PRIVACY POLICY

1. Introduction

Creative Intellectual Property Charity (“we”, “us”, “our”) is committed to protecting the privacy of individuals who visit CreativeIP.org and use our services. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data controller

The data controller is Creative Intellectual Property Charity, a Charitable Incorporated Organisation (application reference 5289637). Address: Floor 2, 53 Courtfield Gardens, London SW5 0NF. Contact: legal@creativeip.org.

3. What data we collect

We may collect the following personal data:

• Name and email address (when you register or contact us)
• Organisation name and role (when provided)
• Account credentials (email and hashed password)
• Course progress and certification records
• Core Data Record information (asset and rights declarations)
• Technical data (IP address, browser type, pages visited) collected through cookies and analytics

4. How we use your data

We use your personal data to:

• Provide and maintain your account
• Track course progress and certification status
• Manage Core Data Records and Rights Registry entries
• Respond to enquiries and support requests
• Send service-related communications (not marketing)
• Improve the Site and our services
• Comply with legal obligations

5. Legal basis for processing

We process your personal data on the following legal bases:

• Consent — where you have given clear consent for us to process your data for a specific purpose
• Contract — where processing is necessary for a contract with you (e.g. certification services)
• Legitimate interests — where processing is necessary for our legitimate interests, provided these are not overridden by your rights
• Legal obligation — where processing is necessary to comply with the law

6. Data sharing

We do not sell your personal data. We may share data with service providers who assist us in operating the Site (hosting, authentication, database services) under appropriate data processing agreements. We may disclose data where required by law or to protect the rights and safety of the charity and its users.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Account data is retained while your account is active. Certification records are retained for the duration of the certification and a reasonable period thereafter.

8. Your rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Object to or restrict processing of your data
• Request data portability
• Withdraw consent at any time (where consent is the legal basis)

To exercise any of these rights, contact legal@creativeip.org.

9. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Authentication is handled through Supabase with encrypted credentials.

10. International transfers

Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

11. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk.

12. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be published on this page with a revised date. Your continued use of the Site after changes are published constitutes acceptance of the revised policy.

13. Contact

Questions about this Privacy Policy should be directed to legal@creativeip.org.

Creative Intellectual Property Charity
Floor 2, 53 Courtfield Gardens, London SW5 0NF