1. Introduction
Community Building Agency ("CBA", "we", "us" or "our") respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, submit an enquiry, request a consultation, join the CBA Community, participate in community activities or engage with our services.
We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
2. Who We Are
Community Building Agency is an independent consultancy specialising in community-building strategy and implementation for fashion businesses and the wider creative industries.
Community Building Agency is currently operated by Lika Kurbanovaite, who acts as the data controller for personal information processed for CBA's own business and community activities.
Data controller: Lika Kurbanovaite, trading as Community Building Agency
Website: https://communitybuildingagency.com
Email: communitybuildingagency@gmail.com
For questions about this Privacy Policy or the handling of your personal information, please contact us using the email address above.
3. Personal Information We Collect
Depending on how you interact with Community Building Agency, we may collect the following information.
Consultation requests and business enquiries
- Full name
- Email address and telephone number
- Business, brand or project name
- Website or social media profile
- Professional background and business information
- Business goals, challenges and community-building activities
- Consultation availability and scheduling preferences
- How you heard about CBA
- Information provided through correspondence or consultations
- Communication and marketing preferences
CBA Community membership
- Full name and email address
- Instagram handle
- Telephone number and optional WhatsApp number
- City and country
- Professional background, studies, interests or other information shared about yourself
- Areas in which you would like help or support
- Knowledge, skills, resources or other forms of support you may be able to offer
- How you heard about CBA
- Community participation and relevant communications
- Membership and communication preferences
We may collect additional information where relevant to Community activities, initiatives or future membership features. Where we do so, we will explain the purpose of collecting it and provide any additional privacy information required by law.
Events and community activities
Where relevant, we may collect event registration details, attendance information, feedback and information voluntarily shared during community activities.
If we collect additional information for a particular event, we will explain its purpose when requesting it.
Website and technical information
Depending on the technologies used on our website, we may collect technical information such as IP addresses, browser and device information, website usage data, referral sources and cookie preferences.
We encourage you to avoid submitting sensitive personal information unless it is necessary for a specific purpose that has been discussed with you.
4. How We Use Your Information
We use personal information for the following purposes:
- Responding to enquiries and consultation requests
- Arranging and conducting introductory consultations
- Understanding business objectives and preparing service proposals
- Delivering agreed consultancy and implementation services
- Reviewing and managing CBA Community membership
- Welcoming members and providing access to Community activities and communication channels
- Communicating relevant Community information, events and opportunities
- Facilitating introductions, connections and collaborations where appropriate
- Understanding members' needs, interests and potential contributions
- Planning events, resources and Community experiences
- Maintaining a respectful and safe Community environment
- Managing professional relationships and business administration
- Sending optional marketing communications where legally permitted
- Maintaining website functionality and security
- Understanding website usage and improving our services
- Complying with applicable legal and regulatory obligations
We use personal information only where an appropriate lawful basis applies.
5. Legal Bases for Processing
Under UK GDPR, we rely on the following lawful bases, depending on the purpose and circumstances.
Legitimate interests
We may process personal information where reasonably necessary to respond to enquiries, administer Community membership, facilitate relevant introductions and opportunities, organise activities, manage professional relationships, maintain security and develop our services.
We consider the potential impact on individuals and their rights when relying on legitimate interests.
Contractual necessity
We may process personal information where necessary to take steps at your request before entering into a contract with you or to fulfil an existing contract with you.
Consent
Where required, we rely on your consent for optional marketing communications and certain cookies or tracking technologies.
You may withdraw consent at any time.
Legal obligations
We may process and retain personal information where necessary to comply with applicable legal, accounting, tax or regulatory requirements.
The lawful basis applicable to particular information depends on the purpose for which it is used. You may contact us for further information about the lawful basis for a specific processing activity.
6. Consultation Requests and Business Enquiries
When you submit a consultation request through our website, we use the information provided to review your enquiry, contact you, arrange an introductory consultation and prepare for our discussion.
We may also use this information to understand your objectives, assess whether our services are suitable and identify potential next steps.
