Privacy & GDPR

Privacy & GDPR Policy

This Privacy Policy explains how Metal Clay Academy collects, uses, and protects your personal data when you buy our jewellery or jewellery making tools online, book our jewellery-making workshops online, or visit our studio.

1. Data Controller

The data controller is Metal Clay Academy, located at 433 Hedon Road, Hull, HU9 1RA. For privacy inquiries, contact [email protected].

1. What Data We Collect & Why

• E-Commerce Data: Name, email, shipping/billing address, and phone number. We use this to process payments, dispatch orders, and send tracking links.
• Workshop & Training Data: Learner names, emergency contacts, medical disclosures (e.g., severe allergies to chemicals or respiratory issues ), and experience levels. We use this to ensure safety in the studio.
• Bespoke Order Data: Finger sizes, wrist measurements, and engraving details required to manufacture custom pieces.
• Financial Data: Payment details are processed directly by secure, encrypted third parties (e.g., Monzo, Sum Up, Stripe, PayPal). We never store your full card details.
• Technical & Cookie Data: IP addresses and browsing behavior collected via our website to improve your shopping experience.

1. Legal Basis for Processing

• Contractual Necessity: To deliver your purchased jewellery or provide the training course you booked either online or in-person..
• Legal Obligation: To retain transaction records for financial, tax, and insurance purposes.
• Consent: To send you marketing newsletters or jewellery news and tips (only if you actively opt-in).
• Vital Interests: To use your health or emergency contact data in the event of a studio incident or health related concern..

1. Data Sharing & Third Parties

We never sell your data. We only share it with essential third parties:

• E-Commerce Platforms: Our website host, Big Cartel, to manage your account and cart.
• Delivery Services: Insured couriers (e.g., Royal Mail, DHL, FedEx) to deliver jewellery and other goods, such as kits and tools, safely.
• Booking Software: Third-party tools used to manage workshop timetables and student availability.
• Production Partners: External casting houses or hallmarking assay offices (we only share product specifications, never your personal details).
• Guest instructors: for the sole purpose of conducting the workshop.

1. Data Retention

• Retail & Workshop Transactions: Stored for 7 years to comply with tax laws and handle product warranties.
• Studio Health & Safety Logs: Accident records are kept for 3 years for insurance compliance.
• Enrolment data and medical disclosures are kept for a period of 28 days after the workshop
• Marketing Lists: Retained until you click "unsubscribe."

Access to data held by an individual is restricted to the Studio Operations Manager and the Managing Director of Metal Clay Academy to protect data security.

1. Your GDPR Rights

You have the right to access, correct, or delete your personal data, or restrict its processing. You also have the right to withdraw your consent to data processing (unless the information/ data is required to fulfil a contract e.g. to correspond with you regarding workshop arrangements

To make a request, email [email protected].. We will fulfill valid requests free of charge within 30 days.