Privacy Policy – ISTA Encore (A Product of ISTA Global Arts Learning Ltd)
IMPORTANT INFORMATION
Last updated: 1 July 2025
It is important that the personal data we hold about you is accurate and current. Please keep us informed of any changes during your relationship with us.
Our website may contain links to third-party websites, plug-ins, or applications. Clicking those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy policies. When leaving our website, we encourage you to read the privacy policies of every site you visit.
WHO WE ARE
We are ISTA Global Arts Learning Ltd, a company limited by guarantee, incorporated in England with company number 03108893 and a UK registered charity (Charity No. 1050103).
Registered Office:
71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
ISTA Encore is an online on-demand learning platform and a product of ISTA Global Arts Learning Ltd. This privacy policy applies exclusively to data collected and processed through the ISTA Encore platform and does not cover any other ISTA activities, events, or services.
ISTA Global Arts Learning Ltd is the controller responsible for your personal data (referred to as "ISTA", "we", "us" or "our" in this policy). We are registered with the Information Commissioner's Office (ICO) under number ZA172994.
If you have questions about this policy or wish to exercise your data rights, please refer to Section 10 for contact details.
BASIS FOR PROCESSING PERSONAL DATA
We collect and use personal data as outlined in Sections 3.3 to 3.16, in compliance with UK GDPR. These include:
Processing applications and transactions for online course purchases
Providing access to ISTA Encore accounts and course materials
Responding to enquiries submitted via the platform
Improving the ISTA Encore user experience and functionality
Using submitted information for platform support, performance tracking, and optimisation
Sending marketing communications related to ISTA Encore (with appropriate consent)
Where special category data is collected (e.g. access needs or feedback disclosures), we rely on consent, or where necessary, protection of vital interests or legal obligations.
DATA COLLECTION
We collect:
Personal data submitted via course registration or user account creation
Automatically collected data during platform use (e.g. IP address, device/browser data)
Data from third-party sources (e.g. payment providers, analytics platforms)
Optional user-generated content (e.g. feedback, reviews, profile updates)
COOKIES
We use cookies to optimise site performance and tailor user experience on the ISTA Encore platform. For full cookie details, refer to the cookie table included in the full policy. Essential cookies are required for platform functionality; others can be refused via browser settings.
DATA SHARING
We may share personal data with:
Payment providers (e.g. Stripe)
IT and system service providers
Professional advisors (e.g. legal, recruitment, accounting)
Marketing and analytics partners (e.g. Google)
Government authorities where required
Future organisational buyers or partners in the event of a merger/acquisition
All third parties are required to respect data privacy and process data in line with applicable laws.
INTERNATIONAL TRANSFERS
As a digital platform, ISTA Encore may involve transfers of personal data outside the UK/EU. When transferring data, we ensure appropriate safeguards including:
Adequacy decisions by the European Commission
Standard Contractual Clauses (SCCs)
Transfers to Privacy Shield-certified US entities (where relevant)
DATA SECURITY
We use appropriate technical and organisational measures to secure personal data and limit access to authorised personnel only. Breach procedures are in place to notify affected parties and regulators where required.
DATA RETENTION
We retain personal data only as long as necessary:
Account and purchase data: retained for up to 7 years
Marketing contacts: reviewed annually, removed upon opt-out
Enquiries: retained for 12 months
Anonymised data may be kept indefinitely for research/statistical purposes
YOUR LEGAL RIGHTS
You have the right to:
Access your data (Data Subject Access Request)
Request correction or deletion
Object to or restrict processing
Withdraw consent
Request data portability
To exercise any of these rights, contact us directly (see Section 10). Complaints can also be made to the ICO (www.ico.org.uk).
CONTACT DETAILS
Entity: ISTA Global Arts Learning Ltd
Company No.: 03108893
Charity No.: 1050103
Email: [email protected]
Registered Office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
This policy applies exclusively to ISTA Encore and reflects ISTA’s commitment to protecting the personal data of all those who access our online courses.