We collect personal data relevant to the services you use, including:

• IP address and technical data about your device and browsing (for analytics and site functionality)

• Contact information (name, email, address) when you purchase, donate, join our Fan Club, subscribe, or participate in our projects

• Sensitive data (e.g., health or access needs) only with explicit consent

• Other information related to your interactions with our website and services

We collect data when you:

• Communicate with us via email, phone, or in person (events, workshops, meetings)

• Subscribe to mailing lists or join/donate to Fan Club

• Purchase tickets, products, or services

• Enable cookies on our website

We use your data to:

• Communicate with you and provide our services

• Market and promote our events and products

• Understand and improve our services

• Maintain internal records and reports

We do not sell your personal data. We only share your data with trusted third parties to support our services, including:

• Squarespace (website hosting)

• Stripe and GoCardless (payment processing)

• Mailchimp (email marketing)

• Partner organisations (e.g., Wicked Active Learning)

We will also disclose data if legally required (e.g., law enforcement).

Our website uses cookies and tracking technologies to improve your experience and analyze site traffic. We use:

• Essential cookies (required for website function)

• Analytics/performance cookies (activated after cookie consent)

We share analytics data with Squarespace. 

You can change your preferences at any time via the Cookie Preferences linked in the footer of our website. 

You have the right to:

• Be informed about how your data is used

• Access the data we hold about you

• Correct any inaccuracies in your data

• Request deletion of your data (“right to be forgotten”)

• Restrict or object to processing

• Request data portability

• Object to automated decision-making

To exercise these rights, please contact us at info@starlingarts.com. We will require proof of identity before processing requests to protect your data.

We apply the following retention schedules based on the category of data:

Financial and Statutory Records:
Data relating to bookings, financial transactions, HMRC compliance, staff payroll, invoices, and director service agreements is kept for a period of six (6) years from the end of the relevant financial year (to comply with UK tax and audit requirements).

Participant and Delivery Data
Information collected for specific projects, workshops, or performances, including names, access needs, consent forms (e.g., photography waivers), and emergency contact details for participants, is kept for three (3) years following the official completion date of the specific project, workshop, or engagement. This period allows for necessary project evaluation, reporting to funders, and responding to potential queries or claims.

General Contact and Marketing Data
Subscriber data (email addresses, preferences) held for communication and marketing purposes (e.g., mailing lists) is held until the individual withdraws consent (unsubscribes). If a contact remains unresponsive (shows no engagement, clicks, or opens) for a period exceeding three (3) years, their data will be securely deleted or anonymised unless they have a concurrent relationship with the Company (e.g., active booker).

Website and Technical Data
Server logs, technical diagnostic data, and aggregated, anonymous analytical data is kept for 12 months.

The Directors are jointly responsible for conducting an annual review of all data categories to identify records that have passed their defined retention periods. Data that no longer meets the legal or operational purpose for which it was collected will be permanently and securely deleted or fully anonymised.

Data may be retained for longer than the periods specified above only if:

• It is the subject of a current or anticipated legal claim or investigation.

• Statutory requirements mandate a longer specific retention period (e.g., records related to minors).

• The data is required for compelling public interest, scientific, or historical research purposes, provided appropriate safeguards are in place.

We only collect data about children (under 18) with parental or guardian consent and ensure appropriate safeguarding measures (e.g., Enhanced DBS checks for staff and contractors) are in place.

We implement appropriate technical and organisational measures to keep your data secure. However, the accuracy of the data depends on the information you provide.

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy notices separately.

• When you purchase from our online store, your billing and shipping information is shared with Squarespace and payment processors to fulfil your order.

• We use Google Fonts and Adobe Fonts, which may collect technical data (e.g., IP address) to display fonts properly.