We may retain relevant correspondence and consultation notes for business administration, follow-up and maintaining relevant professional relationships, subject to the retention arrangements described in this policy.
Submitting a consultation request does not automatically subscribe you to optional marketing communications.
7. CBA Community Membership
When you apply to join the CBA Community, we use the information provided in your registration form to review your application, manage membership and understand your background, interests, needs and potential contributions.
We may use this information to:
- Welcome you into the Community
- Add you to our main Instagram Community Chat using the Instagram handle provided
- Provide information about Community activities and communication channels
- Share relevant Community events, resources and opportunities
- Facilitate introductions and connections where appropriate
- Understand members' interests and improve Community experiences
- Manage participation and uphold the Community Guidelines & Terms of Participation
We collect telephone numbers as an additional way to contact members about their membership, relevant Community opportunities, introductions and collaborations. We may use these details where appropriate to facilitate connections or follow up on Community-related matters.
Providing a WhatsApp number does not automatically add you to the optional WhatsApp group.
We may contact members by email with information directly related to their membership and Community participation.
Optional promotional marketing communications are managed separately, in accordance with applicable law.
Community participation is subject to the CBA Community Guidelines & Terms of Participation.
You may leave the Community at any time by contacting us or leaving the relevant communication channels.
8. Instagram, WhatsApp and Other Community Platforms
Our main Community Chat operates on Instagram. We also offer an optional WhatsApp group for additional discussions and sharing resources.
Participation in these platforms is subject to their respective terms of service and privacy policies.
Depending on the platform and its settings, other members may be able to see your profile information, username, telephone number, messages and other information you choose to share.
We use your Instagram handle to add you to the main Community Chat. You can choose whether to join the optional WhatsApp group.
We encourage members to review the privacy settings of any third-party platforms they use and to consider carefully what personal information they share.
We cannot guarantee the deletion of messages or information already viewed, copied or retained by other participants.
9. Events and Community Activities
We may process personal information to organise and administer CBA events, meetups, workshops and other Community activities.
This may include managing registrations, communicating event information, recording attendance and collecting feedback.
Where we intend to photograph, film or otherwise record an event, we will provide appropriate information about the recording and its intended use.
Additional permissions or privacy information will be provided where required.
10. Marketing Communications
You may choose to receive occasional news, insights, updates and promotional communications from Community Building Agency.
Where consent is required, we will request it separately through an optional opt-in.
You can withdraw your consent or unsubscribe at any time by following the instructions in our communications or contacting us directly.
We may retain limited information necessary to record and respect your communication preferences.
Unsubscribing from optional marketing does not prevent us from sending essential communications relating to an enquiry, service or active Community membership.
11. Cookies and Website Technologies
Our website may use technical features necessary for its operation, security and the processing of enquiries and registrations.
Cookies and similar technologies are small files or mechanisms that websites and third-party services may use to store information on or access information from a visitor's device.
Where such technologies are used, we will provide information about their purposes and obtain consent where required by applicable law.
We will not intentionally use non-essential cookies or tracking technologies without meeting the applicable transparency and consent requirements.
You can also manage cookies through your browser settings.
12. Sharing Your Information
We do not sell personal information.
We may share personal information with trusted third-party service providers where necessary to operate our website, manage Community activities, communicate with members or deliver our services.
These may include providers of:
- Website hosting and form processing
- Email and communication services
- Community messaging platforms
- Video conferencing and scheduling
- Event registration and administration
- Cloud storage and business management, including Google Sheets
- Website analytics and security, where applicable
- Professional advisory services
Where third parties process personal information on our behalf, we seek to ensure that appropriate data protection arrangements are in place.
We may share limited information with other Community members for agreed introductions or collaborative activities, taking account of your preferences and reasonable expectations. Information you choose to post in Community chats may be visible to other participants.
We may also disclose personal information where required by law or where necessary to establish, exercise or defend legal claims.
13. Client and Community Data Processed Through Our Services
As part of our consultancy and implementation services, Community Building Agency may be given access to personal information relating to a client's customers, Community members, event participants or other individuals.
