Privacy policy.

Last Updated: 24 October 2025

This Privacy Policy explains how That Creativity Co Ltd (Company Number 15839718) collects, uses, stores, and protects your personal information when you use our website, purchase membership to The Creative Collective, or interact with our Services.

Company Details:

We are committed to protecting your privacy and handling your data in accordance with UK GDPR, the Data Protection Act 2018, and other applicable data protection laws.

Read this carefully. By using our Services, you agree to the collection and use of your information as described in this Privacy Policy.

WHAT INFORMATION WE COLLECT

INFORMATION YOU GIVE US DIRECTLY.

When you purchase membership, create an account, or interact with our Services, we collect:

  • Account Information: Your name, email address, username, password, creative discipline or profession, biographical information (optional), and profile photo (optional)

  • Payment Information: Billing address and payment method details. Your full payment card details are processed and stored by Stripe, not by us. We never see or store your complete card number.

  • Communications: Messages and posts in the community, comments on sessions, project submissions for feedback, survey responses, support inquiries, and any other correspondence with us

  • Content You Share: Testimonials, case studies, photos, videos, or other materials you provide for use in our community or marketing

INFORMATION WE COLLECT AUTOMATICALLY.

When you access our website or Services, we automatically collect:

  • Technical Data: IP address, browser type and version, device type, operating system, time zone, and referring website

  • Usage Data: Pages you visit, features you use, session duration and frequency, content you access or download, and attendance at live sessions

  • Cookies and Tracking: We use cookies and similar technologies to improve your experience and understand how you use our Services (see Cookies section below)

INFORMATION FROM THIRD PARTIES.

We may receive information about you from:

  • Stripe: Payment transaction confirmations and billing information

  • Analytics Providers: Aggregate, anonymized usage statistics

  • Social Media: If you connect your social accounts or share our content

HOW WE USE YOUR INFORMATION

We use your personal data for the following purposes:

TO PROVIDE THE SERVICES.

  • Create and manage your membership account

  • Process payments and billing through Stripe

  • Provide access to coaching sessions, masterclasses, resources, and community

  • Deliver personal project feedback and support

  • Send session reminders, schedule updates, and important service announcements

  • Respond to your questions and support requests

TO COMMUNICATE WITH YOU.

  • Send membership-related emails about new resources, session schedules, and community updates

  • Share funding opportunity alerts and deadline reminders

  • Request feedback, testimonials, or participation in case studies

  • Deliver newsletters and updates about The Creative Collective (you can opt out of marketing emails)

TO IMPROVE OUR SERVICES.

  • Analyze how members use our Services to identify improvements

  • Understand member needs, preferences, and behaviour patterns

  • Develop new features, content, and resources

  • Test and optimize the user experience

TO MARKET OUR SERVICES (WITH YOUR CONSENT).

  • Send promotional emails about our programs and events

  • Share success stories and testimonials (with your explicit permission)

  • Invite you to new offerings or workshops

You can opt out of marketing communications at any time by clicking "unsubscribe" in any email or by contacting us at hello@thatcreativityco.com.

FOR LEGAL AND SECURITY REASONS.

  • Comply with legal obligations and regulatory requirements

  • Enforce our Terms and Conditions

  • Prevent fraud, abuse, spam, and security threats

  • Protect our rights and the safety of our members

LEGAL BASIS FOR PROCESSING YOUR DATA

Under UK GDPR, we must have a lawful basis to process your personal data. Here's what we rely on:

What We Do Legal Basis Process membership and deliver Services Contract – We need your data to fulfill our agreement with you Process payments Contract – Required to complete your purchase Send marketing emails Consent – You can withdraw consent at any time Improve Services and analyze usage Legitimate Interests – We have a legitimate interest in improving our business Comply with tax, accounting, and legal requirements Legal Obligation – Required by law Prevent fraud and maintain security Legitimate Interests – Protecting our business and members

HOW WE SHARE YOUR INFORMATION

WE DO NOT SELL YOUR PERSONAL DATA. PERIOD.

We only share your information in the following limited circumstances:

SERVICE PROVIDERS.

