Privacy Policy
Overview
We process your personal data in accordance with UK GDPR and the Data Protection Act 2018. This notice explains what data we collect, why, how long we keep it, and your choices.
This policy applies to visitors and users in the United Kingdom who interact with Grandview School of Drawing services, including our website, learning platform, and communications.
Who we are
Grandview School of Drawing is the data controller for personal data described in this notice.
- Trading name: Grandview School of Drawing
- Registered address: 45 Charter Street, London EC1A 2BC, United Kingdom
- Contact: [email protected], +44 20 7123 9485
Data we collect
- Account data: name, email, optional phone.
- Course interaction data: enrolments, favourites, and cart contents (stored locally on your device).
- Technical data: basic logs and essential cookies.
Optional data you may provide
- Profile details such as biography, avatar, or portfolio links (if you choose to add them).
- Support correspondence and feedback you send to us.
- Payment metadata from our payment providers (we do not store full card numbers).
How we use data
- Provide services, course access, and support.
- Improve course design and site performance.
- Comply with legal obligations.
Lawful bases for processing
- Contract: to create and administer your account, deliver courses, and process payments.
- Legitimate interests: to improve our services, prevent abuse, and ensure network security. We balance these interests against your rights.
- Consent: for optional features such as certain analytics or marketing where applicable. You can withdraw consent at any time.
- Legal obligation: to meet regulatory and tax requirements.
Cookies and local storage
We use strictly necessary cookies to keep you signed in and secure the service. We also use local storage on your device for preferences such as theme and cart contents.
- Essential cookies: required for security and core functionality.
- Preferences: theme, dismissed banners, and similar settings stored locally on your device.
- Controls: you can manage cookies via your browser settings. Declining non-essential cookies will not affect essential site functions.
Sharing your data
We share personal data only with trusted processors that help us deliver the service, under contractual safeguards.
- Cloud hosting and content delivery providers.
- Payment processors for secure transactions.
- Customer support and email delivery vendors.
- Professional advisors and auditors where required.
- Public authorities where required by law or to protect rights and safety.
We do not sell your personal data.
International transfers
If we transfer personal data outside the UK, we use appropriate safeguards, such as UK adequacy regulations, the UK International Data Transfer Agreement, or Standard Contractual Clauses with supplementary measures where necessary.
Security
We implement technical and organisational measures to protect personal data, including encryption in transit, access controls, and regular security reviews. No method of transmission or storage is completely secure; if we identify a high-risk breach affecting you, we will notify you and the relevant regulator when required.
Children
Our services are intended for users aged 13 and over. If you believe a child has provided us personal data without appropriate consent, contact us and we will take steps to delete it where required.
Automated decision-making
We do not make decisions producing legal or similarly significant effects based solely on automated processing. We may use basic automation to sort content and detect fraud as part of our legitimate interests.
Your rights
You can request access, rectification, erasure, restriction, and portability of your personal data. Contact: [email protected].
- Right to object: you may object to processing based on legitimate interests and to direct marketing.
- Right to withdraw consent: where processing relies on consent, you may withdraw it at any time.
- Right to complain: you can complain to the UK Information Commissioner’s Office. See ico.org.uk for details.
Retention
We retain account data while you have an active relationship with us and for up to six years thereafter to meet legal requirements.
Shorter retention periods apply to certain technical logs and security records, typically up to 12 months unless longer retention is needed for investigations.
Contact
Grandview School of Drawing, 45 Charter Street, London EC1A 2BC, United Kingdom.
Email: [email protected] • Tel: +44 20 7123 9485
Changes to this notice
We may update this privacy policy from time to time. Material changes will be highlighted on this page. Last updated: 25 November 2025.
Token: grandview.click