Our commitment 

At Creative Youth Network, we are committed to maintaining the trust and confidence of our visitors to our website, subscribers to our newsletter, show audiences who buy tickets through our website and course attendees who sign up through our website.

We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.

Creative Youth Network is the controller and responsible for your personal data (collectively referred to as “Creative Youth Network”, “we”, “us” or “our” in this privacy policy).

Creative Youth Network may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 25/05/2018.

We have appointed a Data Protection Lead Manager who is responsible for overseeing questions in relation to this privacy policy.  If you have any questions about this privacy policy, including requests to exercise your legal rights, please contact the Data Protection Lead Manager using the details set out below:

Email address: [email protected]

Postal address: Creative Youth Network, 20 Old School House, The Kingswood Estate, Britannia Road, Bristol BS15 8DB

What we collect

We may collect the following information:

• Name and job title
• Contact information including email address and telephone number
• Demographic information such as postcode, preferences and interests
• Other information relevant to event bookings or course sign ups, including age

Website visitors

When you visit www.creativeyouthnetwork.org.uk we use Google Analytics to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is processed in a way which does not identify anyone. We do not make any attempt to find out the identities of those visiting our website. You can find out more about how cookies are used on this website in the Cookies Policy below.

If we do want to collect personally identifiable information through our website, we are up front about this. You can find out Ticketing Data Policy below.

Website Cookies

A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences. 

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system. 

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. 

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

List of Cookies

Here is a list of the cookies we use on your site and the purpose they serve.

Cookie Name Used by Description Expiration __utma Google Analytics Stores the amount of visits of a user, the time of their first visit, the previous visit, and the current visit. It does not contain any personal information and is used only for analytical purposes.   2 years from set/update __utmz Google Analytics This performance cookie stores where a user came from (eg. search engine, search keyword, link). 6 months from set/update _ga and _gid Google Analytics Used to distinguish between website users in Google Analytics. 2 years and 2 hours _gat_UA-XXXXXXXX-X (where the Xs are replaced by the Google Analytics ID number) Google Analytics Used to moderate calls to the Google Analytics service. 1 minute __unam ShareThis Set as part of the ShareThis service and monitors "click-stream" activity, e.g. web pages viewed, navigation from page to page, time spent on each page etc. The ShareThis service only identifies a user if they have separately signed up with ShareThis for a ShareThis account and given them consent. Checks how long you stay on a site: when a visit starts, and ends. It does not contain any personal information and is used only for analytical purposes. 14 months cc_cookie_accept Website Stores whether the user has accepted the cookie message or not. 365 days ASP.NET_SessionId Website Used for authenticating a user's session after logging in. Closes when you exit the browser. End of session ARRAffinity Website Tells our infrastructure which server to handle the request. End of session MemberLoggedIn Website A binary flag which stores whether a user is logged in or not. End of session ai_session and ai_user Website Tracks users as they navigate the website predominately for infrastructure performance insights. 1 day DisplayName Website Keeps track of a donors preference to show their name during a Direct Debit. End of session IDE,  DSID, _ct_rmm Doubleclick.net These cookies are managed by DoubleClick, an advertising platform we use to display adverts. They help us identify which visitors to our website have seen or clicked one of our adverts. 2 years from set/update __cfduid CloudFlare Identify individual clients behind a shared IP address and apply security settings on a per-client basis 365 days

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

We are also on a number of social media pages. Although this policy covers how we will use any data collected from those pages, it does not cover how the providers of social media websites will use your information. Please ensure you read the privacy policy of the social media website before sharing data and make use of the privacy settings and reporting mechanisms to control how your data is used.

Wi-fi

When you use our Wi-fi on any of our sites, we may collect data about:

• your device
• the volume of data which you use
• the websites and applications which you access
• your usage by access time, frequency and location.

We use Spider Group Ltd, our business tech support contractor, to process this information. We do this in order to measure, monitor and manage wifi usage.

You can find information about Spider Group Ltd’s privacy policy here.

Mailing lists

As part of the registration process for our newsletters, we collect personal information. We use that information to deliver the newsletter (e.g. your email address), to tell you about the services you’ve asked us to tell you about (e.g. through our vacancies newsletter), to contact you if we need to obtain or provide additional information, to check our records are right and to check every now and then that you’re happy and satisfied with our services. We don’t rent or trade email lists with other organisations or businesses.

We use a third-party provider, MailChimp based in the United States, to deliver our newsletter. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see MailChimp’s privacy notice. You can unsubscribe to general mailings at any time of the day or night by clicking the unsubscribe link at the bottom of any of our emails or by emailing [email protected].  We understand Mailchimp is part of the Privacy Shield which requires them to provide similar protection to personal data shared between the European Economic Area and the US.  For further details, see European Commission: EU-US Privacy Shield.

Ticketing data

When you purchase a ticket or sign up to an activity through the Creative Youth Network website, your name and email address will be stored in our Box Office system provided by Raising IT, based in the United Kingdom. We might also ask you to provide other information such as age, address, telephone number, organisation you work for, but this data is not mandatory for the purchasing of a ticket. You may, of course, purchase a ticket in person without supplying the aforementioned personal data. Please be assured that we do not share your personal details with any other company without your consent.

We may share anonymised personal information with other organisations, mainly our funders, who use this to analyse our audience development programmes, ticket sales and self-generated funding to understand the impact of the investment made in Creative Youth Network.

We also hold events, courses and performances in partnership with other organisations. We will let them know about your booking and share your name with them but they can’t contact you unless you have selected that you are happy to be contacted in the future by our partners.

Financial transactions

Any financial transactions you make on our website are handled by our payment service provider, Paypal. We share transactional data with Paypal only to the extent necessary for the purposes of processing your payments, refunding and dealing with complaints and queries relating to payments and refunds. You can find information about Paypal’s privacy policies here.

Our website provider

Your data may also be available to our website provider, Raising IT, to enable us and them to deliver their service to us, carry out analysis and research on demographics, interests and behaviour of our users and supporters to help us gain a better understanding of them to enable us to improve our services. This may include connecting data we receive from you on the website to data available from other sources. Your personally identifiable data will only be used where it is necessary for the analysis required, and where your interests for privacy are not deemed to outweigh their legitimate interests in developing new services for us. In the case of this activity the following will apply:

(a)        Your data will be made available to our website provider

(b)        The data that may be available to them include any of the data we collect through our website as described in this policy

(c)        Our website provider will not transfer your data to any other third party, or transfer your data outside of the EEA.

(d)        They will store your data for a maximum of 7 years.

Access to your personal information

You are entitled to view, amend, or delete the personal information that we hold. Email your request to [email protected] or by post to Creative Youth Network, 20 Old School House, The Kingswood Estate, Britannia Road, Bristol, BS15 8DB.

Please also let us know if the personal information that we hold about you needs to be corrected or updated.

Complaints

If you have a complaint about us, or the treatment of your data, you can contact the Charity Commission. The Charity Commission is the independent watchdog for charities. You can make a complaint about a charity on their website at www.charity-commission.gov.uk.

Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.