Privacy Policy
| Data Controller: | Foresight Creators Academy Ltd (Company No. 15494933) |
| Trading As: | Creators Academy |
| ICO Registration: | C1550119 |
| Effective Date: | 28 April 2026 |
| Last Reviewed: | 28 April 2026 |
| Contact: | hello@creators-academy.co.uk |
This policy explains how Foresight Creators Academy Ltd (“we”, “us”, “our”) collects, uses, stores, and shares your personal data when you use our website www.creators-academy.co.uk or engage with our services. We are committed to handling your data responsibly and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Foresight Creators Academy Ltd is the data controller responsible for your personal data. We are registered with the Information Commissioner’s Office (ICO) under registration number C1550119.
Contact details:
Email: hello@creators-academy.co.uk
Address: Hope St Xchange, 1–3 Hind St, Sunderland, SR1 3QD
If you have any questions about how we handle your data, or wish to exercise your rights, please contact us using the details above.
2. What Personal Data We Collect
2.1 Information You Provide Directly
We collect personal data that you voluntarily provide when you:
- Register an account or enrol in a course
- Purchase services or subscribe to a plan
- Complete an enquiry, contact, or assessment form
- Sign up for a webinar or event via Eventbrite
- Communicate with us by email or other channels
This may include: name, email address, phone number, billing/delivery address, payment information, job title, employer name, and any other details you choose to provide.
2.2 Information We Collect Automatically
When you visit our website we may automatically collect:
- IP address and approximate location
- Browser type, version, and device type
- Operating system
- Pages viewed and actions taken on our website
- Referral source (how you arrived at our site)
2.3 Information from Third-Party Platforms
We may receive information about you from third-party platforms such as Meta (Facebook/Instagram), LinkedIn, and Google if you interact with our advertising or content on those platforms.
3. Lawful Basis for Processing
Under UK GDPR, we are required to identify a lawful basis for each type of processing we carry out. The table below sets out how and why we use your data:
| Purpose of Processing | Types of Data | Lawful Basis |
|---|---|---|
| Process course enrolments and deliver training | Name, email, billing info, course records | Performance of contract (Art. 6(1)(b)) |
| Process payments | Billing address, payment details (via Stripe) | Performance of contract (Art. 6(1)(b)) |
| Manage customer and prospect relationships | Name, email, phone, employer, communication history | Legitimate interests (Art. 6(1)(f)) |
| Send marketing communications | Name, email address | Legitimate interests – soft opt-in; opt out at any time (Art. 6(1)(f)) |
| Operate and improve our website and platform | Usage data, cookies, IP address | Legitimate interests (Art. 6(1)(f)) |
| Run targeted advertising (Meta, LinkedIn, Google) | Cookies, pixel data, hashed email | Legitimate interests (Art. 6(1)(f)) |
| Report learner data to DfE (Skills Bootcamp) | Name, DOB, NI number, enrolment data | Legal obligation (Art. 6(1)(c)) |
| Comply with tax, accounting and legal obligations | Transaction and billing records | Legal obligation (Art. 6(1)(c)) |
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies on our website. Cookies are small text files stored on your device that help us understand how visitors use our site and to deliver relevant advertising.
4.1 Types of Cookies We Use
| Category | Purpose | Examples |
|---|---|---|
| Strictly Necessary | Required for the website to function. Cannot be disabled. | Session cookies, login authentication |
| Analytics & Performance | Help us understand how visitors interact with our site so we can improve it. | Google Analytics |
| Marketing & Advertising | Used to track visitors across websites and deliver relevant adverts. | Meta Pixel (Facebook), LinkedIn Insight Tag, Google Ads |
4.2 The Meta Pixel
Our website uses the Meta Pixel, a tool provided by Meta Platforms, Inc. This allows us to measure the effectiveness of our Facebook and Instagram advertising by tracking actions taken on our website (such as page visits and form completions). Data collected via the Meta Pixel may be used to build custom or lookalike audiences for advertising. You can manage your Meta ad preferences at facebook.com/ads/preferences.
