Who we are

Martin McAssey Glass is a stained glass workshop and tuition service run by Martin McAssey. Our website address is www.martinmcassey.co.uk.

Data controller: Martin McAssey
Address: The Learning Centre, Abbeydale Industrial Hamlet, Abbeydale Road South, Sheffield, S7 2QW
Email: glass@martinmcassey.co.uk
ICO registration reference: ZC211250

What personal data we collect and why

Booking enquiries and reservations

When you book a workshop or course through our website, we collect your name, email address, phone number, and the details of your booking. We use this information to confirm your booking, send you joining instructions, and contact you about your course. The legal basis for this processing is the performance of a contract (Article 6(1)(b) UK GDPR).

Payments

Payments are processed securely by Stripe. We do not store your card details on our systems. Stripe may retain payment data in accordance with their own privacy policy and PCI DSS obligations. The legal basis for this processing is the performance of a contract (Article 6(1)(b) UK GDPR).

Gift vouchers

If you purchase a gift voucher, we collect your name and email address to send you the voucher and confirm your order. The same Stripe payment processing applies as above.

Contact form and email enquiries

If you send us an enquiry via our contact form or by email, we collect your name, email address, and the content of your message. We use this to respond to your enquiry. The legal basis is our legitimate interest in responding to people who contact us (Article 6(1)(f) UK GDPR). We do not add you to any mailing list without your explicit consent.

Analytics

We use Google Analytics 4 to understand how visitors use our website. This collects anonymised data such as pages visited, time on site, and approximate location. Google Analytics uses cookies. Analytics cookies are only set if you agree to them using the consent banner shown when you first visit. The legal basis is your consent (Article 6(1)(a) UK GDPR). You can change or withdraw your choice at any time using the cookie preferences link on our site.

Cookies

Our website uses cookies to provide core functionality (such as keeping your booking session active) and to collect anonymised analytics data via Google Analytics. When you first visit, a consent banner lets you accept or decline non-essential cookies. Essential cookies needed to run the site and remember your choice are always set. You can change your preferences at any time. Disabling cookies may affect some website features.

Health and accessibility information

If you tell us about a disability, health condition or pregnancy so that we can adapt your tuition or keep you safe in the studio, we record only what is necessary for that purpose. This is special category data under UK GDPR. The legal basis is your explicit consent (Article 9(2)(a)), which you may withdraw at any time. We delete these notes one year after your last attendance.

Who we share your data with

We do not sell or rent your personal data to third parties. We share data only with the following service providers as necessary to operate our business:

• Stripe — for payment processing
• Google — website analytics, and encrypted off-site backups of our website
• IONOS — website hosting and email services
• Mailchimp (Intuit) — newsletter delivery, where you have subscribed
• Our tutors — who receive only the register for the sessions they teach

How long we keep your data

Financial transaction records (date, amount and reference) are retained for six years to meet HMRC requirements. Student contact details and booking histories are deleted three years after your last course, workshop or enquiry. Contact enquiries are retained for twelve months after the last correspondence, then deleted. Analytics data is retained for 14 months in Google Analytics before being automatically deleted.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Rectify any inaccurate data
• Erase your data (“right to be forgotten”), subject to legal retention obligations
• Restrict processing of your data
• Object to processing based on legitimate interest
• Data portability — receive your data in a machine-readable format

To exercise any of these rights, please contact us at glass@martinmcassey.co.uk. We will respond within one month.

Right to complain

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK data protection regulator, the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint or call 0303 123 1113.

Changes to this policy

We may update this privacy policy from time to time. The current version is always available at www.martinmcassey.co.uk/privacy-policy. This policy was last updated in July 2026.