What’s On

Privacy Policy

Last updated: 1 March 2026

1. Who we are

This website is operated by Physical Lab, Ltd. (“we”, “us”, “our”).

Website address: https://www.physicallab.co.uk

Contact email: [insert contact email]

Physical Lab, Ltd. is committed to protecting your personal data and complying with the UK GDPR and, where applicable, the EU General Data Protection Regulation (GDPR).

2. What Personal Data We Collect

We collect personal data depending on how you interact with our website and services.

a) Applications & Contact Forms

When you apply for a workshop, residency, mentorship, or contact us, we may collect:

  • Name
  • Email address
  • Phone number (if provided)
  • Professional background
  • CV, biography, written statements
  • Artistic materials (including video links or portfolios)
  • Any information you voluntarily provide

This information is used solely to assess applications and communicate with you.

b) Newsletter Subscriptions

If you subscribe to our newsletter, we collect:

  • Name (if provided)
  • Email address

Your data may be processed via a third-party email marketing provider (e.g. Mailchimp or similar GDPR-compliant platform). You may unsubscribe at any time via the link provided in each email.

c) Payments

If you book a workshop, residency, mentorship, or other service, payments are processed securely through third-party providers such as:

  • Stripe
  • PayPal

We do not store full credit or debit card details on our servers.

Payment providers process your data in accordance with their own privacy policies and security standards.

d) Comments

When visitors leave comments on the site, we collect:

  • The data shown in the comment form
  • IP address
  • Browser user agent string

This information helps with spam detection.

An anonymised hash of your email address may be provided to the Gravatar service to check whether you use it. The Gravatar privacy policy is available at: https://automattic.com/privacy/.

3. Legal Basis for Processing (GDPR)

We process personal data under the following legal bases:

  • Consent — newsletter subscriptions and optional submissions
  • Contractual necessity — delivering workshops, residencies, and paid services
  • Legitimate interest — responding to enquiries and managing artistic programmes
  • Legal obligation — accounting and tax compliance

You may withdraw consent at any time.

4. How We Use Your Information

We use personal data to:

  • Review and process applications
  • Communicate about bookings and participation
  • Deliver artistic training and residency programmes
  • Send newsletters (if subscribed)
  • Process payments
  • Maintain website functionality and security
  • Comply with legal obligations

We do not sell or rent personal data.

5. Cookies

Our website uses cookies to:

  • Improve user experience
  • Enable login functionality
  • Save comment details (if opted in)
  • Maintain website security

If you leave a comment, you may opt in to saving your details in cookies for one year.

Login cookies last two days (or two weeks if “Remember Me” is selected). Screen preference cookies last one year.

You may disable cookies in your browser settings at any time.

6. Embedded Content from Other Websites

Pages on this site may include embedded content (e.g. videos, images, articles). Embedded content behaves as if you visited the external website directly.

These websites may collect data about you, use cookies, and monitor interaction, especially if you are logged into their platform.

7. Who We Share Your Data With

We may share your data with:

  • Payment processors (Stripe, PayPal)
  • Email marketing providers (e.g. Mailchimp)
  • Website hosting providers
  • Spam detection services

All providers are required to implement appropriate data protection safeguards.

If you request a password reset, your IP address will be included in the reset email.

8. Data Retention

We retain personal data as follows:

  • Application data: up to 3 years unless deletion is requested
  • Newsletter data: until you unsubscribe
  • Payment records: as required by UK law (typically 6 years)
  • Comments: retained indefinitely unless removal is requested

We retain only what is necessary for operational and legal purposes.

9. International Transfers

Some third-party providers may process data outside the UK or EU. Where this occurs, appropriate safeguards (such as Standard Contractual Clauses) are in place to ensure GDPR-compliant protection.

10. Your Rights

Under UK GDPR and EU GDPR, you have the right to:

  • Access your personal data
  • Request correction
  • Request deletion
  • Restrict processing
  • Object to processing
  • Withdraw consent
  • Request data portability

To exercise any of these rights, please contact:
[insert contact email]

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local data protection authority.

11. Data Security

Physical Lab, Ltd. implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure.

12. Children’s Data

This website is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children without parental consent.

13. Changes to This Policy

We may update this Privacy Policy periodically. The most current version will always be published on this page.