We work with trusted third-party service providers who help us operate our business:

  • Stripe – Payment processing

  • Email Service Provider – Sending emails and newsletters

  • Community Platform Provider – Hosting member interactions

  • Analytics Tools – Understanding usage patterns (anonymized data)

  • Cloud Hosting Provider – Storing data securely

These providers are contractually obligated to protect your data and use it only for the specific purposes we've authorized. They cannot use your data for their own purposes.

LEGAL REQUIREMENTS.

We may disclose your information if required to:

  • Comply with legal obligations, court orders, or regulatory requests

  • Enforce our Terms and Conditions

  • Protect the rights, property, or safety of That Creativity Co, our members, or the public

  • Prevent or investigate fraud, security threats, or illegal activity

BUSINESS TRANSFERS.

If we sell our business, merge with another company, or are acquired, your data may be transferred to the new owner. We will notify you of any such change and your options regarding your data.

WITH YOUR CONSENT.

We may share your information for other purposes if you give us explicit permission (for example, using your testimonial on our website or featuring you in a case study).

HOW LONG WE KEEP YOUR DATA

We only keep your personal data as long as necessary for the purposes described in this Privacy Policy:

  • Active Members: We retain your data for the duration of your membership, plus up to 7 years for financial records (required by UK tax and accounting law)

  • Former Members: We delete your account data within 12 months of cancellation, except where we're legally required to keep it (e.g., financial records)

  • Financial and Tax Records: Kept for 7 years to comply with HMRC and Companies House requirements

  • Marketing Data: Kept until you withdraw consent or request deletion

  • Anonymized Data: May be retained indefinitely for analytics and research (once anonymized, it's no longer personal data)

You can request deletion of your data at any time by contacting hello@thatcreativityco.com (see Your Rights section below).

HOW WE PROTECT YOUR DATA

We take data security seriously and implement appropriate technical and organizational measures to protect your information:

SECURITY MEASURES:

  • Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS

  • Secure Storage: Passwords are hashed and salted (never stored in plain text)

  • Access Controls: Only authorized team members can access personal data, and only when necessary

  • Regular Security Audits: We review our security practices regularly

  • Secure Backups: Data is backed up securely and regularly

  • Staff Training: Team members are trained on data protection best practices

THIRD-PARTY SECURITY:

  • We only work with service providers who demonstrate robust security measures

  • Payment data is processed by Stripe, which is PCI DSS compliant (the highest security standard for payment processing)

NO SYSTEM IS 100% SECURE.

While we take security very seriously, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we will notify you promptly if we discover a data breach that affects your personal information, as required by UK law.

YOUR RIGHTS UNDER UK DATA PROTECTION LAW

You have the following rights regarding your personal data:

RIGHT TO ACCESS.

Request a copy of the personal data we hold about you. We'll provide this within one month.

RIGHT TO RECTIFICATION.

Request correction of inaccurate or incomplete data.

RIGHT TO ERASURE ("RIGHT TO BE FORGOTTEN").

Request deletion of your data in certain circumstances (e.g., if it's no longer necessary for the purposes we collected it, or if you withdraw consent).

RIGHT TO RESTRICT PROCESSING.

Request that we limit how we use your data in certain situations.

RIGHT TO DATA PORTABILITY.

Receive your data in a structured, machine-readable format (like a CSV file) so you can transfer it to another service.

RIGHT TO OBJECT.

Object to processing based on legitimate interests, or opt out of marketing communications at any time.

RIGHT TO WITHDRAW CONSENT.

Withdraw your consent for processing at any time (this doesn't affect any processing we've already done with your consent).

RIGHT TO COMPLAIN.

Lodge a complaint with the UK's Information Commissioner's Office (ICO) if you believe we've mishandled your data.

HOW TO EXERCISE YOUR RIGHTS:

Email us at hello@thatcreativityco.com with your request. Please include:

  • Your full name

  • The email address associated with your account

  • A clear description of your request

  • Proof of identity (to protect your data from unauthorized access)

We will respond within one month. If your request is particularly complex, we may extend this by two additional months, but we'll let you know.

COMPLAIN TO THE ICO:

If you're not satisfied with how we've handled your data, you have the right to complain to the Information Commissioner's Office:

  • Website: ico.org.uk

  • Helpline: 0303 123 1113

  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

COOKIES & TRACKING TECHNOLOGIES

WHAT ARE COOKIES?

