privacy policy

Who we are:

Studio Upstairs is a UK registered charity (105890) providing positive, life-changing interventions for people with mental or emotional difficulties within an artistic therapeutic community.

Our commitment to you:

Studio Upstairs is committed to looking after your personal data. We will:

Comply with our legal obligations on data protection,
Carefully look after any personal data that we hold or use, and
Be open and transparent about how we do this.

Types of data we collect on this site:

Like most websites, Studio Upstairs uses cookies to collect information. Cookies are small data files which are placed on your computer or other devices (such as smartphones or tablets) as you browse this website. They are used to ‘remember’ when your computer or device accesses our website. Cookies are essential for the effective operation of our website and are used by services we make use of to provide a better experience to you when using our site.

The services that we use that place their own cookies on our site are provided by:

Google LLC – The cookies that are in place from Google are used for the analytics data and the anti-spam measures we have in place on our contact and newsletter subscription forms.

Google Analytics

Like most websites, this site uses Google Analytics (GA) to track user interaction. We use this data to determine the number of people using our site, to better understand how they find and use our web pages and to see their journey through the website.

Although GA records data such as your geographical location, device, internet browser and operating system, none of this information personally identifies you to us. We send a partial record of your IP address to GA with the last few characters or “octet” removed, this reduces the ability for anyone to use this to identify an individual.

GA makes use of cookies, details of which can be found on Google’s developer guides.

Disabling cookies on your internet browser will stop GA from tracking any part of your visit to pages within this website.

Newsletter

As part of the registration process for our regular e-newsletter, we only collect your name and email address. We use Mailchimp to send out the newsletter, and your details will be held on Mailchimp’s servers in the USA. Mailchimp has signed up to the EU-US Privacy Shield, which is one of the approved international agreements for protecting the data of EU citizens. We only send you our newsletter with your consent.

We gather statistics around newsletter opening and clicks using industry standard technologies to help us monitor and improve our newsletter.

You can unsubscribe from our newsletter at any time of the day or night by clicking the unsubscribe link at the bottom of any of our newsletters.

Donors

We keep very limited information about our individual donors (enough to enable us to thank them and to comply with money laundering obligations). We currently use PayPal to process donations and sales.

Online Shop

We can only provide the goods and services ordered by you if you provide us with your personal data. The information we collect from customers when making a purchase from our store is used for billing, administration and order fulfilment purposes only and will be kept entirely confidential. Any contact information collected will expressly be contact details and payment information (such as credit or debit card). Where we use certain third parties to carry out tasks on our behalf such as delivering consignments, sending emails and processing credit card payments, these third parties have access to this information purely on the basis of conducting tasks on Studio Upstairs’ instructions, not for their own use.

Types of data we collect elsewhere:

Members of the public we provide services to:

If you join one of our services we will give you full details about how we will use and look after your personal information. We normally do this by giving you a consent form.

Professional networks

Like many organisations, we keep contact details of people in our professional networks, for example people from organisations that we collaborate with, people we meet at conferences, etc. Our professional networks are very important to us, as they enable us to build alliances.

We store this data in Mailchimp. We have decided that we have a legitimate interest in holding this information, and that is the lawful basis we are using to process this data. You can ask us to delete any data we hold about you by emailing info@studioupstairs.org.uk, and we will action this request within 10 days. We also clean up our contacts database at least once a year by deleting out of date contact information or by updating records, for example where people have moved into different roles.

Job applicants and Volunteers

If you apply for a job or volunteer role at Studio Upstairs, we look after the information that you send us and we store it securely. For unsuccessful candidates, we delete this information after 6 months, unless you’ve asked us to keep your CV on file.

EU’s General Data Protection Regulation

We have updated our data protection policy to ensure that we comply with the EU’s General Data Protection Regulation (GDPR). We’ve undertaken a data audit, so that we know what personal information we hold and process, and we’ve documented our lawful bases for processing personal data. We have also been checking that our online systems and databases are GDPR-compliant, and we’ve reviewed the security of our different storage systems.

If you need further information or if you have a complaint:

If you have any questions about how we look after people’s personal information, or if you have a complaint about how we are handling your data, please get in touch with us at info@studioupstairs.org.uk We will try our best to answer your questions or resolve your complaint.

Changes to this Privacy Notice

This privacy policy may change from time to time in line with legislation or industry developments. We will not explicitly inform our clients or website users of these changes. Instead, we recommend that you check this page occasionally for any policy changes.

April 2019