Privacy Policy

• Enquiry details — your name, email address, optional phone number, the course you are interested in, your stated experience level, preferred start and anything you write in the message field.
• Booking and payment details — billing name and address, invoice records and payment references. Card details are handled by our payment provider and never stored by us.
• Course records — attendance, tutor feedback, equipment loans and any accessibility or medical information you choose to share so we can support you safely.
• Technical data — basic server logs (IP address, browser, pages requested) kept for security and diagnostics.

• To answer your enquiry and advise on courses — legitimate interests, and your consent given on the enquiry form.
• To take and administer your booking — performance of a contract.
• To keep accounting and tax records for six years — legal obligation.
• To keep students safe in the studio and darkroom, including any health information you share — explicit consent, and our vital-interests obligation in an emergency.
• To send occasional news about upcoming courses — consent, which you can withdraw in one click from any email.

Enquiries that do not lead to a booking are deleted after 12 months. Student records are kept for three years after your last course so we can confirm attendance and give references. Financial records are kept for six full tax years. Health and accessibility notes are deleted at the end of your course unless you ask us to keep them for a future one.

We do not sell your data and we do not share it for advertising. We use a small number of processors acting on our instructions: our website and email host, our accounting software, and our payment provider. Tutors see only the course information they need to teach you. We may disclose information where we are legally required to.

Where a processor stores data outside the UK, the transfer is covered by UK adequacy regulations or the International Data Transfer Addendum.

Coursework is reviewed in class, so other students will see photographs you make. We only publish images of identifiable students, or images you have taken, with your separate written permission, and you may withdraw that permission at any time.

This website uses only the essential cookies needed to serve pages securely. We set no advertising or cross-site tracking cookies, and no analytics cookies without your consent.

Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, ask us to restrict or stop certain uses, object to processing based on legitimate interests, ask for portability, and withdraw consent at any time.

Email hello@vignettesparkschool.co.uk and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Access to student records is limited to staff who need it, files are encrypted in transit and at rest, and paper enrolment forms are held in a locked office. If we change this policy we will update the date above and, for material changes, tell current students by email.

Booking terms are set out separately in our Terms & Conditions, and you can reach us any time via the enquiry form.