Privacy notice

This notice explains how Madam Makery Community CIC uses your personal information if you take part in a workshop or event, book with us, or get in touch. It’s written for the people we collect data about, workshop participants, booking contacts and enquirers, alongside our internal Data Protection Policy which governs how we handle data day to day.

Who we are

Madam Makery Community CIC, company number 17115070, registered address 124 City Road, London EC1V 2NX, is the data controller for the information described in this notice.

Our Data Protection Lead is Nathalie Clément (nathalie.clement@gmail.com), with Jamie Swift Drake (jamieswiftdrake@gmail.com) as the alternate contact.

What information we collect

Depending on how you interact with us, we may collect:

  • Your name, address, email and phone number
  • Date of birth
  • Booking and payment details
  • Business information, if you’re attending as part of a corporate booking
  • With your explicit consent, and only where relevant to running an accessible or inclusive session: ethnicity, gender identity, health or disability information, or sexual orientation

If a partner organisation referred you to us

Some of our workshops run through a referral or delivery partner, such as a charity, mental health service, or community organisation coordinating the session. Where that’s the case, we may receive some of your information directly from that partner rather than from you. If so, we’ll tell you which partner referred you and what information they shared with us, normally when we first contact you. The same rights and protections in this notice apply, whichever way we received your information.

Why we collect it, and our legal basis

We use your information to:

  • Deliver the workshop or service you’ve booked (legal basis: contract)
  • Manage applications and participation, including access requirements (legal basis: contract and, for health or disability information, your explicit consent)
  • Report to funders, usually anonymised or aggregated (legal basis: legal obligation and legitimate interests)
  • Send you marketing updates, if you’ve opted in (legal basis: consent, which you can withdraw at any time)
  • Meet our legal and safeguarding responsibilities (legal basis: legal obligation)

We don’t use your information for anything beyond these purposes.

Who we share it with

We may share your information with:

  • Funders, for reporting, anonymised or aggregated wherever possible
  • Delivery partners, only where necessary to run a joint programme
  • Service providers who process data on our behalf, such as our CRM or accounting software
  • Regulators or authorities, if we’re legally required to

We don’t sell or trade your information.

How long we keep it, and where it’s stored

We keep programme participant data for up to 6 years from your last contact with us, for funder and audit requirements. Marketing contacts are kept until you withdraw consent. Data is securely deleted or anonymised once we no longer need it.

We store your information on password-protected systems and cloud services such as Google Workspace. Some of these providers may store data outside the UK; where this happens, we rely on their UK GDPR-compliant safeguards.

Your rights

You have the right to:

  • Be informed how your data is used (this notice)
  • Access the data we hold about you
  • Have inaccurate data corrected
  • Request erasure of your data
  • Restrict or object to how we use it
  • Data portability, where we’re processing it based on consent or contract by automated means
  • Not be subject to a decision based solely on automated processing (we don’t currently use this)
  • Withdraw consent at any time

To use any of these rights, contact nathalie.clement@gmail.com. We’ll respond within one calendar month.

You also have the right to complain to the Information Commissioner’s Office (ico.org.uk) if you think we’ve not handled your data correctly.

Photos and marketing images

We take photographs and video at workshops and events for marketing, social media and funder reporting. We’ll ask for your consent before photographing or filming you, and explain how the images will be used. You can opt out, and you can ask us to remove a photo or video featuring you at any time by contacting the Data Protection Lead.

Questions or complaints

If you have any questions about this notice, or want to raise a concern about how we’ve handled your data, contact our Data Protection Lead, Nathalie Clément (nathalie.clement@gmail.com). If your concern involves her, or you’d rather not raise it with her, contact Jamie Swift Drake (jamieswiftdrake@gmail.com) instead.

We review this notice annually, or sooner if our practices or the law change.