KAGU FoundationBy artists. For artists. Forever.
Back an artist
Your data · your rights

Privacy,
explained simply.

A straightforward explanation of what KAGU Foundation receives, why it is needed, how website forms reach the team, and the choices you have.

Last updated: 15 July 2026

01 · Responsibility

Who is responsible for your information?

KAGU Foundation decides why and how personal information supplied for its programmes, enquiries, newsletter, donations, and other foundation activities is used. In data-protection language, this normally makes KAGU Foundation the data controller.

Data controller

KAGU Foundation

Responsible for application, enquiry, partnership, newsletter, donation, event, and programme information used for foundation work.

[email protected]
Website creator & licensor

Jason Brady

Created and licenses this website. He does not decide how KAGU uses application or enquiry information and does not receive a form submission merely because he created the website.

How the forms work. The forms are displayed on this website. When you press submit, the information is sent to Formspree, which processes the submission and delivers it to KAGU Foundation's designated email and Formspree inbox. KAGU then controls how the received information is used for foundation work.

Formspree and other providers may also act as independent controllers for limited activities of their own, such as service security, fraud prevention, account administration, and legal compliance. Their own privacy notices explain those activities.

02 · Scope

What does this notice cover?

This notice covers personal information used by KAGU Foundation in connection with:

  • creative-support and assistance applications;
  • partnership, sponsorship, mentoring, hosting, collaboration, and volunteer enquiries;
  • newsletter and studio-notes subscriptions;
  • donations and transaction information received from PayPal or another payment provider;
  • events, workshops, grants, exhibitions, mentorship, and community programmes;
  • emails, WhatsApp messages, social-media messages, and other direct communications.

It does not replace the separate privacy information supplied by Formspree, PayPal, Google, Instagram, Facebook, WhatsApp, or another external service you choose to use.

03 · Information

What information may KAGU receive?

The exact information depends on why you contact KAGU. It may include:

  • your name, email address, location, and other contact information you choose to provide;
  • your creative practice, portfolio or work link, the barrier you are facing, and the practical support requested;
  • your organisation, partnership interest, skills, availability, proposal, or message;
  • your newsletter email address and a record of the privacy and marketing acknowledgement submitted with the form;
  • communications, notes, photographs, videos, project information, and programme records relevant to support or collaboration;
  • donation amount, payer name, email address, transaction reference, and other limited details supplied by the payment provider—KAGU does not receive your full card or bank-account details through this website;
  • technical information recorded by the website host or Formspree for security and service operation, such as IP address, device, browser, submission time, and page URL.

Please do not send personal or sensitive information that is not needed. A support application may reveal hardship, health, accessibility, immigration, family, or financial circumstances. Where such information is relevant, KAGU will aim to use only what is necessary and handle it with additional care.

04 · How KAGU uses information

Why is personal information used?

KAGU uses information only for relevant foundation purposes, including to:

  • review support applications and decide what assistance may be available;
  • contact applicants, arrange conversations, request clarification, and manage support;
  • plan and deliver grants, materials, mentorship, workshops, exhibitions, events, and community activities;
  • respond to partnership, volunteer, sponsorship, hosting, and collaboration enquiries;
  • send studio notes and updates where you have actively subscribed;
  • record donations, administer payment-provider information, and meet accounting or legal requirements;
  • protect applicants, artists, volunteers, partners, the foundation, and its services from misuse or fraud;
  • keep appropriate records of decisions, agreements, programme delivery, complaints, and safeguarding concerns;
  • establish, exercise, or defend legal claims and respond to lawful requests from authorities.

KAGU does not sell personal information and does not use support-application information for unrelated advertising. KAGU does not use solely automated decision-making to approve or reject creative-support applications.

05 · Lawful bases

What permits KAGU to use information?

Where data-protection law requires a lawful basis, the basis depends on the situation:

Legitimate interests

To respond to enquiries, assess and manage support, operate programmes, coordinate partners, protect the service, and advance KAGU's charitable or community aims, provided those interests are not overridden by your rights.

Steps before or performance of an agreement

Where information is needed to consider, enter into, or manage a grant, support, partnership, sponsorship, volunteer, event, or other arrangement with you.

Legal obligation

Where records or disclosures are required by tax, accounting, court, regulatory, sanctions, or other applicable law.

Consent

For optional studio notes and other uses where consent is appropriate. You can withdraw consent at any time without affecting earlier lawful use.