Cookies are small text files stored on your device when you visit our website. They help us recognize you, remember your preferences, and understand how you use our Services.

TYPES OF COOKIES WE USE:

ESSENTIAL COOKIES (cannot be disabled)

  • Required for the website to function properly

  • Enable you to log in, navigate the site, and access secure areas

  • Without these, the website won't work

ANALYTICS COOKIES (with your consent)

  • Help us understand how visitors use our website

  • Collect anonymized statistics on page views, session duration, and user behavior

  • Allow us to improve performance and user experience

FUNCTIONALITY COOKIES (with your consent)

  • Remember your preferences and settings (e.g., language, timezone)

  • Provide a more personalized experience

MARKETING COOKIES (with your consent)

  • Track your activity for advertising purposes

  • Measure the effectiveness of marketing campaigns

  • Show you relevant content based on your interests

HOW TO MANAGE COOKIES:

You can control cookies through:

  • Our Cookie Consent Tool: When you first visit our website, you'll see a cookie banner where you can accept or reject non-essential cookies

  • Your Browser Settings: Most browsers allow you to refuse or delete cookies. Check your browser's help section for instructions

Note: Disabling essential cookies will prevent parts of the website from working properly.

THIRD-PARTY COOKIES:

Some cookies are placed by third parties (e.g., analytics providers, payment processors). We don't control these cookies. They're governed by the third party's own privacy policy.

INTERNATIONAL DATA TRANSFERS

Your data is primarily stored and processed in the United Kingdom and the European Economic Area (EEA).

If we transfer your data outside the UK/EEA, we ensure it's protected through:

  • Standard Contractual Clauses approved by the UK government

  • Service providers with adequate data protection safeguards

  • Your explicit consent where required by law

We will never transfer your data to a country without ensuring adequate protection.

CHILDREN'S PRIVACY

Our Services are not intended for anyone under 18 years of age. We do not knowingly collect personal data from children.

If you believe we've inadvertently collected information from a child under 18, contact us immediately at hello@thatcreativityco.com and we will delete it.

SPECIFIC PRIVACY INFORMATION FOR OUR SERVICES

THE CREATIVE COLLECTIVE COMMUNITY.

When you participate in our community:

  • Your profile (name, photo, bio) is visible to other members

  • Your posts, comments, and contributions are visible to other members

  • You can adjust your privacy settings within the community platform

  • We moderate content to maintain a safe, respectful environment

LIVE SESSIONS & RECORDINGS.

  • Live coaching sessions and masterclasses may be recorded

  • Recordings are shared only with members within the private community (not publicly)

  • By participating via video, audio, or chat, you consent to being recorded

  • If you don't want to be recorded, turn off your camera and microphone and participate via text chat

  • We will never use recordings of you for external marketing without your explicit written consent

PROJECT FEEDBACK.

When you submit projects for feedback:

  • Your submission is viewed only by Joseph Lynch and relevant team members

  • We may share anonymized examples for educational purposes within the community

  • We will not publicly share your work or identify you without explicit permission

TESTIMONIALS & CASE STUDIES.

We may request permission to:

  • Use your testimonial on our website or in marketing materials

  • Feature your success story as a case study

  • Include your name, photo, and creative discipline

We will always obtain your explicit written consent before publishing any testimonials or case studies. You can withdraw consent at any time by contacting us.

THIRD-PARTY LINKS

Our website and Services may contain links to third-party websites, platforms, or resources (e.g., social media, YouTube, external tools).

We are not responsible for the privacy practices of third parties. When you click on a third-party link, you leave our website and are subject to that third party's privacy policy. We encourage you to review their policies before sharing any personal information.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

  • Changes in our data practices

  • New features or Services

  • Legal or regulatory requirements

When we make changes:

  • We'll update the "Last Updated" date at the top of this page

  • We'll notify you via email if the changes are material

  • Your continued use of our Services after changes take effect constitutes acceptance of the updated Privacy Policy

We encourage you to review this Privacy Policy periodically.

CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

That Creativity Co Ltd

Data Protection Contact

Email: hello@thatcreativityco.com

Address: International House, 6 Canterbury Crescent, London, England, SW9 7QE

Website: thatcreativityco.com

We aim to respond to all inquiries within 5 business days.

By using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and sharing of your information as described above.