Website: www.creativejourneys.org.uk Last updated: 26/08/2026
Creative Journeys (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal data we collect when you visit our website, subscribe to our newsletter, or buy products/services from us, and how we use, store, and protect it.
We are the “data controller” for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: Emma Capper Address:42 Fair Field , South Brent, TQ10 9HR Email: emma@creativejourneys.org.uk
1. What Personal Data We Collect
Depending on how you interact with us, we may collect:
Newsletter subscribers
- Name (if provided)
- Email address
- Subscription date and preferences
- Engagement data (e.g. opens/clicks), if your newsletter plugin/service provides this
Customers (products/services)
- Name
- Billing and delivery address
- Email address and phone number
- Order history and details of what you purchased
- Payment confirmation details (we do not store full card numbers — see Section 4)
General website visitors
- Contact form submissions (name, email, message content)
- Basic technical data such as IP address, browser type, and pages visited, collected automatically by our hosting provider for security and site performance
- Cookie data (see Section 6)
We do not knowingly collect any special category data (e.g. health, religion, ethnicity) unless you voluntarily provide it to us, for example in a message.
2. How We Collect Your Data
- Directly from you, when you sign up to our newsletter, place an order, create an account, or contact us through the website.
- Automatically, through cookies and similar technologies used by our website and hosting/e-commerce platform.
- From third parties who help us run the site, such as our payment processor confirming a successful transaction.
3. Why We Use Your Data and Our Legal Basis
| Purpose | Legal Basis |
| Sending you the newsletter you signed up for | Consent |
| Processing and fulfilling your orders | Performance of a contract |
| Responding to enquiries via our contact form | Legitimate interest / consent |
| Maintaining accounts and order records | Performance of a contract / legal obligation (accounting) |
| Keeping our website secure and functioning | Legitimate interest |
| Complying with tax, accounting, and consumer law | Legal obligation |
You can withdraw consent at any time (for example, by unsubscribing from the newsletter) without affecting the lawfulness of processing carried out before you withdrew it.
4. Sharing Your Data
We do not sell your personal data. We share data only with trusted third parties who help us operate the website and fulfil orders, including:
- Website hosting provider — Inspomedia, to store and serve our website
- Newsletter plugin/service — WordPress Newsletter, to manage subscriptions and send emails
- Payment processor — Stripe and WooCommerce Payments, to process transactions securely — we do not see or store your full card details
- Delivery/courier provider —Royal Mail , to deliver physical products
- Print-on-demand and dropshipping fulfilment — theprintspace — when you order a print or framed artwork, we pass your name, delivery address, and order details to theprintspace, who print, package, and ship the order directly to you on our behalf. They do not use your data for their own marketing purposes.
- Professional advisers — such as our accountant, where necessary for legal or financial purposes
These providers are only permitted to use your data to perform the services we’ve asked for, in line with our instructions and applicable data protection law.
If any of these providers are based outside the UK/EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) before any transfer takes place. theprintspace operates production centres in the UK, USA, and Germany and routes orders to whichever centre is closest to your delivery address — so if you’re in the UK, your order is very likely fulfilled from their UK site, but we can’t guarantee that in every case. Where an order is routed via their USA facility, your name and address are transferred outside the UK, and theprintspace is responsible for ensuring appropriate safeguards are in place for that transfer.
5. Data Retention
We keep personal data only as long as necessary for the purposes it was collected:
- Newsletter data: until you unsubscribe or ask us to delete it
- Order and customer data: typically 6 years, to meet UK tax and accounting obligations
- Contact form enquiries: up to 12 months, unless a longer period is needed to resolve the matter
After these periods, we securely delete or anonymise your data.
6. Cookies
Our website may use essential cookies needed for core functionality, such as:
- Keeping items in your shopping basket
- Remembering login/session details if you have an account
- Basic security functions
We do not currently use analytics or advertising cookies (e.g. Google Analytics). If this changes in future, we will update this policy and add a cookie consent banner allowing you to accept or decline non-essential cookies, as required by UK law.
You can control or delete cookies through your browser settings at any time; note that blocking essential cookies may affect how parts of the site (such as checkout) work.
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erasure — ask us to delete your data (“right to be forgotten”), subject to legal retention requirements
- Restrict processing in certain circumstances
- Object to processing based on legitimate interests
- Data portability — receive your data in a portable format
- Withdraw consent at any time, e.g. by unsubscribing from the newsletter
To exercise any of these rights, contact us at emma@creativejourneys.org.uk. We will respond within one month, as required by law.
If you’re unhappy with how we’ve handled your data, you have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk, telephone 0303 123 1113.
8. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including secure hosting, restricted access to personal data, and use of reputable third-party processors for payments and email.
No online system is 100% secure, but we work to keep your data as safe as possible and will notify you and, where required, the ICO of any data breach affecting your personal data, in line with our legal obligations.
9. Children’s Privacy
Our website and newsletter are not directed at children, and we do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.
10. Changes to This Policy
We may update this policy from time to time, for example if we start using new tools or services. The “Last updated” date at the top will reflect the most recent version. We encourage you to review this page periodically.
11. Contact me
If you have any questions about this policy or how I handle your data, please contact:
Emma Capper, Email: emma@creativejourneys.org.uk
Address: 42 Fair Field, South Brent, Devon, TQ10 9HR, UK