Luton Arts Programme
As part of the Luton Arts Programme, we may collect and use personal information such as your name, addresses and other contact information, biography, photo, records of your correspondence with us, and social media or website links to help promote your project and connect you with opportunities.
Personal data is any information relating to an identified or identifiable living person. We process personal data for a number or purposes, and the lawful bases for our use of this data are as follows:
Under the UK GDPR the lawful bases we rely on to process personal data are:
- Your consent
- We have a contract with you
- It is necessary to protect your vital interests
- Legitimate interests. When we rely on legitimate interests, we will undertake an assessment to ensure that the rights and freedoms of individuals are balanced against the necessity of any processing.
The personal data that is provided to us is either directly from the individual concerned (You) or from a third party acting on your behalf (this could be a colleague or a family member). Where we receive personal data that relates to an individual from a third party, the third party should be aware that the individual may be informed of the necessary information regarding the use of their data.
We will only use this information for publicity related to the Luton Arts Programme, including the Lightning Fund and Evolution Fund. This may include our website, social media, printed materials, reports, and press/media coverage. We also process your data to provide insights to colleagues at Luton Arts and our partners (including Luton Borough Council), and we do so under the lawful basis of ‘legitimate interest’ to improve the service we offer. We will never use your information for unrelated purposes or share it with third parties without your permission.
You have the right to:
- Choose whether or not to take part in publicity
- Limit what information is shared
- Withdraw your consent at any time, without affecting your participation in the programme
We will store your information securely and handle it in line with UK GDPR regulations. If you have any questions or would like to change or withdraw your consent, please email us at Luton Arts.
Who we are
We are thrilled to introduce our two-year funded arts programme, Luton Arts, as part of Luton Borough Council and developed in partnership with the Luton Arts and Culture Strategy Group.
Our mission is to foster creativity and support local creatives through three exciting delivery strands:
Our website address is: https://lutonarts.co.uk.
Interpretation and Definitions
Interpretation
The words of which the initial letter is capitalised have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
- “Account” means a unique account created for You to access our Service or parts of our Service.
- “Company” (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to Luton Arts
- “Country” refers to the United Kingdom of Great Britain and Northern Ireland (UK).
- “Cookies” are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
- “Device” means any device that can access the Service such as a computer, a cell phone or a digital tablet.
- “Personal Data” is any information that relates to an identified or identifiable individual.
- “Service” refers to the Website.
- “Service Provider” means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analysing how the Service is used.
- “Usage Data” refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
- “Website” refers to Luton Arts, accessible from https://lutonarts.co.uk/
- “You” means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
How we collect your data
We collect personal data:
- Through your visits to our website
- Through your request for publications and other materials
- Through us working with you and supporting you
- Through your applications for jobs with us
- Through your request for information about our work and events
- Through your registration for events
- Through you contacting us with enquiries and comments
- Through our use of cookies (please see below for further information)
- We may also collect personal data from publicly available sources or trusted third-party partners where appropriate and lawful
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
If you leave a comment on our site, you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
View our Cookie Policy here.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
We may use third-party Service providers to monitor and analyse the use of our Service.
Google Analytics
Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualise and personalise the ads of its own advertising network.
You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js and dc.js) from sharing information with Google Analytics about visits activity.
For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy
Artificial Intelligence
We may use artificial intelligence (AI) technologies or automated processes in limited contexts to support our operations. This may include activities such as analysing engagement with our services, screening job applications, or improving user experiences on our website.
We ensure that all AI or automated systems used comply with the principles of fairness, accountability, and transparency, in line with the UK GDPR and the Data Use and Access Act 2025 (DUAA). Where automated processing is used, we take steps to:
- assess and mitigate any potential risks of bias or unfairness;
- avoid solely automated decisions that have legal or significant effects on individuals without appropriate human involvement;
- ensure transparency about when AI is used and how decisions are made; and
- give individuals the right to request human intervention, express their point of view, and contest any such decisions.
We do not use AI to make decisions that produce legal or similarly significant effects on individuals without human oversight.
If you have any questions about how we use AI or automated processing, or if you wish to exercise your rights related to such processing, please email us at Luton Arts.
Children’s Privacy
Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.
If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent’s consent before We collect and use that information.
You & Your Data
Types of Data Collected
Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
- Email address
- First name and last name
- Phone number
- Address, State/County, Province, ZIP/Postal code, Town/City
- Usage Data
Usage Data
Usage Data is collected automatically when using the Service.
Usage Data may include information such as Your Device’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.
We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.
Disclosure of Your Personal Data
Law enforcement
Under certain circumstances, Luton Arts may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
Other legal requirements
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
- Comply with a legal obligation
- Protect and defend the rights or property of the Company
- Prevent or investigate possible wrongdoing in connection with the Service
- Protect the personal safety of Users of the Service or the public
- Protect against legal liability
How long we retain your data
Any personal data will not be retained for any longer than is necessary for the lawful purposes for which it was collected and processed. While we retain your personal data, we will ensure that it is kept securely and protected from loss, misuse or unauthorised access and disclosure. Once the retention period is reached, we will delete your personal data.
Retention of web activity
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Changes to this Privacy Policy
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.
We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the “Last updated” date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy, You can contact us:
By visiting this page on our website: https://lutonarts.co.uk/feedback/
By sending us an email: LutonArts@luton.gov.uk.



