Privacy Policy
Effective Date: 09/12/25
Data Controller
Becky Walsh Ltd trading as Council Culture
33 Clifton Road
Weston-super-Mare
North Somerset
BS23 1BN
Email: [email protected]
Becky Walsh Ltd is registered with the Information Commissioner’s Office (ICO).
1. Purpose of This Policy
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you:
Visit our website
Purchase or participate in our online courses or training programmes
Contact us or interact with our services
This policy applies to:
www.councilculture.uk and all associated subdomains, including course platforms used to deliver our training.
By using our website or enrolling in our courses, you acknowledge this policy.
2. Personal Data We Collect
Depending on how you interact with us, we may collect and process the following personal data:
Identity and Contact Information
Full name
Email address
Telephone number
Postal address
Organisation, council, or company name
Account and Course Information
When you enrol in an online course or training programme we may collect:
Account login details
Course enrolment records
Course progress and completion status
Quiz or assessment results
Participation in course discussions or comments
Certificates issued upon course completion
Transaction Data
Purchase records
Billing information
Payment confirmations
Payment information is processed securely by third-party payment providers and is not stored by us.
Technical and Usage Data
IP address
Browser type and version
Device and operating system
Website usage data
Course platform activity and engagement analytics
Communications Data
Information provided through contact forms
Emails or messages sent to us
Booking or training enquiries
We do not collect special category data (such as health information, ethnicity, or political beliefs).
3. How We Use Your Personal Data
We use personal data for the following purposes:
Responding to enquiries
Creating and managing user accounts for our course platform
Delivering online courses, training programmes, events, and consultancy services
Tracking course participation and completion
Issuing course certificates where applicable
Managing bookings, contracts, and invoices
Processing payments
Providing customer support
Communicating essential service or course information
Sending marketing communications where you have actively opted in
Improving our website, course content, and user experience
Complying with legal, regulatory, and professional obligations
We do not sell personal data and do not send unsolicited marketing.
4. Lawful Bases for Processing
Under UK GDPR we rely on the following lawful bases:
Consent
For newsletters, updates, and marketing communications where you have opted in.
Contract
Where processing is necessary to deliver a service you have purchased or requested, including access to online courses.
Legal Obligation
Where processing is required for tax, accounting, or regulatory compliance.
Legitimate Interests
For legitimate business purposes such as:
Improving our website and course platform
Analysing course engagement
Fraud prevention and security
Administrative management
These interests are balanced against your rights and freedoms.
5. Data Sharing and Third-Party Processors
We only share personal data where necessary to deliver our services.
Third-party providers may include:
Thinkific
Online course hosting and learning platform
Data processed may include name, email address, course enrolment data, and course progress.
MailerLite
Email newsletters and marketing communications
Name and email address
Zoom
Delivery of live online training sessions
Name, email address, and meeting participation data
PayPal, BACS, QuickBooks
Payment processing and invoicing
Payment data is processed securely by these providers.
WordPress and Squarespace
Website hosting and technical infrastructure
Technical and usage data
Google Analytics
Website analytics and performance monitoring
IP address and website usage data
Meta Platforms
Social media analytics and marketing insights
Pixel or interaction data where consent has been provided.
All third-party providers are required to comply with UK GDPR and process personal data only for authorised purposes.
6. International Data Transfers
Some of our third-party providers may process personal data outside the United Kingdom.
Where this occurs, we ensure appropriate safeguards are in place, including:
UK adequacy regulations
Standard Contractual Clauses
Data protection agreements with providers
These measures ensure that your data receives an equivalent level of protection.
7. Data Retention
We retain personal data only for as long as necessary for the purposes it was collected.
Typical retention periods include:
Marketing subscribers — until you unsubscribe
Enquiries with no ongoing relationship — up to 12 months
Client, course enrolment, and booking records — up to 7 years for legal and accounting requirements
Course participation records — retained while courses remain accessible or for legitimate record-keeping
Website analytics data — up to 26 months
Personal data is securely deleted or anonymised when no longer required.
8. Your Data Protection Rights
Under UK GDPR, you have the right to:
Access your personal data
Correct inaccurate or incomplete data
Request deletion of your data
Restrict how your data is processed
Object to processing
Request transfer of your data to another provider
Withdraw consent at any time where consent is the legal basis
Requests can be made by emailing:
We will respond to valid requests within one month.
If you are unhappy with how your data is handled, you may complain to the Information Commissioner’s Office (ICO):
https://www.ico.org.uk
9. Cookies and Tracking Technologies
Our website uses cookies to ensure functionality and measure performance.
These may include:
Essential cookies required for website operation
Analytics cookies to understand visitor behaviour
Platform cookies used by the course delivery system to maintain login sessions
Analytics cookies are only used where consent has been provided.
You can manage or disable cookies through your browser settings. Disabling cookies may affect website functionality.
10. Children’s Data
Our services and courses are not directed at children.
We do not knowingly collect personal data from individuals under 16 years of age.
If you believe a child’s data has been submitted to us, please contact us and we will delete it promptly.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or significant effects.
Data Security
We implement appropriate technical and organisational security measures to protect personal data, including:
Secure systems and password protection
Restricted access to authorised personnel
Secure course platforms and hosting providers
Encrypted payment processing through trusted providers
Despite these safeguards, no internet transmission is completely secure.
11. Changes to This Policy
We may update this Privacy Policy periodically.
Any changes will be published on this page with a revised effective date.
Effective Date: 09/12/25
Controller:
Becky Walsh, Director
Becky Walsh Ltd trading as Council Culture
33 Clifton Road
Weston-super-Mare
North Somerset
BS23 1BN
Email: [email protected]
Registered with the Information Commissioner’s Office (ICO).