Privacy policy.

This policy is effective from November 2025.

1. Introduction and Scope

The ThreadPoint Foundation (and its commercial arm, ThreadPoint Studio) is committed to protecting the privacy and security of your personal data. This policy explains how we collect, use, and share personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

  • Data Controller: The data controller responsible for your personal data is Willow Williams of 27 Grosvenor Street, London, WC1N 3AX

  • Contact for Privacy Matters: Willow Williams, Director at hello@threadpoint.studio.

2. The Data We Collect

We collect and process data necessary for our operations, including running workshops, managing grants, and communicating with partners.

Contact Data Purpose and Activity: Name, email address, phone number, and organisation name (for booking workshops, licensing T-t-T materials, and responding to inquiries). Legal Basis for Processing: Necessary for performance of a contract (e.g., booking) or legitimate interests (responding to inquiries).

Financial/Transaction Data Purpose and Activity: Records related to grants, sponsorships, or book purchases. (Note: We do not store full credit card details.) Legal Basis for Processing: Necessary for performance of a contract and compliance with legal obligations (tax/accounting).

Workshop/Impact Data Purpose and Activity: Photos/Videos of workshop participants, testimonials, and impact survey results (for grants and reporting). Legal Basis for Processing: Legitimate interests (demonstrating impact for funding) or explicit consent (required for photos/videos of minors).

Marketing Data Purpose and Activity: Preferences for receiving newsletters or updates on our mission. Legal Basis for Processing: Consent (for direct marketing).

3. Data Related to Children (Workshop Participants)

We are highly sensitive to data concerning children.

  • We do not collect personal data (names, addresses) from children without the explicit consent of a parent or legal guardian.

  • Photography/Video: For all workshops, we rely on explicit, signed consent forms from parents/guardians before taking or using any images of participating children for promotional or reporting purposes.

  • Anonymity: In all public reporting (pitch decks, testimonials), children's names and identifying details are anonymized.

4. How We Use Your Data

We use your data primarily to:

  • Provide the services you have requested (e.g., delivering a workshop).

  • Process payments and fulfill orders (e.g., book sales).

  • Manage our relationship with you (e.g., responding to questions).

  • Demonstrate the social impact of the Foundation to partners and grant providers.

  • Send marketing communications (if you have given consent).

5. Sharing Your Data

We may share your data with:

  • Service Providers: Third parties who perform services on our behalf (e.g., secure payment processors, Squarespace hosting, email marketing platforms).

  • Legal/Regulatory Bodies: When required by law (e.g., HMRC for tax reporting).

  • Partners/Funders (Anonymized Data Only): We share aggregated, anonymized impact data and testimonials (e.g., number of children reached, general feedback) with corporate sponsors and grant bodies to secure future funding.

6. International Transfers

We primarily store and process data within the UK/EEA. If we transfer data outside the UK/EEA (e.g., using a US-based cloud service), we ensure it is protected by adequate safeguards (e.g., EU Standard Contractual Clauses, or the UK International Data Transfer Agreement).

7. Your Legal Rights (GDPR)

Under UK GDPR, you have the right to:

  • Access: Request a copy of the personal data we hold about you.

  • Rectification: Ask us to correct inaccurate or incomplete data.

  • Erasure (The Right to be Forgotten): Ask us to delete your data where there is no good reason for us to continue processing it.

  • Restriction: Ask us to suspend the processing of your data.

  • Data Portability: Request the transfer of your data to a third party.

  • Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your data.

8. How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us at hello@threadpoint.studio. You can also complain to the ICO (Information Commissioner's Office), the UK supervisory authority for data protection issues.

9. Changes to this Privacy Policy

We may update this policy from time to time. The latest version will always be posted on our website.