This Privacy & Cookies Policy explains how personal data is collected, used, and protected by us.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Data Controller is Golden Canvas Ltd, a company registered in England and Wales under Company Registration Number: 17215224, with its registered office address at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Email: info@goldencanvas.co.uk
We are registered with the Information Commissioner’s Office (ICO) under registration number: ZC237064.
We collect standard business, contact, and event details necessary to process your initial enquiry, check availability, provide quotes, and facilitate the planning and running of our services.
The data we collect via our website's contact form includes:
Data we may collect by any other means (e.g. email, phone, or booking platforms) (includes the data listed above):
Under the UK GDPR, we rely on the following legal grounds to process your information:
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or statutory reporting requirements.
For administrative, operational, and UK tax consistency, standard enquiry and transaction records are retained for up to 7 years following our last active interaction or event date, after which they are securely destroyed or permanently anonymised.
We do not sell, rent or trade your personal data with third parties for marketing purposes.
To run our business, process payments, and market our events, we use established third-party services that act as data processors once an enquiry or booking is made. These include ticketing and booking platforms, secure payment gateways (such as Stripe, PayPal, or direct bank transfers), and mainstream social media channels (for sharing promotional event photography and volunteered testimonials).
Some of these global platforms are based outside the UK (such as in the US) and process data internationally under their own corporate privacy frameworks and legal compliance protocols. By interacting with our services or attending our events, you acknowledge that your data may be processed via these third-party platforms in line with their respective privacy policies.
We frequently take photographs and short videos during our sessions to capture the creativity and enjoyment of our services. These assets are processed under our legitimate interest to promote our business and may be featured on our website, marketing materials, and on social media.
Your Right to Opt-Out: Your personal comfort and privacy are highly important to us.
Our website is a basic HTML site. We do not deploy any tracking, analytical, or advertising cookies on our website. We do not monitor your personal browsing habits across the web, nor do we pass any user data to external advertising networks. If you click a link on our website that redirects you to an external third-party booking or ticketing platform to buy a ticket, that external platform will govern its own cookie practices. We highly recommend reviewing their cookie policy when completing your transaction.
Under UK data protection laws, you hold specific rights regarding your data which you can exercise at any time:
To exercise any of these rights, please email us directly at the address listed in Section 1. If you remain unsatisfied with how we handle your data, you have the right to lodge a formal complaint with the Information Commissioner's Office (ICO) (www.ico.org.uk).