The Centre for Liminal Studies CIC
Version 1.1 Last updated: 1 May 2026
- INTRODUCTION
The Centre for Liminal Studies CIC (“CLS”, “we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy.
This policy explains how we collect, use, and safeguard your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
- DATA CONTROLLER
CLS is the data controller for the purposes of data protection law.
Registered Office: Four Arches, Broughton Sanctuary, Broughton, Skipton, North Yorkshire BD23 3AE, United Kingdom.
Contact us at info@centreforliminalstudies.com.
If you have concerns about how your data is handled, you may contact us directly at the address above before lodging a complaint with the ICO.
- INFORMATION WE COLLECT
We may collect and process the following data:
- Contact information (name, email address, phone number).
- Booking and participation details.
- Communications with us.
- Website usage data (via cookies and analytics tools).
Where relevant, research participation may involve additional data, subject to separate consent and ethical approval.
- HOW WE USE YOUR DATA
We use your data to:
- Provide and manage our services and events
- Communicate with you
- Administer bookings and participation
- Improve our website and services
- Comply with legal and regulatory obligations
- LEGAL BASIS FOR PROCESSING
We rely on the following lawful bases, mapped to the relevant processing activities.
Processing Activity/Lawful Basis:
- Responding to enquiries and communications/Legitimate interests.
- Administering bookings and event participation/Contractual necessity.
- Sending newsletters or updates (where opted in)/Consent.
- Complying with legal or regulatory requirements/Legal obligation.
- Research participation/Consent.
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- INTERNATIONAL DATA SHARING
Given the international nature of our collaborative research work, your personal data may be transferred to or processed by collaborators or service providers located outside the United Kingdom.
Where such transfers occur, we ensure that appropriate safeguards are in place in accordance with UK GDPR Chapter V, including one or more of the following mechanisms:
- Transfer to a country covered by a UK adequacy regulation.
Use of the International Data
- Transfer Agreement (IDTA) or UK Addendum to EU Standard Contractual Clauses.
- Other transfer mechanisms approved by the UK Information Commissioner’s Office.
We do not transfer personal data internationally without first assessing the adequacy of protections in the destination country or organisation
- Sending newsletters or updates (where opted in)/Consent.
- Complying with legal or regulatory requirements/Legal obligation.
- DATA RETENTION
We retain personal data only for as long as necessary for the purposes outlined above, or as required by law.
- YOUR RIGHTS
You have the right to:
- Access your personal data
- Request correction or deletion
- Restrict or object to processing
- Withdraw consent
- Lodge a complaint with the UK Information Commissioner’s Office (ICO)
- DATA SECURITY
We implement appropriate technical and organisational measures to protect your data. These include access controls, encryption where appropriate, and staff awareness of data protection obligations.
In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify affected individuals without undue delay.
- COOKIES
Our website may use cookies to improve functionality and user experience.
You can manage cookie preferences through your browser settings.
- THIRD-PARTY SERVICES
We may use trusted third-party providers (e.g., payment processors, event platforms) who process personal data on our behalf. Where this occurs:
- We enter into written data processing agreements with all processors, as required by Article 28 UK GDPR, ensuring they process data only on our documented instructions.
- We conduct appropriate due diligence before engaging any processor.
- We remain responsible as data controller for ensuring that processing by third parties meets the standards required by UK GDPR.
- RESEARCH DATA
Where you participate in research, additional privacy notices and consent forms will apply, reflecting ethical and institutional requirements.
- CHANGES TO THIS POLICY
We may update this policy from time to time. Updates will be posted on this page.
- CONTACT
If you have any questions about this policy or your data, please contact us via the website or postal address above.
You also have the right to contact the Information Commissioner’s Office (ICO):
https://ico.org.uk