4.3 Managing Cookies
You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. You can also opt out of interest-based advertising via:
- Google Ad Settings: adssettings.google.com
- Meta Ad Preferences: facebook.com/ads/preferences
- LinkedIn Advertising Preferences: linkedin.com/psettings/advertising
- Your Online Choices: youronlinechoices.com
5. Third-Party Service Providers
We work with trusted third-party platforms and service providers to deliver our services. We only share data with third parties where necessary and ensure appropriate safeguards are in place.
| Provider | Purpose | Data Shared | Location |
|---|---|---|---|
| Stripe | Payment processing | Billing address, payment card details | UK/EEA (SCCs for US transfers) |
| Pipedrive | CRM – contact and sales management | Name, email, phone, company, history | EU/EEA |
| Brevo | Email marketing and communications | Name, email address | EU (France) |
| Apollo | Sales prospecting and outreach | Name, email, job title, company | USA (SCCs apply) |
| Make | Workflow automation between platforms | Data passed between connected systems | EU (Czech Republic) |
| Analytics, Ads, Workspace | Usage data, cookies, email (Workspace) | USA (SCCs apply) | |
| Meta (Facebook/Instagram) | Advertising and audience targeting | Pixel/cookie data, hashed email | USA (SCCs apply) |
| Advertising and audience targeting | Insight Tag/cookie data | USA (SCCs apply) | |
| Amazon Web Services (AWS) | Hosting for our skills learning platform | Account and platform usage data | UK (eu-west-2) |
| Department for Education | Skills Bootcamp programme reporting | Name, DOB, NI number, enrolment data | UK |
6. International Data Transfers
Some of our third-party providers are based outside the UK, including in the United States (Google, Meta, LinkedIn, Apollo, Stripe). Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as the International Data Transfer Agreement (IDTA) or Standard Contractual Clauses (SCCs) approved by the ICO, to ensure your data receives an equivalent level of protection.
7. Marketing Communications
We may send you marketing emails about our courses, events, and services where you have enquired about or previously purchased from us (soft opt-in under PECR). You can opt out of receiving marketing communications at any time by:
- Clicking the unsubscribe link in any marketing email
- Emailing us at hello@creators-academy.co.uk
Opting out of marketing will not affect communications related to your account or an active enrolment.
8. Data Retention
We retain your personal data only for as long as necessary for the purpose it was collected, or as required by law. General retention periods are:
- Customer and transaction records: 7 years (HMRC requirements)
- Course completion and certification records: Duration of relationship plus 3 years
- Skills Bootcamp learner records: As required by the DfE (typically up to 7 years)
- Marketing contact records: Until you opt out or contact becomes invalid
- Enquiry and prospecting records: Up to 3 years from last contact
- Website analytics data: Up to 26 months
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include access controls, encrypted data transmission (HTTPS), and regular review of our data handling practices.
Our learning platform is hosted on Amazon Web Services (AWS) in the UK (eu-west-2 region), which provides
enterprise-grade infrastructure security. While we take all reasonable precautions, no method of transmission over the internet is completely secure.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals as required by law.
10. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access – request a copy of the personal data we hold about you (Subject Access Request)
- Right to rectification – ask us to correct inaccurate or incomplete data
- Right to erasure – request deletion of your data where we have no legal obligation to retain it
- Right to restrict processing – ask us to limit how we use your data in certain circumstances
- Right to data portability – receive your data in a structured, commonly used format
- Right to object – object to processing based on legitimate interests, including direct marketing
- Right to withdraw consent – where processing is based on consent, you may withdraw at any time
To exercise any of these rights, please contact us at: hello@creators-academy.co.uk. We will respond within
one month. We may need to verify your identity before processing your request.
11. Right to Lodge a Complaint
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with
the UK’s data protection supervisory authority:
Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would appreciate the opportunity to address your concerns before you contact the ICO, so please do reach
out to us first.
12. Children’s Privacy
Our website and services are not directed at children under the age of 16. Our Skills Bootcamp programmes are exclusively for adults aged 19 and over. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected data relating to a child, please contact us at hello@creators-academy.co.uk and we will delete it promptly.
13. Third-Party Links
Our website may contain links to third-party websites (such as Eventbrite or Adobe). We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies before providing any personal information.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the ‘Last Reviewed’ date at the top of this page. We encourage you to review this policy periodically. Your continued use of our website following any update constitutes acceptance of the revised policy.
15. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:
Foresight Creators Academy Ltd
Trading as Creators Academy
Hope St Xchange, 1–3 Hind St, Sunderland, SR1 3QD
Email: hello@creators-academy.co.uk
ICO Registration: C1550119
This policy was last reviewed and updated on 28 April 2026. Foresight Creators Academy Ltd, Company No. 15494933, registered in England and Wales.
