Foot in the Door coming to London in January 2027 - sign up now

Privacy

Privacy Policy

In accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Peshkar (Company Limited by Guarantee No. 3918088 and a Charity in England and Wales No. 1091092) is a Data Controller.

Last updated November 2026

Key definitions and facts

  • UK GDPR (the UK General Data Protection Regulation) and the Data Protection Act 2018 together replace the original Data Protection Act 1998.
  • PECR (the Privacy and Electronic Communications Regulations) sits alongside UK GDPR and covers electronic marketing and cookies.
  • Personal data - anything that can identify a person.
  • Sensitive personal data (special category data) - includes ethnicity, sexual orientation, disability status, religious or philosophical beliefs, and genetic and biometric information.

Who to contact

The organisation has a named Data Protection Officer. Please contact hello@peshkar.org for any enquiries regarding data protection or requests for data, and your message will be passed to them.

What data we collect and why

Peshkar collects data on participants, staff members (including freelance staff), board members and partner contacts.

Staff, board member and partner data is collected under the basis of Legitimate Interest.

Participant data, including photographic and video footage, is collected on the basis of Consent.

Peshkar collects the following data as part of our regular monitoring procedures:

  • Dates of birth
  • Ethnicity
  • Postcode
  • Disability status
  • Evaluation comments
  • Photographic images
  • Video footage

This data is collected in the following ways:

  • Project registration forms
  • Project evaluation forms
  • Video evaluation
  • Arts Award cover sheets
  • Within artistic sessions in the creation of artworks
  • Within artistic sessions for the promotion and marketing of projects
  • Online communications such as website forms and messages, and Facebook, Instagram, LinkedIn and TikTok data
  • Website analytics and advertising tools, where you have agreed to them (see Analytics, search and advertising)

Sharing data

Data is shared with funders on receipt of requests for monitoring information. These funders include but are not limited to Arts Council England, The National Lottery Heritage Fund and Oldham Council.

Peshkar works in partnership with other organisations across the charities sector and, as such, will sometimes need to share data with these organisations for the purposes of creating artworks, marketing and promoting projects and reporting to funders. When this is the case, data sharing agreements will be drawn into the partnership contracting procedure.

Data processing

Peshkar uses Google as its email and cloud client. Data is held via Google Drive in secure files. Only those which do not contain sensitive personal data are shared across the staff team. Google is GDPR compliant and has published details of its compliance.

Peshkar occasionally uses other clients such as Mailchimp and Eventbrite as a way of communicating with audiences. Both of these are GDPR compliant.

Peshkar hosts photographic images on Flickr (photographic permissions are sought from all participants) and video footage via YouTube (a Google service and, therefore, covered by their policies).

Peshkar artists also make use of Dropbox to host imagery from workshops and projects. This may occasionally include photographic or video images of participants.

Compliance information from these providers:

This website

This website has no user accounts and does not store anything you type into its forms. The contact form opens a pre-filled email in your own email app instead.

Some pages load content from other services, which may set their own cookies or receive technical information such as your IP address:

  • Google Fonts, which supplies the lettering used across the site.
  • YouTube videos embedded in blog posts.
  • A small number of older blog posts that embed content from other websites.

Analytics, search and advertising

To understand how people find and use our website, and to promote our projects, opportunities and events, Peshkar uses or may use the services below. They collect information about your device and how you use the site, such as pages visited, links clicked, approximate location, browser type and how you arrived. We use this information in summary form and do not use it to identify you personally.

  • Google Analytics, to measure visits and how the website is used. We ask Google to shorten IP addresses, and analytics data is kept for no longer than 14 months.
  • Google Search Console, to see how our pages appear in Google search results. This uses Google's own search data and does not place cookies on your device.
  • Paid advertising on Google (including YouTube), Meta (Facebook and Instagram), LinkedIn and TikTok. These platforms may use cookies, pixels or similar tags on this website to measure whether our adverts work, and to show our adverts to people who have visited the site or who may be interested in our work.

Analytics and advertising tools are only switched on with your consent, which is our lawful basis for using them. Peshkar never shares sensitive personal data with advertising platforms and does not target adverts using it.

Some of these providers are based, or process data, outside the UK. Where this happens, they rely on safeguards recognised under UK data protection law, such as adequacy decisions or the International Data Transfer Agreement.

Cookies and your choices

Cookies are small files saved by your browser. In line with the Privacy and Electronic Communications Regulations (PECR), we only set analytics and advertising cookies once you have agreed to them, and you can change your mind at any time. Cookies that are essential for the website to work do not need consent.

When you first visit, a cookie banner lets you accept or reject each type:

  • Essential: your cookie choice is saved in your browser so we don't ask on every page. We ask again after 12 months.
  • Analytics: Google Analytics cookies (named _ga and _ga_ followed by an ID), kept for up to two years.
  • Advertising: the Meta Pixel for Facebook and Instagram (a cookie named _fbp, kept for up to three months), plus any tags from Google, LinkedIn or TikTok we use for adverts.
  • To change your mind, use the Cookie settings link at the bottom of every page. If you switch a type off, we remove its cookies from this site.

You can also control cookies and adverts directly:

  • Change your browser settings to block or delete cookies.
  • Install Google's opt-out add-on to stop Google Analytics recording your visits.
  • Adjust your advert preferences in your Google, Facebook, Instagram, LinkedIn or TikTok account settings.
  • Visit Your Online Choices to opt out of interest-based advertising from many companies.

Images and social media

Peshkar uses imagery and videos to promote projects on social media. Peshkar's social media channels are Facebook, Instagram, LinkedIn and TikTok. Peshkar takes the following safeguards regarding data shared via social media:

  • Photographs or videos of participants under the age of 18 never feature names.
  • Blog posts or links to blogs that include the name of the participant do not feature any additional personal data.
  • Sensitive personal data is never shared via social media.
  • Historic social media posts including images and video are cleared or hidden every five years.

When you follow, message, comment on or share our posts, the platform you use also processes your data under its own privacy policy. We can see the information you make available to us there, such as your profile name and messages, and we use it only to respond to you and to understand how our posts perform.

Privacy policies for our channels:

How long we keep data

Peshkar holds all data for a maximum of five years of inactivity. After this point, records of participants, staff and board members including photo and video records, evaluation and forms are deleted and shredded (if held in hard copy). If it is deemed that an individual is of worth to the organisation as a contact after five years of inactivity has lapsed, Peshkar may contact this person to seek their consent to retain their data.

Your rights

Any individual coming into contact with Peshkar has the following rights over their data:

  • The right to be informed
  • The right of access
  • The right to erasure (to be forgotten)
  • The right to rectification
  • The right to restrict processing
  • The right to data portability
  • The right to object
  • Rights in relation to automated decision-making

Any of these rights can be exercised by contacting the Data Protection Officer via hello@peshkar.org. Any requests will be dealt with in 30 days or less according to the guidance of the Information Commissioner's Office.

Complaints

Any complaints or concerns regarding data protection at Peshkar can be raised with the Data Protection Officer via hello@peshkar.org or, in the worst case scenario, with the Information Commissioner's Office (ico.org.uk).

How we review our data

Peshkar carries out Privacy Risk Assessments on all its data. This process is undertaken by the Data Protection Officer and overseen by the Trustee responsible for Data and Safeguarding. Data reports are made to the Board of Trustees at every meeting.