Creative Education Trust

Privacy Policy

Effective Date: June 2025

This privacy notice explains how we collect, use, and protect your personal data when you make a booking to use school facilities via https://lettings.creativeeducationtrust.org.uk.

1. Who We Are

This service is provided by Creative Education Trust in partnership with BookingsPlus to facilitate the hire and use of school facilities.

We act as a Data Controller for the personal data you provide when making a booking.

For data protection matters, you can contact us at: [email protected]

2. What Data We Collect

When you make a booking, we may collect:

  • Full name
  • Contact details (email, phone number, address)
  • Payment details (processed securely through third-party providers)
  • Booking details (time, date, facility requested)
  • Company or organization name (if applicable)
  • Special requirements or accessibility needs

3. How We Use Your Data

Your data is used to:

  • Process and manage your booking
  • Communicate with you about your booking
  • Provide access to school facilities
  • Comply with legal or safeguarding requirements
  • Monitor usage and improve services

We do not sell or rent your personal data to third parties.

4. Legal Basis for Processing

We process your personal data under the following lawful bases:

  • Contractual necessity: To fulfil your booking request.
  • Legal obligation: To comply with health, safety, and safeguarding laws.
  • Legitimate interests: For internal reporting, service improvement, and communications related to your booking.

5. How We Share Your Data

We may share your data with:

  • The school where the booking is made
  • SchoolBookings.co.uk (as a data processor)
  • Payment processors (for secure payment transactions)
  • Public authorities where required by law

All parties are required to comply with data protection laws and keep your data secure.

6. Data Security

We take reasonable technical and organizational measures to safeguard your data, including encryption, secure storage, and restricted access protocols.

7. Data Retention

Your personal data is retained for as long as necessary to:

  • Fulfill your booking
  • Comply with legal obligations
  • Resolve disputes and enforce agreements

Typically, this means we retain booking records for up to 6 years.

8. Your Data Protection Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (in certain circumstances)
  • Object to or restrict processing
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

9. Contact Us

If you have any questions about this privacy notice or how your data is handled, please contact:

Data Protection Officer: [email protected]

This notice may be updated periodically. Please check back regularly for the latest version.