D3 Creations Privacy Policy

Last updated: 20 August 2026

1. Who we are

D3 Creations is a Leeds-based creative arts business led by Denetta, a professional spoken-word artist, workshop facilitator and creative practitioner.

In this Privacy Policy, “D3 Creations”, “we”, “us” and “our” mean D3 Creations, acting as the controller of personal data covered by this policy.

Our website is https://d3creations.uk/.

If you have any questions about this Privacy Policy or how we use your personal data, please contact us:

Email: info@d3creations.uk

2. The personal data we collect

Depending on how you interact with us, we may collect:

• Your name;
• Your email address;
• Your telephone number;
• Your organisation, school, college, community group or business details;
• Details of workshops, events, services or enquiries you make;
• Information you provide when communicating with us;
• Information needed to administer a workshop or event, including accessibility requirements or emergency contact details where relevant;
• Records of your marketing preferences, consent and unsubscribe requests;
• Technical information about your use of our website, such as IP address, browser type, device information and cookie information, where collected through cookies or similar technologies.

Please do not provide sensitive personal data unless it is necessary for us to accommodate a specific accessibility, health or safety requirement. Where we need to process special category data, such as health information, we will do so only where a lawful condition under UK data protection law applies.

3. How we collect personal data

We may collect personal data:

• When you subscribe to our newsletter or workshop updates;
• When you contact us by email, telephone or through a website form;
• When you enquire about or book a workshop, event, performance, mentorship session or other service;
• When you represent an organisation that commissions or hosts our services;
• When you attend or participate in one of our workshops or events;
• Automatically through cookies and similar technologies when you use our website;
• From an organisation that books or arranges a workshop on your behalf, where this is necessary to deliver the service.

Where we receive information about participants from a school, college, community organisation or other booking organisation, that organisation may have separate responsibilities to provide privacy information and obtain any permissions required for its own processing activities.

4. How we use personal data

We may use personal data for the following purposes:

4.1 Newsletter and workshop updates

Where you have signed up to receive them, we use your name and email address to:

• Send newsletters;
• Send updates about D3 Creations’ workshops, events, creative programmes and services;
• Tell you about opportunities, announcements and content that may be relevant to your interests;
• Manage your subscription and marketing preferences;
• Record and respect your consent and unsubscribe requests.

These are direct marketing communications. We will send electronic marketing communications only where we have the consent or other lawful permission required under the Privacy and Electronic Communications Regulations 2003 (“PECR”) and the UK GDPR.

You may unsubscribe at any time by using the unsubscribe link in any marketing email or by contacting us at info@d3creations.uk.

4.2 Workshop and event administration

We may use your personal data to:

• Respond to enquiries;
• Provide quotations and arrange services;
• Process workshop or event bookings;
• Communicate practical information about a booking or event;
• Manage attendance, accessibility and safety requirements;
• Provide the services you have requested;
• Process payments or refunds through the relevant booking or payment provider;
• Keep appropriate business and transaction records.

The lawful basis for this processing is generally that it is necessary to take steps at your request before entering into a contract or necessary to perform a contract with you.

Where a workshop is booked by an organisation on behalf of participants, we may process relevant information as necessary to deliver the contract with that organisation. Our role in relation to participant data may depend on the arrangements with the commissioning organisation.

4.3 Communications and enquiries

We may use information you provide to respond to your communications, provide information about our services and maintain a record of our correspondence.

The lawful basis will generally be:

• Performance of a contract or pre-contract steps, where your enquiry relates to a potential booking or service; or
• Our legitimate interests in managing communications, responding to enquiries and operating our business.

4.4 Business management and legal compliance

We may process personal data to:

• Maintain accurate records;
• Manage our business and professional relationships;
• Protect our legal rights and property;
• Prevent fraud, misuse or security incidents;
• Resolve complaints and disputes;
• Obtain professional advice;
• Comply with legal, regulatory, accounting or insurance requirements.

