Privacy Policy

Last updated: January 2024

Introduction

This privacy policy explains how petal-sable collects, uses, stores, and protects your personal data when you use our website and services. We are committed to ensuring your privacy is protected in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

We may collect the following types of personal information:

• Name and contact details (email address) when you submit enquiry or enrolment forms
• Course preferences and educational interests
• Technical information such as IP address, browser type, and device information
• Usage data including pages visited and time spent on our website
• Cookie data as described in our Cookie Policy

How We Use Your Information

We use your personal information for the following purposes:

• To process and respond to your course enquiries and enrolment requests
• To provide you with information about our educational programmes
• To improve our website and services based on user feedback and behaviour
• To comply with legal obligations and protect our legitimate interests
• To send you relevant updates about courses you have expressed interest in

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: Where you have given explicit consent for specific purposes
• Contract: Where processing is necessary to fulfil our contractual obligations
• Legitimate interests: Where processing is necessary for our legitimate business interests
• Legal obligation: Where processing is required by law

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your data with:

• Service providers who assist with website hosting and technical operations
• Professional advisers including legal and accounting professionals
• Regulatory authorities when required by law

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected. Enquiry data is typically retained for 24 months. Enrolled student records are retained for 7 years following course completion to comply with educational record-keeping requirements.

Your Rights

Under data protection law, you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes encrypted connections, secure servers, and restricted access to personal data.

International Transfers

Your personal data is primarily stored and processed within the United Kingdom. If data transfer outside the UK becomes necessary, we ensure appropriate safeguards are in place in accordance with data protection regulations.

Changes to This Policy

We may update this privacy policy periodically. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly.

Contact Us

If you have questions about this privacy policy or wish to exercise your data protection rights, please contact us:

Email: [email protected]
Address: 47 Victoria Square, Birmingham B1 1BD, United Kingdom

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.