Privacy policy.
Privacy Policy – Girls Craft Club (GCC)
Last updated: 28/09/2025
At Girls Craft Club, we believe creativity should feel safe, welcoming, and fun. That includes protecting your personal information. This policy explains what data we collect, how we use it, and the rights you have under UK data protection law (UK GDPR and the Data Protection Act 2018).
Our Privacy Promise in a Nutshell
At Girls Craft Club, we believe your information deserves the same care as your crafts. We only collect the details we need to keep your membership running smoothly, share exciting event updates, and make sure everything works behind the scenes. We’ll never sell your data, and we’ll always keep it safe. If you ever want to see, change, or delete the info we hold about you, just get in touch — it’s that simple. ✨
1. Who we are
Girls Craft Club (GCC) is a women-only arts and crafts social club founded in Edinburgh in 2025.
If you have any questions about this policy, you can contact us at:
📧 contactgirlscraftclub.co.uk
2. What information we collect
We may collect:
Your name and contact details (email, phone, address if needed).
Membership information (subscription type, payment status).
Payment details (processed securely through third-party providers such as [Stripe/PayPal/etc.]).
Event bookings and attendance records.
Photos and videos taken at events (with consent).
Information you share with us on sign-up forms, surveys, or through our website.
3. How we collect information
Directly from you when you sign up, join as a member, or book an event.
Through our website (cookies, analytics, forms).
At in-person events (e.g., sign-in sheets or consent forms).
From our trusted partners (e.g., payment processors, ticketing platforms).
4. Why we use your data
We use your information to:
Manage memberships and event bookings.
Communicate with you about club news, events, and offers.
Process payments and keep financial records.
Improve our events and member experience.
Meet legal and regulatory requirements.
We will never sell your data to third parties.
5. Legal basis for processing
Under UK GDPR, we process your data on the following bases:
Consent – for newsletters, photos, or optional communications.
Contract – to provide your membership and event services.
Legitimate interests – to improve our events and keep members updated.
Legal obligation – for financial and tax records.
6. How we store and share data
Your data is kept securely and only accessible to authorised team members.
We may share limited data with trusted providers, including:
Payment processors (Stripe/PayPal/Square)
Event and ticketing platforms ([Ticket tailor)
Email and communication tools (Gmail)
Some providers may be based outside the UK, but we ensure they meet data protection standards.
7. How long we keep your data
Membership records: kept while you’re an active member, and deleted within [X months] after leaving.
Payment and financial records: kept for [6 years] to meet legal requirements.
Event photos: kept only with your consent, and removed if you withdraw consent.
8. Your rights
You have the right to:
Access the personal data we hold about you.
Ask us to correct or update your information.
Request that we delete your information.
Restrict or object to how we use your data.
Receive a copy of your data in a portable format.
Complain to the Information Commissioner’s Office (ICO) if you’re unhappy.
9. Cookies and website use
If our website uses cookies or analytics tools, these may collect basic browsing data. You can manage or disable cookies in your browser settings.
10. Changes to this policy
We may update this privacy policy from time to time. Any major changes will be shared with members.
11. Contact us
For questions about this policy or your data, contact us at:
📧 girlscraftclub@gmail.co.uk
📍 @girls_craftclub
✨ We promise to treat your information with the same care and respect we bring to every craft session.