Where we process this information solely on behalf of a client and under its documented instructions, the client will generally act as the data controller and Community Building Agency will act as a data processor.
Such processing will be governed by appropriate contractual arrangements, including data protection terms required by applicable law.
Where Community Building Agency independently determines the purposes and means of processing personal information, we will assess our responsibilities as a data controller and provide any additional privacy information required.
Individuals whose information is processed through a client's Community activities should also refer to the relevant client's Privacy Policy.
14. International Data Transfers
Some third-party service providers may process or store personal information outside the United Kingdom.
Where international transfers occur, we will take steps to ensure they comply with applicable UK data protection requirements, including the use of appropriate safeguards where necessary.
You may contact us for further information about relevant international transfers and safeguards.
15. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or subsequently lawfully used, subject to applicable legal and contractual requirements.
Our retention arrangements include:
- Consultation enquiries and business contacts: We retain personal information for as long as reasonably necessary to manage enquiries, maintain relevant professional relationships, follow up on potential opportunities and meet applicable legal or business requirements. We periodically review inactive records and delete or anonymise information that is no longer needed.
- CBA Community membership information: We retain membership information for the duration of membership, including periods when members are not actively participating. When membership ends, we review what information remains necessary for legitimate administrative, legal or ongoing relationship-management purposes. Information that is no longer needed will be deleted or anonymised.
- Periodic reviews: We review the personal information we hold at appropriate intervals, generally at least annually, to assess its accuracy, relevance and continued necessity.
- Event registrations and participation records: For the period reasonably necessary for event administration, follow-up and applicable legal requirements.
- Client records and correspondence: For the duration of the client relationship and any additional period required for legal, contractual or legitimate business purposes.
- Marketing information: Until you unsubscribe or withdraw consent, subject to periodic review. Limited suppression records may be retained to respect your preferences.
- Website analytics and technical information: In accordance with the applicable retention settings of the services used, where relevant.
- Personal information processed on behalf of clients: In accordance with the relevant client agreement and documented instructions, subject to applicable legal requirements.
When information is no longer required, we will take appropriate steps to delete or anonymise it.
16. Data Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse, alteration and disclosure.
These measures may include access restrictions, account security controls, secure storage and the use of reputable service providers.
Access to personal information is limited to those who require it for legitimate business purposes.
Although we take reasonable precautions, no electronic system or method of transmission can be guaranteed to be completely secure.
17. Your Data Protection Rights
Under applicable UK data protection law, you may have the right to:
- Request access to personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of your personal information in certain circumstances
- Request restriction of processing
- Object to certain processing activities
- Request portability of certain personal information
- Withdraw consent where processing is based on consent
- Object at any time to the processing of your personal information for direct marketing purposes
These rights are subject to applicable legal conditions and exceptions.
To exercise your rights, contact communitybuildingagency@gmail.com.
We will respond in accordance with applicable legal requirements, normally within one month.
18. Children's Privacy
Our consultancy services are primarily intended for businesses and professionals.
Where individuals under 18 are permitted to participate in CBA Community activities, we will consider their age and apply appropriate privacy safeguards.
We will provide additional privacy information and obtain any permissions required by applicable law where necessary.
19. Third-Party Websites
Our website may contain links to external websites, social media platforms and third-party services.
These services have their own privacy policies and data protection practices.
We encourage you to review the relevant policies before providing personal information to third parties.
20. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business activities, Community operations, website technologies, services or applicable legal requirements.
The latest version will be published on this page with an updated revision date.
Where legally required, we will provide additional information about material changes to our data processing practices.
21. Contact and Complaints
If you have questions about this Privacy Policy or how your personal information is handled, please contact:
Lika Kurbanovaite
Community Building Agency
Email: communitybuildingagency@gmail.com
If you have concerns about how your personal information has been handled, you also have the right to complain to the UK Information Commissioner's Office (ICO).
Information Commissioner's Office
Website: https://ico.org.uk/
Telephone: 0303 123 1113
We welcome the opportunity to address any concerns raised directly with us.