Privacy Policy

Effective date: 1st September 2026

This policy explains how Welshot Creative for Kids & Teens collects, uses and protects personal information when you visit www.welshotcreative.co.uk, join our mailing list or book an activity.

 

Who we are

Welshot Creative for Kids & Teens ("Welshot Creative", "we", "us") runs creative photography activities, workshops and one-to-one sessions for children, teenagers and families. We are the data controller for the personal information described in this policy.

  • Business name: Welshot Photographic Academy
  • Address: 16 Trinity Square, Llandudno LL30 2RB
  • Email: [email protected]
  • ICO registration number: 

If you have any questions about this policy or your information, email us at [email protected]

What information we collect

We only collect what we need to run our activities and keep in touch with you.

  • Mailing list and free activity pack: your name and email address.
  • Contact form and messages: your name, email address and anything you include in your message, including messages sent via Facebook or Instagram.
  • Bookings: the parent or carer's name, email, phone number and payment details (payments are handled by our payment provider - we never see or store full card details).
  • About your child: their first name, age, and any information you choose to share so we can keep them safe and support them, such as medical needs, allergies, additional needs and emergency contact details.
  • Photographs: photos taken by participants and photos we take during sessions and events.
  • Website use: basic technical information such as your IP address, browser type and pages visited, collected through cookies (see below).

Children's information

Our activities are for children and teenagers, but we collect their information from a parent or carer, not from the child directly. Children under 13 should not sign up to our mailing list or send us information without a parent or carer. If we find we have collected a child's information without consent, we will delete it.

How we use your information

Under UK data protection law (UK GDPR), we must have a lawful reason to use your information. Here is what we use it for and why.

What we do

Lawful basis

Send our newsletter, updates and free activity pack

Consent - you can unsubscribe at any time

Reply to your enquiries

Legitimate interests

Take and manage bookings and payments

Contract

Keep children safe during sessions (health, allergies, emergency contacts)

Consent from the parent or carer, and vital interests in an emergency

Use photos of children on our website or social media

Consent from the parent or carer, asked for separately

Keep financial records

Legal obligation

Improve our website

Legitimate interests

Photographs of children

We will never post a photo where a child can be identified without written consent from their parent or carer. We do not publish children's full names alongside photos. You can withdraw photo consent at any time and we will remove the images from our website and social media pages as soon as we reasonably can.

We will never sell your information, and we won't send marketing unless you've asked for it.

Cookies

Cookies are small files saved on your device when you visit a website. Our website runs on Kajabi, which uses essential cookies to make the site work, such as remembering your session and processing bookings.

You can block or delete cookies in your browser settings, though some parts of the site may not work properly if you do.

Who we share your information with

We only share your information with trusted services that help us run the business:

  • Kajabi - hosts our website, mailing list and bookings, processing payments
  • Facebook and Instagram (Meta) - if you message us there, or where you have consented to photos being shared
  • Accountant - for keeping financial records

Some of these providers are based in, or store data in, the USA. Where this happens, they use approved safeguards such as the UK International Data Transfer Addendum or the UK-US Data Bridge to protect your information.

We may also share information if required by law, or with emergency services if a child's safety is at risk.

How long we keep it and how we protect it

  • Mailing list: until you unsubscribe.
  • Enquiries: up to 12 months after our last contact.
  • Booking and child safety information: up to 12 months after the activity, unless there was an incident we need to keep a record of.
  • Financial records: 6 years, as required by HMRC.
  • Photos: until you withdraw consent.

We keep your information secure using password-protected accounts and trusted providers, and only the people running Welshot Creative can access it.

Your rights

You have the right to:

  • ask for a copy of the information we hold about you or your child
  • ask us to correct anything that is wrong
  • ask us to delete your information
  • object to or restrict how we use it
  • withdraw your consent at any time, including for photos and marketing
  • ask for your information to be transferred to another organisation

To use any of these rights, email [contact email]. We will respond within one month.

If you are unhappy with how we have handled your information, please contact us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page.

Last updated: 10th November 2026