GDPR Information

Last Updated: September 2026

1. Introduction

We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides specific information about your rights under GDPR and how we fulfill our obligations as a data controller.

2. Data Controller Information

For the purposes of UK GDPR, the data controller is:

45 Deansgate Avenue
Manchester M3 2BW
United Kingdom
Email: [email protected]

3. Your GDPR Rights Explained

3.1 Right to Be Informed

You have the right to be informed about the collection and use of your personal data. This information is provided through our Privacy Policy and this GDPR information page, detailing what data we collect, how we use it, how long we keep it, and who it may be shared with.

3.2 Right of Access

You have the right to access your personal data and obtain confirmation that your data is being processed. You can request:

• Confirmation of whether we are processing your personal data
• Access to your personal data
• Additional information about how we process your data

We will provide this information free of charge, typically within one month of your request.

3.3 Right to Rectification

You have the right to have inaccurate personal data corrected or incomplete personal data completed. If you identify any inaccuracies in the information we hold about you, please contact us and we will rectify the information promptly.

3.4 Right to Erasure (Right to Be Forgotten)

You have the right to request deletion of your personal data in certain circumstances, including:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased to comply with a legal obligation

This right is not absolute and may not apply where we have legal obligations to retain data, such as educational records.

3.5 Right to Restrict Processing

You have the right to restrict processing of your personal data in certain situations:

• You contest the accuracy of the data (during verification)
• Processing is unlawful but you prefer restriction over erasure
• We no longer need the data but you need it for legal claims
• You have objected to processing (pending verification of legitimate grounds)

3.6 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller. This right applies when:

• Processing is based on consent or contract
• Processing is carried out by automated means

3.7 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. When you object to processing for direct marketing purposes, we will stop processing your data for those purposes.

3.8 Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect you. We do not currently engage in automated decision-making of this nature.

4. How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us:

• Email: [email protected]
• Post: 45 Deansgate Avenue, Manchester M3 2BW, United Kingdom

When making a request, please provide sufficient information to allow us to identify you and verify your identity. We may request additional information if necessary to confirm your identity and protect your data.

5. Response Timeframes

We will respond to your request without undue delay and in any case within one month of receipt. This period may be extended by two further months where necessary, taking into account the complexity and number of requests. We will inform you of any extension within one month of receiving your request, along with reasons for the delay.

6. Lawful Bases for Processing

We process personal data under the following lawful bases:

• Consent: For enquiry forms and marketing communications (where applicable)
• Contract: For processing enrollments and delivering educational services
• Legal Obligation: For compliance with educational regulations and record-keeping requirements
• Legitimate Interests: For website functionality, security, and service improvement

7. Data Protection by Design and Default

We implement appropriate technical and organizational measures to ensure that, by default, only personal data necessary for each specific purpose is processed. This includes:

• Collecting only essential information
• Limiting access to personal data to authorized personnel
• Implementing security measures to protect data
• Regular review of data processing activities

8. Data Breach Notification

In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. Where required by law, we will also notify the Information Commissioner's Office within 72 hours of becoming aware of the breach.

9. International Data Transfers

We process and store personal data within the United Kingdom. If we transfer data outside the UK, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

10. Children's Data

While we provide educational services to children, parental or guardian consent is required for processing children's data. We take additional measures to protect children's information and ensure processing is lawful and appropriate.

11. Right to Lodge a Complaint

If you believe your data protection rights have been breached, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Telephone: 0303 123 1113
Website: ico.org.uk

12. Updates to This Information

We may update this GDPR information page periodically to reflect changes in our practices or legal requirements. Please check this page regularly for updates.

13. Contact Us

If you have questions about your GDPR rights or our data protection practices, please contact us at [email protected]