GDPR Compliance Statement

1. Our Commitment to GDPR

We are committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR). This statement outlines how we fulfill our obligations under GDPR and respect your rights as a data subject.

2. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you enroll in courses or sign up for communications
• Contractual Necessity: To deliver educational services you've enrolled in
• Legitimate Interests: To improve our services and communicate relevant information
• Legal Obligation: When required to comply with applicable laws

3. Data Controller Information

The data controller responsible for your personal information is:

dapper-raven
47 Whiteladies Road
Clifton, Bristol
BS8 2LS
United Kingdom
Email: [email protected]

4. Your GDPR Rights

Under GDPR, you have the following rights:

Right to Access

You can request a copy of the personal data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data under certain circumstances.

Right to Restriction

You can request that we restrict processing of your personal data in specific situations.

Right to Data Portability

You can request your personal data in a structured, commonly used, machine-readable format.

Right to Object

You can object to processing of your personal data based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time.

5. How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Course enrollment and delivery: Duration of course plus 3 years
• Marketing communications: Until you withdraw consent
• Legal and regulatory requirements: As required by applicable law

7. International Data Transfers

Your personal data is processed and stored within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR.

8. Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

9. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

10. Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: ico.org.uk

11. Updates to This Statement

We may update this GDPR statement periodically to reflect changes in our practices or legal requirements. The updated version will be posted on our website with a revised date.