Privacy Policy
Last updated: 8 July 2026
1. Who we are
The Locket Workshop is an independent craft event run in Italy. We are the data controller for any personal data collected directly through this website.
Contact: [email protected]
2. Data we collect
We collect the following data when you interact with this website:
- Analytics data — anonymised IP address, browser type, device, country, pages visited, and session duration. Collected via Google Analytics 4 only if you consent to cookies.
- Contact enquiries — your email address and any information you include when you write to us at [email protected].
- Booking data — name, email, and payment details collected when you register via Eventbrite or Meetup. These platforms act as independent data controllers; please refer to their respective privacy policies.
3. Legal basis for processing
- Analytics — your consent (Article 6(1)(a) GDPR). You can withdraw consent at any time via our Cookie Policy page.
- Contact enquiries — our legitimate interest in responding to your message (Article 6(1)(f) GDPR).
- Bookings — processed by Eventbrite / Meetup under their own legal bases as independent controllers.
4. Third-party processors
- Google LLC — Google Analytics 4. Data may be transferred to Google servers in the United States under Standard Contractual Clauses. We have accepted Google's Data Processing Amendment. See Google's Privacy Policy.
- Eventbrite, Inc. — independent controller for event registrations. See Eventbrite's Privacy Policy.
- Meetup LLC — independent controller for RSVPs. See Meetup's Privacy Policy.
5. Data retention
- Analytics data — retained by Google for 14 months (GA4 default), then automatically deleted.
- Contact emails — deleted after 12 months of inactivity.
6. Your rights under GDPR
As a person in the EU/EEA, you have the right to:
- Access — request a copy of your personal data.
- Rectification — correct inaccurate data.
- Erasure — request deletion of your data ("right to be forgotten").
- Portability — receive your data in a machine-readable format.
- Restriction — ask us to limit how we process your data.
- Objection — object to processing based on legitimate interest.
- Withdraw consent — for analytics cookies, at any time via our Cookie Policy page.
7. How to exercise your rights
Email us at [email protected]. We will respond within 30 days as required by GDPR. There is no charge for making a request.
8. Supervisory authority
If you believe we have handled your data incorrectly, you have the right to lodge a complaint with the Italian data protection authority:
Garante per la protezione dei dati personali
garanteprivacy.it
9. Changes to this policy
We may update this policy occasionally. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.