PRIVACY POLICY
Last updated: 01st September 2026
This Privacy Policy explains how HANLON CREATIVE PRESS (trading as Hanlon Creative Press, "we", "us", "our"), company registration number 782165, collects and uses personal data when you use our online courses and services (the "Service"), hosted on the Thinkific platform.
We are committed to protecting personal data in line with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Acts.
1. Who this policy applies to
- Teachers and individual adult purchasers who create an account and buy or access our courses.
- Schools that purchase a school or classroom licence.
- Students who are enrolled by their school or teacher, some of whom may be under 16.
2. Important: students and children's data
Where a school or teacher enrols students, the school is the Data Controller for those students' personal data. The school is responsible for having a lawful basis and for obtaining any necessary consents, including parental or guardian consent where required for students under 16. In that context, we act as a Data Processor, processing student data only on the school's instructions and to provide the Service.
To protect students, we ask that they are enrolled using minimal identifying information — for example a first name and initial, or a school-assigned ID or class code — rather than full names or personal email addresses. The school keeps any private record linking a code to a student's identity.
We do not knowingly collect personal data directly from a child. If you believe a child's data has been provided to us without appropriate consent, contact us at [email protected] and we will act promptly to address it.
3. What data we collect
- Account data (for teachers/adult buyers): name, email address, and login details.
- Purchase data: licence type, dates, and payment confirmation (payments are processed by Thinkific's payment providers; we do not store full card details).
- Learning data: course progress, activity completion, and results, used to provide the teacher dashboard and track progress.
- Student data (entered by the school/teacher): the minimal identifier described above, and learning data.
- Technical data: standard information collected by the Thinkific platform (e.g. device/browser, usage), per Thinkific's own privacy policy.
4. How we use data and our lawful basis
- To provide and administer the Service — lawful basis: performance of a contract.
- To provide progress tracking to teachers/schools — on the instructions of the school (as Processor) or under our contract with the buyer.
- To respond to support requests and communicate about the Service — legitimate interests.
- To meet legal and accounting obligations — legal obligation.
- For optional marketing to adult account holders only — where you have consented, and you may withdraw consent at any time.
5. Data processors we use
We use Thinkific to host and deliver the Service. Thinkific processes data on our behalf under a Data Processing Addendum and states that it complies with the GDPR. We may also use EMAIL/MARKETING TOOL for communications with adult account holders. We only share data with processors who contractually agree to protect it.
6. How long we keep data
We keep account and purchase data for as long as your account or licence is active, and as required for legal and accounting purposes. Learning and student data is retained for the licence period (12 months from purchase) and deleted or anonymised after the licence ends, unless the school instructs earlier deletion or the law requires retention.
7. Your rights
Under the GDPR you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. For student data, requests should be made to the school (the Data Controller), and we will assist the school in fulfilling them. For teacher/adult-account data, contact us at [email protected]. You also have the right to complain to the Irish Data Protection Commission (dataprotection.ie).
8. Data transfers
Some processors (including Thinkific) may process data outside the EEA. Where they do, appropriate safeguards such as Standard Contractual Clauses are used, as described in the relevant processor's documentation.
9. Changes to this policy
We may update this policy from time to time. The "last updated" date shows the latest version.
10. Contact
HANLON CREATIVE PRESS · [email protected]