Privacy Policy

Last updated: June 2026

Who we are

Creative Isles Network ("we", "us", "our") is a directory and community platform for creative hubs, makerspaces and workshops across the UK and Ireland. This website is operated by The Making Rooms. You can contact us at our contact page.

What data we collect

We collect the following personal data:

• Account data:your name (display name), email address, and password (stored as a hashed value, never in plain text) when you register.
• Profile data:any bio, profile photo, or hub affiliations you choose to add to your profile.
• Usage data:standard server logs including IP address, browser type, pages visited, and timestamps. We use this to keep the site running and to understand usage patterns.
• Contact form submissions:your name, email address, and message content if you contact us.

How we use your data

• To create and maintain your account.
• To display your public profile and hub connections to other network members.
• To send you service emails (account verification, password reset). We do not send marketing emails without your explicit consent.
• To respond to contact form enquiries.
• To detect and prevent spam, abuse, and fraud.
• To improve and maintain the site.

Legal basis for processing

Under UK GDPR, we rely on the following lawful bases:

• Contract:processing your account data to provide the service you signed up for.
• Legitimate interests:server logs and security monitoring to keep the service running safely.
• Consent:any optional profile information you choose to share publicly.

Who we share data with

We do not sell your personal data. We share data only with:

• IONOS: our web hosting provider. The site and its database run on a server we operate at IONOS, which processes and stores server requests, logs, and your account data.
• Google reCAPTCHA:used on our forms to prevent automated abuse. Google's privacy policy applies to data processed by reCAPTCHA.

All providers are contractually bound to process data only as necessary to provide their services.

How long we keep your data

We keep your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required to retain it for legal reasons.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Data portability (receive your data in a machine-readable format).

To exercise any of these rights, please contact us. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Cookies

We use a single session cookie to keep you logged in. We do not use third-party tracking or advertising cookies. Dark mode preference is stored in your browser's localStorage, which is not transmitted to our servers.

Changes to this policy

We may update this policy from time to time. We will notify registered members by email of any material changes. The "last updated" date at the top of this page will always reflect the most recent version.