Legal
Privacy Policy
This policy explains what personal data Creative Steps collects, why we collect it, and the rights you have over it. Last updated 18 September 2026.
Who we are
Creative Steps provides dance schemes of work, lesson plans, printable handouts and music for UK primary schools. We are the data controller for the personal data described in this policy. You can contact us at info@creativesteps.co.
The information we collect
- Account details - your name and email address when you create an account, and your password in an encrypted form we cannot read.
- Membership details - whether your membership is active, when it started and when it renews or ends.
- Payment details - payments are taken by Stripe. We never see or store your full card number; we keep only the reference Stripe gives us.
- Enquiries - the name, email address and message you send us through a contact or training enquiry form.
- Usage information - basic records of which lessons and resources an account has opened, and technical logs needed to keep the site secure and working.
The site is for teachers and other adults. We do not ask for, and you should not send us, personal data about pupils.
Why we use it and our lawful basis
- Contract - to create your account, give you access to membership content, take payment and provide support.
- Legitimate interests - to keep the site secure, prevent misuse, answer enquiries and improve our resources.
- Legal obligation - to keep accounting and tax records.
- Consent - for optional cookies and any marketing emails you have asked to receive. You can withdraw consent at any time.
Who we share it with
We do not sell your personal data. We share it only with the service providers who help us run Creative Steps: Stripe for payments, our hosting and database provider for the site and your account, and our email provider for account and service emails. Each acts under contract and may only use the data to provide their service to us. We may also disclose data where the law requires it.
Some providers process data outside the UK. Where that happens, the transfer is protected by the UK International Data Transfer Agreement or equivalent safeguards.
How long we keep it
We keep account and membership data while your account is open, and for up to six years after your last payment where we need it for accounting records. Enquiry messages are kept for up to two years. You can ask us to delete your account at any time.
Your rights
Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, ask us to restrict or stop certain uses, object to processing based on legitimate interests, and ask for your data in a portable format. Email info@creativesteps.co and we will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
We use a small number of cookies and similar storage. Full details, and how to change your choice, are in our cookie policy.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed, and we will tell members by email about significant changes.
