CreatePositive Privacy Policy

At Create Positive (“we”, “us” or “our”), we are committed to safeguarding your personal data and ensuring transparency about how we collect, use, and store it. Whether you join us on retreat, access our online courses, or connect through our website or social platforms, your privacy matters to us.

This Privacy Policy explains how we handle your information and your rights under the EU General Data Protection Regulation (EU GDPR), the UK GDPR, and relevant data protection laws.

  • Definitions

 

Interpretation

Words with capital letters have meanings defined below. These definitions apply equally whether singular or plural.

Definitions

  • Account: a unique account created for you to access our services.
  • Company: Create Positive GmbH | Jägerndorfer Zeile 58, 12205 Berlin.
  • Device: any device that can access our website (e.g. computer, phone, tablet).
  • Personal Data: any information that relates to an identified or identifiable individual.
  • Services: the website and any services provided by CreatePositive including Retreats, workshops, online courses, coaching, consulting, our website, and digital content.
  • Service Provider: third parties we employ to facilitate or deliver our services.
  • Third-party Social Media Service: any social network you may use to connect to our services.
  • Usage Data: data collected automatically when using our services.
  • Website: www.createpositive.org and any related subdomains.
  • You: the individual using our services, or any company or organisation on whose behalf they do so.
  • Data Controller: Create Positive, registered in Germany, with operations across the UK and EU.
  1. What Personal Data We Collect

We may collect the following:

  • Names
  • Email address
  • Phone number
  • Postal address and/or billing address and transaction details
  • Booking and retreat attendance details
  • Course participation, preferences and progress
  • Preferences for marketing
  • Photos, testimonials, and feedback (with consent)



Usage Data

Automatically collected when you interact with our website, including:

  • IP address
  • Browser type and version
  • Pages visited and time spent
  • Device type and OS

Information from Social Media Services

If you connect to our services via Google, Facebook, LinkedIn or similar, we may collect information already associated with your account, such as name, email address, and contacts.

  1. How We Collect It

We collect your data when:

  • You book a retreat or register for an event
  • You sign up for a course or mailing list
  • You email us or fill in a form on our site
  • You interact with us on social media
  • You access our website or online content

We may use third-party systems (like Eventbrite, Stripe, or LearnWorlds) to facilitate this.

  1. Cookies & Tracking

We use cookies and similar technologies to:

  • Operate and optimise our website
  • Analyse how people use our services
  • Improve your experience

You can manage cookie preferences through your browser settings. For more information, see our Cookie Policy.

  1. Why We Use Your Data

We use your data to:

  • Deliver the services you’ve signed up for
  • Process bookings, payments, and communications
  • Provide course access and content
  • Tailor your experience and support
  • Send occasional updates, if you’ve opted in
  • Comply with legal obligations

Our legal basis may include consent, contract fulfilment, legitimate interests, or legal obligations.

  1. Who We Share It With

We only share data when necessary, with:

  • Service providers (e.g. payment processors, platforms)
  • Professional advisors (legal, financial, digital)
  • Event/retreat venues (with consent)
  • Our team and collaborators (e.g. course hosts)
  • Authorities where legally required

We never sell your data or share it for unrelated purposes.

  1. International Transfers

As we operate across borders, your data may be transferred outside your country (e.g. from Germany to the UK or other countries). When this happens, we ensure appropriate safeguards are in place (e.g. EU Standard Contractual Clauses or adequacy decisions).

  1. Data Retention

We retain your personal data only for as long as needed to:

  • Deliver our services
  • Meet legal, tax, or reporting requirements
  • Resolve disputes or enforce agreements

Marketing preferences can be updated or withdrawn anytime.

  1. Your Rights

Depending on your location (EU, UK, or elsewhere), you may have rights to:

  • Access your personal data
  • Correct or update inaccurate information
  • Request deletion (‘right to be forgotten’)
  • Object to or restrict processing
  • Withdraw consent
  • Lodge a complaint with a data protection authority

We encourage you to contact us first so we can respond directly and respectfully.

  1. Children’s Data

Our services are not aimed at children under 13. If we become aware that personal data has been collected from a child without appropriate consent, we will delete it promptly.

  1. External Links

Our site may contain links to other websites or platforms. We are not responsible for their content or privacy practices.

  1. Updates to This Policy

We may update this policy from time to time. Any changes will be posted on our website, with an updated effective date.

  1. Contact Us

For questions or concerns, please contact:

Georgie McIntyre
Strategy & Operations Director | CreatePositive
info@createpositive.org |www.createpositive.org
🇩🇪 Registered in Germany | Operating across UK, Europe & Internationally