When you send an enquiry, we collect your name, email address, phone number if provided, requested workshop, group size, preferred timing and any notes, along with the page you enquired from and the submission time. We use these details to respond and arrange your session.
When you book a workshop, we collect your name, WhatsApp number, email address, the workshop and number of seats, and, once you pay, the Razorpay payment reference. We use these to confirm your booking, send your ticket and contact you about the session. Payments are handled by Razorpay, which receives your name, phone number and email so you don’t have to type them again, plus the payment details you enter there; we never see your card, bank or UPI details. Razorpay’s payment window loads when you open the booking form and runs under Razorpay’s own privacy policy. A copy of the booking details is kept in a private Google Sheet used by the Art Club team.
Enquiries and bookings are stored in our Cloudflare database and are accessible through a password-protected admin area. If email alerts are enabled, enquiry and booking details are also sent through Resend. The admin area uses a sign-in cookie.
If analytics are enabled on the public site, basic event analytics with Google Analytics and/or PostHog start automatically unless you opt out or your browser sends a Do Not Track or Global Privacy Control signal. These services measure page visits, time on page, referring websites, device information, scroll depth, which buttons and links are clicked, workshop interest, contact clicks and whether an enquiry succeeds or fails. PostHog also records where on a page clicks and scrolls happen (positions only, as a heatmap), not what you type. We do not send enquiry names, email addresses, phone numbers, notes or form values to analytics. For enquiries we only record the group size as a range, the timing option you picked, and the name of the last field used if you close the form unfinished. We remove raw URL query strings, fragments and referring-page paths from analytics events, while allowing limited campaign labels such as source, medium and campaign name. Never put personal information in campaign labels. Automatic form capture is disabled.
If optional session replays are enabled, we ask separately before recording browsing. Replays reconstruct page layout, pointer movement and scrolling. All form inputs are masked; forms, enquiry dialogs, confirmation messages and drawing canvases are blocked. Console logs, network request/response bodies, headers and cross-origin frames are excluded. Replays are disabled on pages containing query strings or fragments. You can use the site without allowing replays.
If advertising tags are configured, Google Ads and/or Meta Pixel measure page views, workshop interest, successful enquiries and bookings and support remarketing, unless you turn advertising off in Preferences or your browser sends a Do Not Track or Global Privacy Control signal. These providers may use cookies and receive public page URLs, ad click identifiers, device/network information and conversion event identifiers. Advertising tags are skipped on pages containing unrecognised query parameters or fragments. We do not send your enquiry details to advertising providers; automatic advanced matching and enhanced conversions are not enabled in this integration. You can turn advertising measurement off and still use every feature.
Google Analytics may use cookies while analytics are enabled. PostHog stores a random browser identifier in local storage while analytics are enabled so we can understand journeys across pages and visits; we do not connect this identifier to your enquiry details. We also save tracking preferences and first/last campaign attribution in local storage while analytics are enabled. This is pseudonymous measurement, not fully anonymous data. You can turn off analytics through the Preferences button beside Privacy in the footer, or enable it again there, and still use every feature. Your opt-out is saved in this browser. Replays and advertising remain separate optional choices, disabled unless you enable them. Do Not Track and Global Privacy Control signals prevent all tracking services loading. Analytics and advertising services process information under their own privacy practices.
For questions about your enquiry data, or to request a correction or deletion, email gubbiartclub@gmail.com. Avoid sharing sensitive details in the enquiry notes; you can ask us to discuss them separately.
We publish workshop photos and videos in our gallery and on our social channels only with the consent of the people who can be identified in them, and photos of children only with a parent’s or guardian’s consent. We remove location and camera details from every photo before publishing. To have a photo of you taken down, email gubbiartclub@gmail.com and we’ll remove it within 2 working days.
The art-table images are AI-generated creative inspiration, not photographs of previous Gubbi workshops. External links open services with their own privacy practices.