Data controller
Web Canvas Point is the data controller. Address: 67 Kent Street Cross Inn CF72 3FR United Kingdom. Email: info@webcanvaspoint.digital. Telephone: 07950191179.
What we collect
From an enquiry we collect your name, email address, chosen sitting, preferred date, whether you want the Cross Inn room or a video seat, and the message you write. If you book, we also keep payment references (not full card numbers — those stay with the payment provider you use), attendance notes, and any charts you send for a private review. If you telephone, we may write down a callback number.
On this website we may store a cookie preference under a brand-prefixed key in your browser. If you accept analytics cookies, a privacy-respecting analytics cookie may record pages viewed. If you reject, we do not set analytics cookies. See the cookie notice.
Why we use it
We use enquiry and booking data to reply, to hold a seat, to send the blank session sheet, and to run the sitting you asked for. That is our contract with you, or steps you request before a contract. We keep a short attendance record so we know who was in the room that morning. We use a legitimate interest in running a tiny tuition practice to keep enough records to handle refunds and complaints.
Chart images you send are used only to prepare and deliver that private review, unless you later ask us to use an anonymised fragment in teaching — which we will not do without a separate yes.
Retention
Unsuccessful enquiries are deleted after 12 months. Booking records, deposit receipts, and refund notes are kept for six years after the sitting, which matches how long fee disputes can surface. Charts from a private review are kept for 18 months so you can book a follow-up against the same week, then deleted unless a complaint is still open. Cookie choices live in your browser until you clear them.
Who we share with
We do not sell your details. We share what is needed with an email host, a payment provider if you pay electronically, and (for video seats) the live-call provider used for that morning. If the law requires it, we will share information with a regulator or court.
International transfers
Some email or video providers may store data outside the United Kingdom. Where that happens we rely on the provider’s UK-approved transfer mechanism, such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses with additional checks. Ask us if you want the current list of processors for a sitting you have booked.
Your rights
You may ask for a copy of the data we hold, corrections, deletion where we have no need to keep it, restriction, objection to legitimate-interest processing, and portability of data you provided. You may complain to the Information Commissioner’s Office. We will still need to keep some booking records where the law or a refund trail requires it.
Children
Sittings are for adults. We do not knowingly collect data about children in order to teach them chart reading.