Home
Sign In

The Curious Academy Of Talent
Privacy Policy



Privacy Policy – Curious Academy of Talent CIC

Last Updated: 14/01/2026
Company Name: Curious Academy of Talent CIC
Company Number: 16713379
Registered Address: 2 Bailgate, Lincoln, LN1 3AE
Email: sarah@sjhoneywell.com
Phone: 07976 733877

Curious Academy of Talent CIC (“we”, “us”, “our”) is committed to protecting the privacy and security of your personal information. This policy explains how we collect, use, store and share personal data relating to students, parents/guardians, clients, staff, volunteers, and website users in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK data laws.

1. Personal Data We Collect

We may collect and process the following categories of personal data:

A) Student & Child Data

  • Full name, date of birth & age

  • Medical information relevant to participation (e.g. allergies, injuries)

  • Emergency contact details

  • Education background (if relevant to course placement)

  • Performance records, achievements, grades & assessments

  • Photos, videos and audio recordings (if consented)

  • Attendance data and timetables

  • Safeguarding notes (where necessary and lawful)

B) Parent/Guardian & Adult Student Data

  • Full name and contact details (email, phone, address)

  • Payment and billing information

  • Account details for online systems

  • Communications history

C) Staff, Contractors & Volunteers

  • Identification and right-to-work information

  • Contact & banking details for payroll

  • DBS certificates & safeguarding training records

  • Qualifications and employment history

  • Next of kin details

D) Website & Digital Platform Users

  • IP address & browser information

  • Cookies and usage logs

  • Online form submissions

  • Platform login/account information (e.g. ClubRight, Class Manager, GoCardless etc)

2. How We Collect Personal Data

We collect information in the following ways:

  • Direct from you (in person, email, phone, online forms)

  • Parent/guardian submissions for students under 18

  • Through registration platforms (e.g. ClubRight or other CRM tools)

  • Through cookies when visiting our website

  • Through safeguarding reporting processes

  • Through media consent forms

  • Through referrals from schools or partner organisations (where lawful)

3. Purposes for Processing Data

We only process personal data for legitimate purposes, including:

  • To manage student enrolment & academic/skills records

  • To communicate with students, parents & guardians

  • To arrange rehearsals, classes, lessons, and assessments

  • To support safeguarding and child protection obligations

  • To provide health & safety support during sessions

  • To manage contracts with staff & volunteers

  • To process fees, payments & invoices

  • To maintain internal business records

  • To carry out marketing (only with consent)

  • To comply with legal, insurance or regulatory obligations

4. Lawful Bases for Processing

Under the UK GDPR we rely on the following lawful bases:

  • Contract: to deliver services you have enrolled in

  • Legal Obligation: safeguarding, DBS, financial record keeping

  • Vital Interests: e.g. in medical emergencies

  • Consent: media use, marketing communications, certain medical info

  • Legitimate Interests: scheduling, attendance, internal reporting, website analytics

Where consent is required (e.g. photos/video), you can withdraw it at any time.

5. Children’s Data

We handle children’s data with high levels of care and follow safeguarding legislation. Data is only processed when necessary for:

  • Tuition

  • Safeguarding

  • Parental communication

  • Performance-related activities

  • Legal compliance

Consent for recording or promotional media involving children is obtained from a parent or guardian.

6. Sharing Personal Data

We may share data with trusted third parties when necessary such as:

  • Payment processors (e.g. GoCardless, Stripe)

  • CRM/booking systems (e.g. ClubRight, Class Manager)

  • IT & cloud service providers (e.g. Google, Microsoft)

  • Venues, exam boards or awarding bodies (e.g. LAMDA, Trinity, etc. if applicable)

  • Safeguarding authorities (e.g. LCC, Police, Social Care)

  • Insurers and legal advisors

  • Schools referring students to us (with lawful basis)

We do not sell personal data to third parties.

7. International Transfers

Some service providers may store data outside the UK (e.g. in the EEA or USA). In such cases we ensure:

  • Adequacy regulations apply, or

  • Standard contractual clauses or equivalent safeguards are in place

8. Data Retention

We retain personal data only as long as necessary:

  • Student records: up to 7 years after last activity

  • Financial records: minimum 6 years (HMRC requirement)

  • Safeguarding records: up to 75 years or as legally required

  • DBS & employment: in line with DBS & HR guidance

  • Media consent: until consent withdrawn or expiry stated

  • Website logs: 12–24 months (typical)

After retention expires, data is securely destroyed.

9. Your Data Protection Rights

Under the UK GDPR you have the right to:

  • Request access to your data

  • Request correction or deletion

  • Object to processing

  • Restrict processing

  • Withdraw consent (where applicable)

  • Request data portability

Requests can be made to: [insert email]

We may require identification before releasing any data.

10. Marketing & Media

We only send marketing communications or use photos/videos where explicit consent has been provided.

You can withdraw consent at any time by emailing us.

11. Cookies & Website Tracking

Our website may use cookies for:

  • Analytics (e.g. Google Analytics)

  • User authentication for login areas

  • Preference saving

You can manage or disable cookies in your browser settings.

12. Security Measures

We implement technical and organisational security measures including:

  • Encrypted payment processing

  • Role-based system access controls

  • Device password protection

  • Staff safeguarding & data protection training

  • Secure cloud hosting & backups

  • Physical building security

Despite best efforts, no method of transmission is 100% secure and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this policy occasionally. The latest version will always be available via our website or on request.

14. Contact Us

For data queries, complaints or rights requests please contact:

Data Protection Lead
Curious Academy of Talent CIC
Email: sarah@sjhoneywell.com
Phone: 07976 733877
Address: 2 Bailgate, Lincoln, LN1 3AE

If you are not satisfied with our response, you can complain to:

Information Commissioner’s Office (ICO)
ico.org.uk