velvet-otter is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we comply with data protection legislation and your rights as a data subject.
velvet-otter acts as the data controller for personal information collected through this website and in connection with our educational services. We determine the purposes and means of processing personal data.
Contact Details:
velvet-otter
47 Cathedral Road
Cardiff, CF11 9HB
United Kingdom
Email: [email protected]
We adhere to the core principles of the UK GDPR when processing personal data:
We rely on the following lawful bases for processing your personal data:
When you submit an enquiry form or subscribe to communications, you provide consent for us to process your data for those specific purposes. You may withdraw consent at any time by contacting us.
When you register for a course, we process your data as necessary to perform our contract with you, including managing your enrolment, sending course materials, and issuing certificates.
We may process data based on our legitimate interests in operating and improving our educational services, provided these interests do not override your rights and freedoms. This includes website analytics and service improvement.
As a data subject, you have the following rights:
You have the right to obtain confirmation that we are processing your personal data and to access that data, along with information about how it is processed.
You have the right to have inaccurate personal data corrected and incomplete data completed.
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose or when you withdraw consent.
You have the right to request limitation of processing in certain circumstances, such as when you contest the accuracy of the data.
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
You have the right to object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.
You have rights not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making in this manner.
To exercise any of your data protection rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases or where we receive numerous requests, this period may be extended by a further two months, in which case we will inform you.
We may need to verify your identity before processing your request. There is no fee for most requests, though we may charge a reasonable fee for manifestly unfounded or excessive requests.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will notify you directly without undue delay.
We primarily store and process data within the United Kingdom. If data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
If you are not satisfied with how we handle your data or your rights request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
We may update this GDPR compliance information periodically. Any significant changes will be communicated through our website.
Last updated: August 2024