Our commitment to protecting your data under the General Data Protection Regulation
We are committed to ensuring the security and protection of the personal information that we process, and to providing a compliant and consistent approach to data protection. This page outlines how we comply with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
For the personal data we collect through our website and in the course of providing our educational services, we act as the data controller. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws.
We only process personal data where we have a lawful basis for doing so. The lawful bases we rely on include:
When you enrol in one of our courses, we process your personal data as necessary to perform our contract with you. This includes processing your name, contact details, and payment information to deliver the educational services you have purchased.
We may process your data where it is in our legitimate interests to do so and where these interests are not overridden by your rights. Examples include analysing website usage to improve our services and sending service-related communications.
Where we rely on consent as a legal basis for processing, you have the right to withdraw that consent at any time. This applies, for example, to marketing communications where you have opted in to receive them.
We may process your data where necessary to comply with a legal obligation, such as keeping records for tax purposes or responding to lawful requests from public authorities.
The GDPR provides you with the following rights in relation to your personal data:
You have the right to obtain confirmation as to whether we are processing your personal data and, if so, to access that data along with information about how it is processed.
You have the right to have inaccurate personal data corrected and incomplete personal data completed.
In certain circumstances, you have the right to request the deletion of your personal data. This right is not absolute and only applies in specific situations, such as when the data is no longer necessary for the purpose for which it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
You have the right to object to the processing of your personal data where we are relying on legitimate interests as the legal basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.
While we are not legally required to appoint a Data Protection Officer, we have designated a data protection lead who is responsible for overseeing our data protection strategy and implementation. For any data protection enquiries, please contact us at [email protected].
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to the rights and freedoms of individuals, we will notify the relevant supervisory authority within 72 hours of becoming aware of it. Where the breach is likely to result in a high risk to individuals, we will also notify those individuals directly.
We primarily process personal data within the United Kingdom and European Economic Area. Where data is transferred outside these regions, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the relevant authorities.
To exercise any of your rights under the GDPR, please contact us using the details below. We will respond to your request within one month, although this period may be extended by two further months where necessary, taking into account the complexity and number of requests.
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.
For any questions about this GDPR statement or our data protection practices, please contact:
Email: [email protected]
Address: 42 Clerkenwell Road, London, EC1M 5PS, United Kingdom
Last updated: January 2024