Privacy & Data Protection

Privacy Policy

How BLANK Canvas collects, uses, protects and retains personal information in accordance with GDPR and Irish data protection law.

LegalBLANK Canvas AcademyDublin, Ireland

Overview

BLANK Canvas Privacy Policy

Last Updated: June 2026

BLANK Canvas ("we", "our", "us") is committed to protecting your privacy and handling personal data in accordance with the General Data Protection Regulation (GDPR) and Irish data protection law.

Who We Are

BLANK Canvas is an after-school creative technology programme that enables children to design, create and showcase physical products using digital design and 3D printing technologies.

For the purposes of data protection law, BLANK Canvas is the Data Controller for the personal information described in this policy.

For any privacy-related queries, please contact:

Email: privacy@blankcanvas.ie

What Information We Collect

We may collect and process the following information:

Parents and Guardians

  • Name
  • Email address
  • Telephone number
  • School attended by child
  • Correspondence and enquiries
  • Consent preferences

Children Participating in Programmes

  • First name
  • School year/class
  • Creative work and project submissions
  • Portfolio materials
  • Photographs and videos (where consent has been provided)

Schools

  • Contact details for teachers, principals and school staff
  • Programme administration information
  • Communications relating to programme delivery

Website Visitors

When you visit our website, certain information may be collected automatically, including:

  • IP address
  • Browser type
  • Device information
  • Website usage information

How We Use Personal Information

We use personal information to:

  • Deliver our programmes and workshops
  • Communicate with schools and parents
  • Manage registrations and enquiries
  • Create student portfolios
  • Organise exhibitions and showcases
  • Improve our programmes and website
  • Meet legal and regulatory obligations
  • Send updates and marketing communications where consent has been provided

Lawful Basis for Processing

Under GDPR, we process personal data on the following legal bases:

Contract

Where processing is necessary to provide our services or respond to programme enquiries.

Legitimate Interests

Where processing is necessary for the operation and improvement of our programmes and website, provided those interests do not override individual rights.

Photography, Video and Student Work

We may create photographs, videos and portfolios showcasing programme activities and student achievements.

We will only use identifiable images, videos or student work where appropriate parental or guardian consent has been obtained.

Parents or guardians may withdraw consent at any time by contacting us.

Sharing Information

We do not sell personal information.

We may share personal information with trusted third-party service providers where necessary to operate our services, including:

  • Website hosting providers
  • Email communication providers
  • Cloud storage providers
  • Portfolio and collaboration platforms
  • Professional advisers
  • Regulatory authorities where legally required

All service providers are required to protect personal information appropriately.

Data Retention

We retain personal information only for as long as necessary for the purposes described in this policy.

Typical retention periods are:

  • Programme administration records: up to 7 years
  • Enquiries: up to 24 months
  • Marketing consent records: until consent is withdrawn
  • Student portfolios and project records: up to 3 years after programme completion unless otherwise requested

Where information is no longer required, it will be securely deleted or anonymised.

Your Rights

Under GDPR, you have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Request deletion of information
  • Restrict processing
  • Object to processing
  • Withdraw consent
  • Receive a copy of your information in a portable format
  • Lodge a complaint with the Data Protection Commission

The Data Protection Commission can be contacted at www.dataprotection.ie.

Website Analytics and Cookies

Our website may use cookies and analytics tools to help us understand how visitors use our website and to improve user experience.

Cookies are small files stored on your device.

You can control cookie preferences through your browser settings and through any cookie consent tools provided on our website.

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

Changes to this Policy

We may update this Privacy Policy from time to time.

Any changes will be published on this page together with the revised effective date.

Contact Us

If you have any questions regarding this Privacy Policy or how we handle personal information, please contact:

Email: privacy@blankcanvas.ie

If you are dissatisfied with how we handle your information, you may lodge a complaint with the Irish Data Protection Commission.