WEBSITE PRIVACY NOTICE
Effective Date: 1 April 2026
CURTIS BROWN CREATIVE LTD of Cunard House, 15 Regent Street, London, SW1Y 4LR (“We” “our”, “us”, “Company”) manage and administer this website in respect of the Personal Data (as defined below) submitted by you in the provision of our services as a creative writing school (our “Services”) and when you visit our website curtisbrowncreative.co.uk (the “Website”). For the purposes of data protection laws we are the data controller. In this privacy policy “Group Company” means us, our subsidiaries or holding companies from time to time and any subsidiary of any holding company from time to time (as subsidiary and holding company are defined in s.1159 Companies Act 2006).
Our privacy notice tells you what Personal and Non-Personal Data we collect from you, how we collect them, how we protect them, how we disclose them, how you can access and change them, and how you can limit our disclosing of them. Our privacy notice also explains certain legal rights that you have about your data. Your access to and use of our Website is subject at all times to our Website Terms of Use.
This policy applies to information we collect:
It does not apply to information collected by:
Any capitalised terms not defined herein will have the same meaning as those defined elsewhere on our Website.
'PERSONAL DATA' (PD) means any information relating to an identified or identifiable natural person;
When you visit our Website we may ask you to provide or otherwise collect the following Personal Data about you and your interests:
Personal Data Category – Personal Data
“Contact Information” – Depending on the page of the Website you visit, we may ask you to provide details of your name, telephone number, address, email address.
“Submissions Information” – Draft manuscripts, scripts, or other creative material submitted via the Website (or other means) for us to review.
– Professional details, cover letters, CVs and manuscript synopses.
“Employment Information” – Job title, prior experience, references, CV and or other information relating to your personal professional employment or working history.
“Financial Information” - Bank details, payment details, transaction history and associated information required to complete financial transactions at your request.
“Interests Information” – Personal interests, preferences, feedback and survey response(s).
“Technical Information” – Details of specific content and or pages you visit on our Website (including duration of visits), technical information including the Internet Protocol (IP) address used to connect your computer to the Internet, device(s) you use to access our Website, your geographical location.
We receive information including Personal Data about you in three ways: (i) you may provide us information, for example, submissions and supporting information, complete forms on our Website to enter competitions or submit surveys, correspond with us by phone, email or otherwise, or subscribe to receive our marketing communications; (ii) we may collect information about you in the course of your visiting our Website, for example, Technical Information through the use of cookies and other technologies; and (iii) third parties, for example, analytics and technical services providers or previous employers, may provide us information about you where you have given them consent to do so or they have another lawful basis to share this information with us.
How we use your information:
Disclosing Your PD to Third Parties
Disclosure of your information to third parties: We may need to share your PD with third parties (including to our service providers) only to the extent necessary to run our business, to fulfil any contracts we enter into with you, where required by law or to enforce our legal rights.
Disclosing Your PD to Service Providers and or Contractors
Sometimes we give your PD to service providers and/or contractors and/or advertising providers we hire/utilise to provide services to us. These service providers, contractors and/or advertising providers may include but are not limited to payment processors, data management services, help desk providers, accountants, law firms, courts, auditors, Meta, Google, Amazon, Klaviyo and other email service providers.
Disclosure of your information for legal reasons
We may disclose your PD for the following reasons:
Indicating possible criminal acts or threats to public security to a competent authority
If we suspect that criminal or potential criminal conduct has occurred, we will in certain circumstances need to contact and share your PD with an appropriate authority, such as the police. This could be the case, for instance, if we suspect that we fraud or a cybercrime has been committed or if we receive threats or malicious communications towards us or third parties. We will generally only need to process your information for this purpose if you were involved or affected by such an incident in some way.
In connection with the enforcement or potential enforcement of our legal rights
We may need to use and share your information in connection with the enforcement or potential enforcement of our legal rights. Our legal rights may be contractual (where we have entered into a contract with you) or non-contractual (such as legal rights that we have under copyright law or tort law).