Vital interests

In a rare emergency where using or sharing information is necessary to protect someone's life.

06 · Sharing

Who may receive your information?

KAGU limits access to people and providers who need information for the relevant task. This may include:

  • authorised KAGU team members, directors, programme coordinators, and volunteers;
  • mentors, workshop leaders, event hosts, partner organisations, suppliers, or other people involved in delivering the support you request;
  • Formspree, which receives on-site form submissions, provides spam and service-security controls, stores submissions in the form account, and sends email notifications;
  • KAGU's email, storage, website-hosting, and administrative service providers;
  • PayPal or another payment provider for donations and payments;
  • professional advisers, insurers, auditors, law-enforcement bodies, courts, regulators, or public authorities where disclosure is lawful and necessary.

KAGU aims to share only the minimum reasonably necessary for the purpose. Some providers may process information in countries different from yours. Where transfer rules apply, KAGU will rely on the provider's contractual and legal safeguards or another approved transfer mechanism.

07 · Retention

How long is information kept?

KAGU keeps personal information only for as long as it is reasonably needed for the purpose it was collected, programme continuity, relationship management, dispute handling, safeguarding, and applicable legal, tax, or accounting requirements.

Applications and enquiries

Reviewed periodically and deleted or anonymised when no longer needed for assessment, follow-up, programme matching, safety, complaint handling, or record-keeping.

Active support and programme records

May be kept throughout the relationship and afterwards where needed to document grants, services, agreements, outcomes, safeguarding, or legal obligations.

Newsletter records

Kept while you remain subscribed. If you unsubscribe, KAGU may keep the minimum information needed to honour the opt-out and avoid sending further marketing.

Donation and transaction records

Kept for the period required for accounting, tax, audit, fraud prevention, and legal compliance.

Retention is not indefinite by default. When information is no longer needed, KAGU will aim to delete it securely or remove identifying details. You may ask KAGU about the retention decision that applies to your record.

08 · Website & cookies

What happens when you use this website?

The public KAGU website is primarily a static information site. It does not currently use an advertising tracker or audience-analytics service.

  • The site stores your chosen colour palette in your browser's local storage so your visual preference can be remembered. This is not used to identify you or track you across websites.
  • The website host may create essential server and security logs.
  • The site requests web fonts from Google. Your browser may send Google technical information needed to deliver those files.
  • Form submissions are sent to Formspree. Formspree processes the fields you enter and technical information associated with the submission, and then makes the submission available to KAGU through email notifications and the Formspree service.
  • Donation payments are completed on PayPal. PayPal controls the payment page and its cookies; this website does not collect your full card or bank details.
  • Links to Instagram, Facebook, WhatsApp, PayPal, and other external services take you to those providers, which operate under their own privacy and cookie notices.

Studio notes are optional. The newsletter form records your email address, the policy version, and your acknowledgement. You can withdraw marketing consent at any time by emailing KAGU or using any unsubscribe method provided in a message.

If KAGU later introduces non-essential analytics, embedded media, or marketing cookies, this notice will be updated and consent will be requested where the law requires it.

09 · Your rights

What can you ask KAGU to do?

Depending on where you live, the information involved, and the lawful basis, you may have the right to:

  • ask for a copy of your personal information;
  • ask KAGU to correct inaccurate or incomplete information;
  • ask KAGU to delete information;
  • ask KAGU to restrict how information is used;
  • object to processing based on legitimate interests or to direct marketing;
  • receive certain information in a portable format;
  • withdraw consent where processing relies on consent.

These rights are not absolute, and legal exemptions may apply. To make a request, email [email protected]. KAGU may need to confirm your identity before releasing or changing information.

If you are below the age at which you can provide valid privacy consent in your country, ask a parent or guardian to help you before submitting personal information.

10 · Contact & complaints

Questions, concerns, and complaints

Please contact KAGU first if you have a question or concern about your personal information. The foundation will take it seriously and try to resolve it.

Email KAGU Foundation[email protected]

You may also have the right to complain to the data-protection authority where you live or work. People in the United Kingdom can contact the Information Commissioner's Office (ICO). People in the European Economic Area can contact their local supervisory authority.

Make a data-protection complaint to the ICO ↗

KAGU will review this notice when its forms, service providers, legal obligations, or information-handling practices change. The latest revision date appears at the top of this page.