Privacy policy.

Last updated: 29 October 2025
Website: https://www.oxfordcreativewriting.co.uk/
Data Controller: Rebecca Abrams (trading as Oxford Creative Writing)

1. Introduction

Oxford Creative Writing (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website or communicate with us. It also describes your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Data Controller Contact

Data Controller: Rebecca Abrams
Trading Name: Oxford Creative Writing
Email: rebecca@oxfordcreativewriting.co.uk

3. Data We Collect

We only collect and process personal data that you provide voluntarily, or that is automatically gathered when you use our website after you provide consent, including:

  • Contact Data – name, email address, and any information you provide via contact or registration forms.

  • Technical Data – IP address, browser type, operating system, and device information.

  • Usage Data – details about your interactions with the site, such as pages visited, session duration, and referring URLs.

  • Marketing Data – consent preferences and marketing communication choices.

We do not intentionally collect sensitive or special category data.

4. How We Use Your Data

We use your personal data for the following lawful purposes:

To respond to contact enquiries - Legitimate interest

To deliver courses or services you have purchased - Contract

To improve our website and user experience - Legitimate interest

To measure marketing performance via analytics and advertising tools - Consent

To comply with legal obligations - Legal obligation.

We will only use your personal data for the purposes for which it was collected unless we reasonably consider that another purpose is compatible with the original one.

5. Google Services and Consent Mode

Our website uses Google Tag Manager, Google Ads, and Google Consent Mode v2 (Basic) to manage tracking technologies and advertising performance.

Google Tag Manager

This tool helps us deploy and manage website tags efficiently. It does not collect personal data directly.

Google Ads

We use Google Ads to promote our courses and measure campaign success. Your Data is only collected for advertising purposes if you have given consent through our cookie banner.

Google Consent Mode v2 (Basic)

This technology adjusts how Google tags behave based on your cookie consent preferences:

  • If consent is granted, cookies may store data for analytics and advertising.

  • If consent is denied, Google collects only anonymous, non-identifiable data for aggregate reporting.

For more information, please see:

6. Cookies

What Are Cookies?

Cookies are small text files stored on your device to improve your browsing experience and help us understand how the site is used. For more information, see our Cookie Policy.

Types of Cookies Used

Necessary Cookies - Enable core website functions - Consent preferences.

Analytics Cookies - Measure website performance and visitor behavior (only set with consent). - Google Analytics

Advertising Cookies - Personalise ads and measure campaign effectiveness (only set with consent). - Google Ads

Cookie Duration

  • Session cookies expire when you close your browser.

  • Persistent cookies may remain for up to 12 months unless deleted manually.

Managing Cookies

You can accept or reject non-essential cookies via the cookie consent banner displayed when you first visit our website.
You can also change or withdraw consent at any time by selecting “Consent Preferences” in our Cookie Policy.

You can also control or delete cookies through your browser settings:

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal, accounting, or reporting requirements.

Contact form submissions and course booking data are typically retained for up to 12 months, unless otherwise required by law.

8. Data Sharing

We may share data with trusted third parties who assist in operating our website or delivering services, including:

  • Website hosting providers

  • Email and communication service providers

  • Google (for analytics and advertising, subject to your consent)

We do not sell or rent your personal data.

All third parties are required to respect your data and process it securely and lawfully.

9. International Data Transfers

Some of our service providers, including Google, may process data outside the UK/EEA.
These transfers are safeguarded using Standard Contractual Clauses (SCCs) or equivalent mechanisms approved by the Information Commissioner’s Office (ICO).

10. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Rectify inaccurate or incomplete information

  • Request erasure of your personal data

  • Restrict processing under certain conditions

  • Object to processing based on legitimate interests or direct marketing

  • Withdraw consent at any time (without affecting prior lawful processing)

  • Complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/

11. Security

We take appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access.
While we strive for complete security, no system is entirely immune to cyber risks.

12. Updates to This Policy

We may update this Privacy Policy periodically to reflect legal or technological changes.
The updated version will always be available on this page with a revised “Last updated” date.

13. Contact Information

If you have questions or concerns about this policy or how your data is handled, please contact:

Rebecca Abrams
Email: rebecca@oxfordcreativewriting.co.uk