For ongoing compliance with laws, regulations and other legal requirements
We will use and process your information in order to comply with legal obligations to which we are subject. For example, we may need to disclose your information pursuant to a court order or subpoena if we receive one.
Legal obligation(s):
Legal obligations to disclose information which are part of the laws of England and Wales or if they have been integrated into the United Kingdom’s legal framework (for example in the form of an international agreement which the United Kingdom has signed).
Legitimate interest
Where we have a legitimate interest in fulfilling our business and administrative purposes.
Disclosures to Successors
If our business is sold or merges in whole or in part with another business that would become responsible for providing the website to you, we retain the right to transfer your PD to the new business. The new company would have the right to use your PD according to the terms of this privacy notice and any changes to this privacy notice as instituted by the new business.
How long we retain your PD: for no longer than necessary, taking into account any legal obligations we have, any other legal basis we have for using your information (e.g. your consent, performance of a contract with you or our legitimate interests as a business).
Once data is anonymised we may hold it indefinitely, without further notice to you.
Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology
For further information, visit allaboutcookies.org.
How do we use cookies?
Our Company may use cookies in a range of ways to improve your experience on our website, including:
By agreeing to accept our use of cookies, you are giving us and the third parties with whom we partner permission to place, store, and access some or all the cookies described below on your computer and/or mobile device.
We may also use cookies for the following:
Identifying the areas of our Website that you have visited.
We may also use the following cookies as follows:
FACEBOOK/META PIXEL
STRIPE
SWELL
Most web browsers can be set to disable the use of cookies. However, if you disable cookies, you may not be able to access features on our Website correctly, or at all.
Web Beacons
Pages of the Website and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, Pixel tags, and single-Pixel gifs) that permit Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).
We use commercially reasonable measures to secure information collected through the Website. Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your PD, we cannot guarantee the security of your PD transmitted to our Website. Any transmission of PD is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.
We restrict access to PD to our employees, contractors and agents who need to know that information to transmit, store or process it, who are subject to contractual confidentiality obligations consistent with this privacy policy, and who may be disciplined or terminated if they fail to meet these obligations.
If any information in our possession or under our control is compromised because of a security breach, we will take reasonable steps to investigate the situation and, where appropriate, notify those individuals whose information may have been compromised and take other steps in accordance with applicable laws or regulations.
Transfers of your information outside the UK or European Economic Area: In certain circumstances we transfer your information outside of the UK or European Economic Area. Where we do so, we will ensure appropriate safeguards are in place, e.g.,
Adequacy decisions. We may transfer your PD to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission and/or the UK Government (as applicable).
Model clauses. Where we use certain service providers, we may use specific standard contractual clauses approved by the European Commission and/or the UK Government which give PD the same protection it has in Europe and/or the UK.
Under certain conditions, you have the right to ask us to fulfil one or more of the following requests. We may ask you for proof of identity or other additional information before doing so.
You or your authorised agent can submit a data protection rights request and we will assess any request to exercise these rights on a case by case basis. You have the right to access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability. Please note that some rights are not absolute, and there may be circumstances in which we are not legally required to comply with a request because of relevant exemptions provided for in applicable data protection legislation or are unable to comply due to data protection legislation. To exercise these rights, please email help@curtisbrowncreative.co.uk, with details of your request. If submitting a subject access request by email please ensure that you specify the type of request in the subject line of your email. We may need to request specific information from you to help us confirm your identity. This is an appropriate security measure to ensure that PD is not disclosed to any person who has no right to receive it.
We reserve the right to change this privacy notice at any time. If we make material changes to how we treat our users’ PD, we will notify you in accordance with applicable law. The date the privacy policy was last revised is identified at the top of this page. You are responsible for periodically visiting our Website and this privacy policy to check for any changes.
Your continued use of our services constitutes your acceptance of any amendment of this privacy policy. If you reject any amendments to this privacy policy, we may still hold your PD on file, to adhere to applicable law.
If you have any questions about this about this Privacy Notice, want to exercise your rights, or you have complaints relating to our processing of your Personal Data, you should contact us by emailing at help@curtisbrowncreative.co.uk.