Privacy notice for the Creative Foundations Fund
This privacy notice explains who is processing your data, the personal data we collect, how we use it, who we share it with, and what your legal rights are.
Applies to England
Who is collecting my data?
The Department for Culture, Media & Sport (DCMS) helps to drive growth, enrich lives and promote Britain abroad.
We protect and promote our cultural and artistic heritage and help businesses and communities to grow by investing in innovation and highlighting Britain as a fantastic place to visit. We help to give the UK a unique advantage on the global stage, striving for economic success.
DCMS will procure an Independent Evaluator to conduct an evaluation on its behalf in order to evaluate the effectiveness of the Creative Foundations Fund. The grant recipients’ personal data will be shared with the Independent Evaluator for the purposes of the evaluation. DCMS will ensure adequate data sharing agreements are in place between Arts Council England (ACE), the Independent Evaluator and grant recipients to enable compliant sharing.
What personal data do we collect?
DCMS will not collect personal data as part of this fund. The Independent Evaluator will collect data for the purposes of the evaluation. This consists of:
- name and business contact details (such as email address or phone number)
- information relating to Arts Council England’s administration of the fund (e.g. staff information appearing on administration documents etc).
Purpose of this privacy notice
This notice is provided within the context of the notice provided to meet the obligations as set out in Article 13 of UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA) (this sets out the information we have to provide where the data is received directly from the data subject). This notice sets out how we will use your personal data as part of our legal obligations with regard to data protection.
The Department for Culture, Media & Sport’s personal information charter (opens in a new tab) explains how we deal with your information. It also explains how you can ask to view, change or remove your information from our records.
Privacy policies of other websites
Arts Council England’s privacy policy can be found on Arts Council England’s Website: Arts Council England - Data Protection.
What is personal data?
Personal data is any information relating to an identified or identifiable natural living person, otherwise known as a ‘data subject’. A data subject is someone who can be recognised, directly or indirectly, by information such as a name, an identification number, location data, an online identifier, or data relating to their physical, physiological, genetic, mental, economic, cultural, or social identity. These types of identifying information are known as ‘personal data’. Data protection law applies to the processing of personal data, including its collection, use and storage.
How will we use your data?
DCMS will not be collecting your personal data. The Independent Evaluator will use your personal data to contact you in order to complete their evaluation.
What is the legal basis for processing my data?
The Independent Evaluator will be relying on DCMS’s authority as a government department. This will be under Article 6.1 (e), public task.
Who will your data be shared with?
Information that you provide to the Independent Evaluator will be anonymised before any onward transmission to DCMS. Your personal data will not be shared by the Independent Evaluator.
How long will my data be held for?
The Independent Evaluator will dispose of your information at the conclusion of the evaluation.
Will my data be used for automated decision making or profiling?
Your data will not be subjected to automated decision making. If this changes, this privacy notice will be updated.
Will my data be transferred outside the UK and if it is how will it be protected?
No data shall be sent beyond the European Economic Area.
Links to other websites
Where we provide links to websites of other organisations, this privacy notice does not cover how that organisation processes personal information. We encourage you to read the privacy notices of the other websites you visit.
What are your data protection rights?
You have rights over your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). The Information Commissioner’s Office (ICO) is the supervisory authority for data protection legislation, and maintains a full explanation of these rights on its website.
DCMS will ensure that we uphold your rights when processing your personal data.
How do I complain?
If you’re unhappy with the way we have handled your personal data and want to make a complaint, please write to the department’s Data Protection Officer or the Data Protection Manager at the relevant agency (Arts Council England).
You can contact the department’s Data Protection Officer using the details below.
Data Protection Officer
The Department for Culture, Media & Sport
100 Parliament Street
London
SW1A 2BQ
Email: dpo@dcms.gov.uk
If you have a query or would like more information about the fund, or this privacy notice, you can also get in touch with the Arts Capital team at DCMS using the details below.
Arts Capital Team
The Department for Culture, Media & Sport
100 Parliament Street
London
SW1A 2BQ
Email: cff-evaluation@dcms.gov.uk
How to contact the Information Commissioner’s Office
If you believe that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. You may also contact them to seek independent advice about data protection, privacy and data sharing.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: www.ico.org.uk
Telephone: 0303 123 1113
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.
Changes to our privacy notice
We may make changes to this privacy policy. In that case, the ‘last updated’ date at the bottom of this page will also change. Any changes to this privacy policy will apply to you and your data immediately.
If these changes affect how your personal data is processed, DCMS will take reasonable steps to let you know.
This notice was last updated on 23/04/2025.