GDPR Information

Understanding your data protection rights

General Data Protection Regulation Compliance

The General Data Protection Regulation (GDPR) provides comprehensive data protection rights for individuals in the European Union. This page explains how we comply with GDPR requirements and how you can exercise your rights.

Lawful Basis for Processing

We process personal data on the following lawful bases:

  • Consent: When you submit enquiries or enrol in programmes, you provide explicit consent for us to process your information
  • Contract Performance: Processing necessary to fulfil our obligations when you participate in our programmes
  • Legitimate Interests: For improving our services and communicating relevant information, balanced against your rights and interests
  • Legal Obligation: When required by law to retain or process certain information

Your GDPR Rights

Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. We will provide this information in a commonly used electronic format.

Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. We will update your records promptly upon verification.

Right to Erasure

Also known as the "right to be forgotten," you may request deletion of your personal data when:

  • The data is no longer necessary for the purposes for which it was collected
  • You withdraw consent and there is no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed

Right to Restriction of Processing

You can request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Data Protection Principles

We adhere to the following data protection principles:

  • Lawfulness, Fairness, and Transparency: We process data lawfully and transparently
  • Purpose Limitation: We collect data for specific, explicit purposes only
  • Data Minimisation: We collect only data that is necessary
  • Accuracy: We take reasonable steps to ensure data accuracy
  • Storage Limitation: We retain data only as long as necessary
  • Integrity and Confidentiality: We implement appropriate security measures
  • Accountability: We demonstrate compliance with these principles

Data Retention

We retain personal data according to the following criteria:

  • Enquiry data: Retained for 12 months after final contact
  • Participant data: Retained for the duration of programme participation plus 24 months
  • Financial records: Retained as required by law

After these periods, data is securely deleted or anonymised.

International Data Transfers

We process data primarily within the United Kingdom. If we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay, and no later than 72 hours after becoming aware of the breach.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us in writing:

Email: [email protected]
Address: 42 Kensington Lane, London, SW8 3PQ, United Kingdom

We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by two months and will inform you of such extension.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your national supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO).

ICO Contact Information:
Website: ico.org.uk
Telephone: 0303 123 1113

Updates to GDPR Information

We review and update this information regularly to ensure ongoing compliance with GDPR requirements. Significant changes will be communicated through our website.