Privacy policy

This policy explains how The Create Foundation (“Create”, “we”, “us”) handles personal information when you visit createfoundation.co.uk, contact us, book catering or refer someone to the Create Academy. We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

The Create Foundation is the data controller for the personal information described in this policy. You can contact us about privacy at hello@createfoundation.co.uk or by post at The Create Foundation, Unit 4, Hope Street Works, Leeds, LS2 7XY.

Information we collect

• Information you give us, such as your name, email address, phone number and the content of your message when you email us or use a form on this site.
• Referral information, limited to what is needed to make first contact (first name, contact details, nearest hub and any notes you choose to share).
• Booking information for catering and events, such as event dates, guest numbers, dietary and allergen requirements and invoicing details.
• Technical information such as browser type, device and pages visited, collected through standard server logs by our hosting provider for security and performance.

How our website forms work

Forms on this website do not store your information on our web servers. When you submit a form, your own email application opens with a pre-filled message to us. Your information only reaches us if you choose to send that email.

How we use your information

• To respond to your enquiry, quote for and deliver catering services.
• To contact people who have been referred to, or have applied for, the Create Academy.
• To process job applications.
• To keep our website secure and working properly.
• To meet our legal, accounting and reporting obligations as a Community Interest Company.

Our lawful bases

We rely on contract (to provide services you request), legitimate interests (to respond to enquiries and run our organisation), legal obligation (for example, financial records) and, where appropriate, consent. Where we handle special category information, for example health information shared to support a trainee, we do so only with explicit consent or where another lawful condition applies.

Sharing your information

We never sell your personal information. We share it only with trusted service providers who help us operate (such as email, hosting and accounting providers) under appropriate data processing agreements, or where required by law. With a trainee’s agreement, we may share relevant information with referring organisations or prospective employers to support their progress.

Cookies and analytics

This website does not use advertising or tracking cookies. Fonts are loaded from Google Fonts, which may record your IP address to deliver the font files. Our AI help assistant runs entirely in your browser using pre-set answers and does not record your questions.

How long we keep information

We keep enquiries for up to 24 months, catering and financial records for six years, and trainee records for as long as needed to provide support and meet funding and reporting requirements, after which they are securely deleted.

Your rights

You have the right to access your personal information, ask us to correct or delete it, restrict or object to its use, and request data portability. Where we rely on consent you can withdraw it at any time. To exercise any of these rights, email hello@createfoundation.co.uk.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page.