GDPR Compliance

Data Controller

For the purposes of GDPR, the data controller is:

fern-hawk
42 Deansgate Avenue
Manchester M3 2FF
United Kingdom
[email protected]

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You have the right to obtain confirmation as to whether or not we process your personal data and, where we do, access to that data along with certain additional information.

Right to Rectification

You have the right to have inaccurate personal data corrected and incomplete personal data completed.

Right to Erasure

In certain circumstances, you have the right to request that we delete your personal data.

Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller.

Right to Object

You have the right to object to our processing of your personal data on grounds relating to your particular situation.

Right to Withdraw Consent

Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

How We Collect Data

We collect personal data when you:

• Fill out forms on our website
• Contact us by email
• Sign up for course information
• Use our website (technical data via cookies)

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: You have given clear consent for us to process your personal data for a specific purpose
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
• Legal obligation: Processing is necessary for us to comply with the law
• Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests

Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process your personal data, and applicable legal requirements.

Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We limit access to your personal data to those employees and other parties who have a business need to know.

International Transfers

We do not transfer your personal data outside the United Kingdom or European Economic Area.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at [email protected]. You will not have to pay a fee to access your personal data or to exercise any of your other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data or to exercise any of your other rights.

Right to Complain

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.

Updates to This Notice

We may update this GDPR compliance notice from time to time. We will notify you of any significant changes by posting the new notice on this page.