The lawful basis may be compliance with a legal obligation, performance of a contract or our legitimate interests in operating, protecting and improving D3 Creations.

5. Our lawful bases

Under the UK GDPR, we must have a lawful basis for processing personal data. The lawful basis depends on the purpose of the processing.

Where we rely on legitimate interests, those interests include running and protecting our business, communicating with customers and prospective customers, delivering our services, maintaining appropriate records and responding to enquiries. We will consider the impact on individuals and will not rely on legitimate interests where their interests, rights or freedoms override our interests.

Marketing consent is separate from consent to receive a service. You do not have to agree to receive marketing communications in order to enquire about or book a D3 Creations service.

6. Email marketing and Mailchimp

We use Mailchimp, provided by The Rocket Science Group LLC, for email marketing and mailing-list management.

When you subscribe to our newsletter or workshop updates, your name, email address, subscription preferences and relevant consent records may be transferred to Mailchimp and stored or processed through its systems.

For the purposes of managing our mailing list and sending communications on our instructions, Mailchimp generally acts as our data processor. Mailchimp may also process limited information as an independent controller for its own legal, security, account-management and service purposes. Mailchimp’s own privacy information is available at https://mailchimp.com/legal/privacy/.

Mailchimp may provide functionality that records whether an email has been delivered, opened or interacted with. We will use such functionality only where permitted by applicable law and in accordance with our marketing and cookie practices.

Every marketing email should include an accessible unsubscribe option. You can also unsubscribe by contacting us at info@d3creations.uk.

Unsubscribing from marketing will not necessarily stop essential service communications, such as information needed to administer a workshop you have booked.

7. Who we share personal data with

We do not sell your personal data.

We may share personal data where reasonably necessary with:

• Mailchimp, for email marketing and mailing-list management;
• Website hosting, website maintenance, IT and security providers;
• Booking, payment and event-management providers where necessary to administer a booking or transaction;
• Venues, facilitators, contractors or professional advisers where necessary to deliver a service or protect our legal rights;
• A school, college, community organisation, business or other commissioning organisation where this is necessary to arrange or deliver a workshop;
• Insurers, accountants, legal advisers or other professional advisers;
• Courts, regulators, law-enforcement bodies or government authorities where required or permitted by law;
• A purchaser or prospective purchaser of all or part of our business, subject to appropriate confidentiality and data-protection safeguards.

We require service providers acting on our behalf to process personal data only in accordance with our instructions, maintain appropriate security and comply with applicable data-protection law.

8. International transfers

Some of our service providers, including Mailchimp, may process personal data outside the United Kingdom.

Where personal data is transferred outside the UK, we will ensure that the transfer is made in accordance with UK data-protection law. Depending on the destination and circumstances, this may include:

• A UK adequacy regulation or other recognised adequacy arrangement;
• The UK–US Data Bridge, where the relevant US organisation is certified and the transfer is covered by the arrangement;
• The UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses;
• Appropriate supplementary technical, contractual or organisational measures where required.

We will consider the level of protection available in the destination country and maintain appropriate transfer documentation and safeguards.

You may contact us at info@d3creations.uk to request further information about the safeguards applicable to a particular transfer, subject to the protection of confidential information.

9. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, insurance and reporting requirements.

Our usual retention approach is:

• Newsletter and marketing data: until you unsubscribe, withdraw consent or we decide that the data is no longer reasonably necessary. We may retain a minimal suppression record after unsubscribe so that we can respect your request not to receive further marketing;
• Workshop and event records: normally for up to six years after the relevant booking, event or transaction, where necessary for accounting, legal, insurance or dispute-resolution purposes;
• Enquiry records: normally for up to 12 months after the enquiry has been resolved, unless the enquiry develops into a booking, contract, dispute or other relationship requiring longer retention;
• Consent and preference records: for as long as reasonably necessary to demonstrate compliance and manage future marketing preferences;
• Accessibility, health and safety information: only for as long as necessary for the relevant workshop, event or legal or safety purpose, unless a longer period is legally required;
• Technical and cookie data: for the period specified in our cookie settings or by the relevant provider.

