Cambridge Community Arts
Cambridge Community Arts

Privacy policy

Privacy notice

Cambridge Community Arts is committed to protecting and safeguarding your personal data. As part of this commitment, we have updated our privacy policy to meet the high standards of the new European data protection law, known as the General Data Protection Regulation (GDPR). Our updated policy explains your rights under this new law.

The Cambridge Community Arts website collects data through forms to enable you to contact us or apply for one of our courses, it does not use cookies.

Social Media
CCA uses Facebook and Twitter to communicate with those people who voluntarily choose to engage in this way.  No data is collected via Social Media and followers are free to withdraw from our social media sites when they wish.


 What information do we hold?
We hold personal sensitive data shared with us by our learners.

 How is it being held?
This data is held in an encrypted form on-line on a secure cloud platform, that meets GDPR requirements.  We can provide the security policy of the platform on request.  Where information is provided on paper this is stored in a locked filing cupboard until it can be put on the system and then paper-based data is destroyed.

How is it collected?
Information is voluntarily shared by Learners during the enrolment process, by completing an Expression of Interest Form on paper or online, by telephone and in a meeting.

Why is it collected and what do we use this data for?
We use this data to identify people, check their eligibility for funded places and their suitability for their course of choice. We use personal data for direct communications and also to analyse and demonstrate our social impact.  Details of health challenges are used to ensure emotional safety of learners on our courses.

Who do we share this data with?
Some personal sensitive data is shared with our educational and funding partners. This is to check for eligibility and equality monitoring. No details of health challenges are shared with third parties.

How long do we keep this data?
It is important that we hold data relating to learners who are on our current courses. We keep details of our learners for three years when engagement with CCA finishes.  Our education and funding partners have individual policies that specify how long they keep shared data.


 We hold data on a spreadsheet of organisations and individuals who have expressed an interest in our work and requested that we send them information on our courses.

What information is being collected?
We collect contact details of individuals in organisations who work in Arts, Education and Health sectors.

Who is collecting it?
CCA directly researches relevant and appropriate contacts with a shared interest in the benefits of our work.

How is it collected?       
CCA researches public information and records details voluntarily shared by interested parties in person, by email and telephone.

Why is it being collected?           
To enable us to effectively market our courses to people who are at risk of social isolation that we could not contact directly.

How will it be used?
To distribute information about CCA courses.

Who will it be shared with? 
We do not share our contacts database with any third parties.

Retention period
Contacts are renewed annually and retained until CCA receive requests for removal or have marketing materials returned.


What information is being collected?
We collect personal data and some personal sensitive data relating to staff, volunteers and trustees.

Who is collecting it?
CCA collects the data directly.

How is it collected?       
It is collected through the recruitment process, on paper, in person and by email.

Why is it being collected?           
Personal data is collected for administrative and direct communication purposes.

How will it be used?      
It is used for verification and identification purposes, suitability for selection and administrative purposes.  For individuals working directly with Learners it is used to obtain a CRB check with their consent.

Who will it be shared with?       
Trustees’ personal data is shared with regulatory bodies;  For individuals working directly with Learners it is submitted to a third party CRB check service. Staff personnel records are not shared with any external parties.

Retention period
Data is held for 10 years from the end of the final contract period.

 Who is the CCA Data Controller?
Jane Rich, CCA, 16-18 Arbury Court, Cambridge CB4 2QJ  Tel. 01223 631824

 Your rights
If you wish to exercise any of your rights, as listed below please write to us at

  1. Access to your personal information;

  2. Objection to processing of your personal information;

  3. Objection to automated decision-making and profiling;

  4. Restriction of processing of your personal information;

  5. Your personal data portability;

  6. Rectification of your personal information; and

  7. Erasure of your personal information.

 If you make a request relating to any of the rights listed above, we will consider each request in accordance with all applicable data protection laws and regulations. No administration fee will be charged for considering and/or complying with such a request unless the request is deemed to be excessive in nature.

Upon successful verification of your identity you are entitled to obtain the following information about your own personal information:

  1. The purposes of the collection, processing, use and storage of your personal data.

  2. The source(s) of the personal information, if it was not obtained from you.

  3. The categories of personal data stored about you.

  4. The recipients or categories of recipients to whom your personal data has been or may be transmitted, along with the location of those recipients.

  5. The envisaged period of storage for your personal data or the rationale for determining the storage period.

  6. The use of any automated decision-making and/or profiling.

 You can make the above request by emailing or by writing to:  Data Protection Officer, Cambridge Community Arts, 16-18 Arbury Court, Cambridge CB4 2QJ

We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate.

We hope we would be able to resolve any complain that you have, but if you are not happy you can contact the ICO via

 Keeping your information up to date
To make sure we always have the most up-to-date information about how to contact you, we may also, from time to time, update your records to reflect any changes to your personal information.

How do you remove yourself from our system?
All our data is collected and stored manually, therefore, to remove yourself from our systems please contact our Data Controller: Jane Rich with REMOVE ME in the subject area or write to Jane Rich, Data Controller, CCA, 16-18 Arbury Court, Cambridge CB4 2QJ.