also known professionally as Daniela Drag, trading as Daniela’s Star Art Classes (“we”, “us” or “our”), provides art classes and workshops for adults, children and teenagers in Milton Keynes. For UK data protection law, Daniela Drag is the data controller responsible for the personal information described in this notice.

Privacy contact: danielastarart@gmail.com

2. What personal information we collect. Depending on how you contact us or use our services, we may collect:

your name, email address, telephone number and postal address;

  • enquiry details and correspondence sent through the website, email, telephone or social media;

  • booking, class, attendance and payment information;

  • for children’s classes, the child’s name, age or age group and the parent’s or guardian’s contact details;

  • where relevant and voluntarily provided, information about accessibility, allergies, medical needs or emergency contacts that is reasonably necessary to run a class safely;

  • consent choices relating to photographs, videos or the display of artwork;

  • technical information about visits to the website, such as IP address, browser and device information,pages visited and cookie choices.

We ask you not to send information that is not relevant to an enquiry or booking.

3. How we collect information

We collect personal information when you:

  • complete a website contact form or contact us by email, telephone or social media;

  • enquire about, book or attend a class or workshop;

  • make a payment;

  • give consent for marketing, photographs, videos or artwork publication; or

  • visit the website, where limited information may be collected through cookies and similar technologies.

4. Why we use your information and our lawful bases

We use personal information only where we have a valid reason under UK data protection law. The main purposes and lawful bases are:

  • Enquiries, bookings and class administration

We use contact, booking and attendance information to respond to enquiries, reserve places, provide classes, communicate changes and manage payments. Our lawful basis is taking steps at your request before entering into a contract and performing our contract with you. We may also rely on our legitimate interests in operating and administering the business.

Safety and individual needs

Where you provide information about accessibility, allergies, health needs or emergency contacts, we use it only to support safe participation and make reasonable arrangements. Where this includes health information, we will normally rely on your explicit consent and, in an emergency, vital interests. Please provide only information that is genuinely necessary.

Financial, tax and legal records

We keep appropriate invoices, payment records and business correspondence to meet legal, accounting and tax obligations and to establish, exercise or defend legal claims. Our lawful bases are legal obligation and legitimate interests.

Photographs, videos and student artwork

We may display photographs, videos or artwork on our website or social-media pages only where we have an appropriate lawful basis and permission. For identifiable children, we seek permission from a parent or guardian. Consent can be withdrawn for future use by contacting us, although this does not affect use that was lawful before withdrawal.

Marketing

We will send optional newsletters or promotional messages only where permitted by law, normally with consent. You can unsubscribe at any time by using the unsubscribe option in the message or contacting us. Messages needed to administer a booking or class are not marketing.

Website operation, security and analytics

We use necessary technical information to operate and secure the website. We may use analytics to understand how visitors use the site and improve it. Necessary processing is based on our legitimate interests in maintaining a safe and effective website. Non-essential cookies or similar tracking are used only in accordance with your cookie choices and, where required, your consent.

5. Children’s information

Bookings and enquiries for children’s classes should be made by a parent or guardian. We do not knowingly ask children to submit personal information through the website themselves. We take particular care with children’s information, collect only what is reasonably necessary and do not use it for unrelated marketing.

6. Who we share information with

We do not sell personal information. We may share limited information where necessary with:

  • Squarespace, which hosts the website and may process website and contact-form data on our behalf;

  • email, cloud-storage, booking, accounting and payment service providers that we use to run the business;

  • professional advisers such as accountants, insurers or legal advisers;

  • Westbury Arts Centre or another venue where necessary for practical or safety arrangements, but only to the extent required;

  • public authorities, regulators, emergency services or law-enforcement bodies where required by law or necessary to protect someone’s safety or legal rights.

Service providers are expected to protect personal information and use it only for the services they provide to us.

7. International transfers

Some service providers, including Squarespace and certain technology providers, may process information outside the United Kingdom. Where this happens, we rely on recognised adequacy arrangements or appropriate contractual and organisational safeguards intended to protect the information in accordance with UK data protection law.

8. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, safety and dispute-resolution requirements. Our usual approach is:

  • enquiries that do not lead to a booking: normally up to 12 months after the last meaningful contact;

  • booking, payment and core business records: normally up to six years where required for tax, accounting or legal purposes;

  • attendance, accessibility, emergency and similar class information: normally for the duration of the relevant course and a short period afterwards, unless an incident, legal requirement or claim means it must be kept longer;

  • marketing contact details: until you unsubscribe, withdraw consent or the information is no longer useful;

  • photograph, video and artwork permissions: while the relevant material remains in use, subject to any withdrawal request and legal considerations.

We securely delete or anonymise information when it is no longer needed.

9. How we protect information

We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure. Access is limited to people and service providers who reasonably need the information. No internet or email system is completely secure, so we cannot guarantee absolute security.

10. Cookies and website analytics

The website is hosted by Squarespace. Squarespace uses essential cookies that are necessary for the site to function and may offer analytics and performance cookies. Where required, non-essential cookies are restricted unless you choose to accept them through the cookie banner. You can change your choices through the website’s cookie controls and can also manage cookies in your browser settings.

Links to external websites and social-media platforms are governed by those organisations’ own privacy and cookie practices once you leave our website.

11. Your data protection rights

Depending on the circumstances, you may have the right to:

  • ask for a copy of the personal information we hold about you;

  • ask us to correct inaccurate or incomplete information;

  • ask us to delete information;

  • ask us to restrict how information is used;

  • object to certain uses, including direct marketing and some uses based on legitimate interests;

  • receive certain information in a portable format; and

  • withdraw consent at any time where we rely on consent.

These rights are not absolute and may not apply in every situation. To exercise a right, contact danielastarart@gmail.com. We may need to verify your identity before responding.

12. Complaints

Please contact us first if you have a concern about how we use your information, and we will try to resolve it. You also have the right to lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority for data protection. Information about making a complaint is available on the ICO website.

13. Changes to this notice

We may update this notice when our services, suppliers or legal obligations change. The latest version will be published on this website with an updated date.

Last updated July 2026