Retention periods may be extended where necessary to establish, exercise or defend legal claims, comply with a legal obligation or resolve a complaint.

10. Your rights

Subject to certain legal exemptions and limitations, you may have the right to:

• Ask for confirmation that we process your personal data;
• Request access to your personal data;
• Ask us to correct inaccurate or incomplete personal data;
• Ask us to erase your personal data;
• Ask us to restrict how we use your personal data;
• Object to processing based on legitimate interests;
• Object at any time to the processing of your personal data for direct marketing;
• Withdraw consent where we rely on consent;
• Request a copy of certain personal data in a structured, commonly used and machine-readable format;
• Complain to the Information Commissioner’s Office.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

The right to unsubscribe from marketing is available at any time and can be exercised using the unsubscribe link in our emails or by contacting us at info@d3creations.uk.

These rights are not absolute. For example, we may need to retain certain information to comply with a legal obligation, establish or defend legal claims, or maintain a suppression record so that we do not send marketing to someone who has opted out.

To exercise a right, please email info@d3creations.uk. We may need to verify your identity before responding. We will normally respond within one month of receiving your request, although this period may be extended where permitted by law if a request is particularly complex or numerous.

We will not normally charge a fee for handling a rights request. We may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive, as permitted by law.

11. Cookies and similar technologies

Our website may use cookies and similar technologies.

Cookies may be used for purposes including:

• Ensuring that the website operates correctly;
• Remembering preferences;
• Understanding how visitors use the website;
• Improving website performance and functionality;
• Supporting embedded content or third-party services.

Strictly necessary cookies may be used without consent where they are required to provide a service you have requested or to operate the website.

We will request your consent before placing or accessing non-essential cookies, including analytics, advertising or tracking cookies, where required by PECR. You can manage your preferences through the cookie banner or settings tool provided on the website. You can also adjust your browser settings, although disabling cookies may affect website functionality.

Our website may contain links to third-party websites. Those websites have their own privacy and cookie policies, and we are not responsible for their practices.

12. Children’s data

Our website and newsletter are primarily intended for adults, organisations and professionals interested in D3 Creations’ creative workshops, events and services. We do not knowingly collect children’s personal data through newsletter registration.

D3 Creations may deliver workshops or creative programmes involving children and young people through schools, colleges, community groups or other organisations. Where this occurs, the arrangements for collecting and using participant information will depend on the particular service and the role of each organisation.

We will take appropriate steps to ensure that children’s data is processed lawfully, fairly and only to the extent necessary. Where consent is required for an online service offered directly to a child under the applicable UK GDPR rules, we will obtain or verify the required parental or guardian authorisation.

If you believe that a child has provided personal data to us inappropriately, please contact us at info@d3creations.uk. We will review the circumstances and take appropriate action.

13. Data security

We use reasonable technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, disclosure or destruction.

These measures may include access controls, password protection, secure service providers, limited access to personal data and appropriate backup and security procedures.

No method of transmitting or storing information is completely secure. You should avoid sending unnecessary confidential or sensitive information by ordinary email.

If we become aware of a personal-data breach, we will assess it and take any action required by UK data-protection law, including notifying the ICO and affected individuals where legally required.

14. Automated decision-making

We do not use personal data collected through this website or our newsletter to make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects.

15. Complaints

If you have a concern about how we have used your personal data, please contact us first so that we can try to resolve it:

Email: info@d3creations.uk

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection:

Website: https://ico.org.uk/make-a-complaint/

Telephone: 0303 123 1113

Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal obligations or data-processing practices.

The latest version will be published on this page with the updated date shown at the top. We encourage you to review this Privacy Policy periodically.

17. Contact us

If you have any questions about this Privacy Policy, wish to exercise your rights or want to change your marketing preferences, please contact:

D3 Creations
Email: info@d3creations.uk
Website: https://d3creations.uk/