Last updated: 17 August 2026
This privacy policy explains how M24 Arts Limited collects, uses and protects personal information when you visit our website, contact us, make a purchase, book a workshop or use our services.
Who we are
M24 Arts Limited is the data controller. We are registered in England and Wales under company number 08036934. Our registered office is 211 Manchester New Road, Middleton, Manchester, England, M24 1JT, and our trading address is Unit 3, Pioneer House, 7–15 Lodge Street, Middleton, M24 6AA.
Our ICO registration reference is ZA914621. For privacy questions or requests, email m24arts@gmail.com or call 0161 222 4039.
Information we collect
- Identity and contact information: such as your name, address, email address and telephone number.
- Booking and order information: the products or workshops you purchase, attendee numbers, order history, payment status and correspondence about your booking.
- Information you choose to provide: such as access requirements, relevant allergies, attendee age information or other details needed to help us deliver a workshop safely and appropriately.
- Account information: if you choose to create a website account.
- Messages and enquiries: information you send through email, telephone, social media or website forms.
- Technical and usage information: such as IP address, browser and device information, cookie identifiers, security logs and information about how the website is used.
Payment card details are processed securely by our payment provider, Stripe. M24 Arts Limited does not receive or store your full card number.
How and why we use your information
- To process orders, take payment and provide workshops or services: necessary to perform our contract with you or take steps at your request before entering a contract.
- To answer enquiries and provide customer service: necessary for our contract with you or our legitimate interest in running a responsive business.
- To keep financial, tax and transaction records: necessary to meet our legal obligations.
- To operate, secure and improve our website and services: our legitimate interest in protecting our business, preventing fraud and understanding how our services are used.
- To send marketing: only where we have your consent or another lawful basis to do so. You can unsubscribe at any time.
- To protect people and establish or defend legal claims: our legitimate interests and, where relevant, legal obligations.
Where information comes from
We usually receive information directly from you. We may also receive payment and transaction information from Stripe, order information generated by WooCommerce, or booking information from someone who books on your behalf.
Who we share information with
We share only what is reasonably necessary with trusted service providers and organisations, which may include:
- Stripe and other providers involved in processing payments and preventing fraud;
- our website, WooCommerce, hosting, email, security, analytics and technical-support providers;
- workshop tutors where they need attendee information to deliver a booked session;
- accountants, insurers, legal advisers and other professional advisers;
- HMRC, the ICO, law-enforcement bodies, courts or other authorities where required by law or necessary to protect legal rights.
We do not sell personal information.
International transfers
Some technology providers may process information outside the United Kingdom. Where this happens, we require an appropriate legal safeguard, such as UK adequacy regulations or approved contractual protections.
How long we keep information
- Order, payment and accounting records are normally kept for six years from the end of the financial year to which they relate, or longer where legally required.
- General enquiries and customer-service correspondence are normally kept for up to two years after the matter is closed.
- Workshop information that is only needed to run a particular session is normally deleted or anonymised within 90 days after the workshop, unless it forms part of an order record, safeguarding matter, complaint or legal claim.
- Website security logs are normally kept for up to 12 months unless needed to investigate an incident.
- Account information is kept while the account remains active and for a reasonable period afterwards.
- Marketing preferences are kept until you withdraw consent or object, with a minimal suppression record retained where necessary to respect your choice.
Cookies and website analytics
Our website uses essential cookies for functions such as security, account access, the basket and checkout. We may also use optional analytics or other non-essential cookies to understand website use. Where consent is required, optional cookies should not be set until you make a choice through the website’s cookie controls.
Your data-protection rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict your personal information; object to certain uses; receive information in a portable format; and withdraw consent where consent is the lawful basis. These rights are not absolute and legal record-keeping duties may still apply.
To exercise a right, email m24arts@gmail.com. We may need to confirm your identity before acting on a request.
Complaints
Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/ or by calling 0303 123 1113.
Security and policy updates
We use reasonable organisational and technical measures to protect personal information. We may update this policy when our services, providers or legal obligations change. The latest version will be published on this page with an updated date.