Data Protection Policy
At Creative Briefs, we take privacy seriously. This policy explains how we collect, store, and protect personal data for children completing Arts Award with us, in compliance with the UK GDPR and the Data Protection Act 2018.
1. What Information We Collect
We may collect the following:
Parents/Guardians: Names and email addresses.
Children: Names, dates of birth, and details required for Arts Award qualifications and submissions to Trinity College.
NOTE: Parent or child personal email addresses are only required for children completing Explore, Bronze, Silver and Gold Arts Award. This is so that digital certificates can be sent to children who pass the qualification. Discover Arts Award certificates are not digital, so if you are being entered at this level you will also need to supply a postal address so that we can post a printed copy of your certificate to you. If you prefer not send us your address then Discover Arts Award certificates can be arranged to be collected in person from our office in Hull.
2. Why We Collect This Information
We collect personal data so that we can:
Register children for Arts Award qualifications.
Submit necessary information to Trinity College for Arts Award processing.
3. How We Store and Protect Data
All data given to us is stored securely on our business Dropbox account, which offers:
Encrypted storage: Dropbox uses advanced encryption to keep data secure.
Access control: Only authorised Creative Briefs staff can access the account.
Automatic backups: Ensures data is not lost and is recoverable if needed.
Two-factor authentication (2FA): Adds an extra layer of protection to prevent unauthorised access.
These measures ensure your personal data is handled safely and securely.
4. How Long We Keep Data
We only keep personal data for as long as necessary:
Children’s information: Stored for up to one year after their Arts Award qualifications are completed.
Parents’ contact details: Removed once their involvement with Creative Briefs ends unless they opt to stay on our mailing list.
5. Rights
Anyone whose details we have, has the right to:
Access the information we hold about parents or children
Request corrections to inaccurate or outdated information.
Ask us to delete data when it is no longer needed.
Withdraw consent for us to use the data at any time.
6. Data Breaches
In the unlikely event of a data breach, we will:
Notify the Information Commissioner’s Office (ICO) within 72 hours if required.
Inform affected individuals and take action to resolve the issue.
7. Contact Us
If you have questions about how we handle data, please contact us