Privacy & Cookie Policy

Imperfect Art Ltd (company number 16722560), trading as Imperfect Art, with studios at Studio 2B, 5 Torrens Street, London EC1V 1NQ (Angel) and Unit D2.1, Yellow Stairs, Bussey Building, 133 Copeland Road, London SE15 3SN (Peckham).

We're the data controller for the personal data described on this page. A formal Data Protection Officer isn't required for a business of our size, if you have any question about how we handle your data, contact Linda Savinova, Founder, at admin@imperfectart.co.uk.

Name, email address and phone number, so we can confirm your booking, contact you about it, and reach you if something changes at short notice. Processed under our contractual necessity to provide the session you've booked.

If you let us know about an allergy or additional need (for example, ahead of a half-term camp booking), we hold that only to keep you or your child safe during the session, and only for as long as needed for that visit. This can be sensitive information, so we only ever collect what you volunteer, we don't ask unless you're booking something (like the camp) where it matters.

Name, email, phone number, and whatever details you share about your event or question, used to reply to you and, if it goes ahead, deliver the event. Processed under contractual necessity (once you book) or our legitimate interest in responding to enquiries beforehand.

Payments are handled entirely by Stripe. We never see or store your card details, we only receive confirmation that a payment succeeded and a reference number.

Only if you tick the sign-up box or subscribe separately. Based on your consent, which you can withdraw at any time using the unsubscribe link in any email we send.

See the Cookies section below.

We use a small number of specialist companies to run the site and business. Each one only receives the data it needs to do its job, and each is bound by a data processing agreement:

Supabase, our database, hosted in the eu-west-2 (London) region, so your booking data stays in the UK.
Brevo, our email provider, for booking confirmations, reminders, and (if you've opted in) marketing emails. Brevo is an EU (French) company.
Stripe, for payment processing.
Netlify, who host this website.
Meta (Facebook/Instagram), only if you accept advertising cookies in the cookie banner, see below.
Google (Analytics), again only if you accept, so we can see which pages people find useful.

We don't sell your data, to anyone, ever.

Your booking data itself is stored in the UK (Supabase, London). Some of our processors (Netlify, Stripe, and Meta and Google if you consent to their cookies) are US-based companies; where data leaves the UK, it's covered by Standard Contractual Clauses or an equivalent safeguard as part of our agreement with them.

We keep this simple: essential cookies run automatically because the site needs them, everything else asks first.

Essential (always on): a session flag that remembers you closed the announcement banner, and a note of whether you've dismissed or subscribed to the newsletter popup. These don't identify you and aren't used for tracking.

Optional (only after you accept): Google Analytics, which counts page views so we can see which pages are useful (we strip booking references out of the addresses it records), and the Meta (Facebook) Pixel, which helps us understand which visits come from our social ads. Neither loads until you click "Accept all" in the cookie banner. If you click "Reject" or never decide, they never load.

You can change your mind at any time by clearing your browser's site data for imperfectart.co.uk, which resets the banner.

We keep booking records for as long as needed for accounting and tax purposes (HMRC generally expects 6 years), and enquiry/contact data for 12 months after your last contact with us unless you book, in which case booking retention applies. Both of these are enforced automatically, not just promised: a scheduled job clears enquiry and contact records after 12 months. Allergy and accessibility notes are automatically deleted 30 days after your visit.

Under UK GDPR, you have the right to ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. To use any of these, email admin@imperfectart.co.uk, we'll respond within one month.

If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to put things right first.

For camps and sessions aimed at children, a parent or guardian books and provides the child's information: their name, age, any allergies or additional needs, plus an emergency contact and the names of the people allowed to collect them. We only use it to run that activity safely, and only for as long as needed for that purpose: these details are deleted automatically 30 days after the camp ends.

If we make material changes to how we handle your data, we'll update this page and change the "last updated" date at the top. For anything that affects consent you've already given (like marketing), we'll ask again.