GDPR Compliance
Last Updated: September 2026
Our Commitment to GDPR
We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines how we comply with these regulations and your rights as a data subject.
Legal Basis for Processing
We process personal data under the following lawful bases:
- Contract Performance: Processing necessary to fulfill our course delivery obligations
- Legitimate Interests: Improving our services and maintaining security
- Consent: For marketing communications and optional data uses
- Legal Obligation: Compliance with applicable laws and regulations
Your GDPR Rights
Right to Access
You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within one month of your request.
Right to Rectification
If you believe any personal data we hold is inaccurate or incomplete, you can request corrections. We will update records promptly upon verification.
Right to Erasure
You may request deletion of your personal data under certain circumstances, including when data is no longer necessary for the purposes collected or if you withdraw consent.
Right to Restrict Processing
You can request limitation of how we process your data while we verify accuracy or assess legitimate grounds for processing.
Right to Data Portability
You have the right to receive your personal data in a structured, machine-readable format and transmit it to another controller.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.
Rights Related to Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
How to Exercise Your Rights
To exercise any GDPR rights, submit a request to [email protected] with the following information:
- Your full name and email address associated with our services
- Specific right you wish to exercise
- Any relevant details to help us locate your data
We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of any such extension.
Data Protection Officer
For questions regarding GDPR compliance or data protection practices, contact our data protection officer at [email protected].
Data Transfers
We primarily store and process data within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach, as required by GDPR.
Supervisory Authority
You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. In the United Kingdom, the relevant authority is:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Updates to GDPR Compliance
We regularly review our data protection practices to ensure ongoing compliance with GDPR. Any significant changes will be communicated through updates to this page and our Privacy Policy.