Our commitment to protecting your personal data under UK GDPR
Last updated: July 2024
lunar-egret is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of personal data seriously and have implemented measures to ensure that all data processing activities meet the requirements of these regulations.
For the purposes of UK GDPR, lunar-egret acts as the data controller for personal information collected through our website and educational services. This means we determine the purposes and means of processing your personal data.
Contact details:
lunar-egret
147 Sauchiehall Street
Glasgow G2 3EW
United Kingdom
Email: [email protected]
We process personal data based on one or more of the following lawful bases:
Under UK GDPR, you have the following rights regarding your personal data:
You have the right to request copies of the personal data we hold about you. We will respond to your request within one month.
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, in a structured, commonly used, and machine-readable format.
You have the right to object to our processing of your personal data where we rely on legitimate interests as the legal basis for processing.
To exercise any of these rights, please contact us using the details above. We will respond to all legitimate requests within one month. Occasionally, it may take longer if your request is particularly complex or you have made multiple requests.
We may need to verify your identity before processing your request. There is no fee for making a request, although we may charge a reasonable fee if your request is clearly unfounded or excessive.
We have implemented appropriate technical and organisational security measures to protect your personal data, including:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights, we will also notify you directly.
We primarily process data within the United Kingdom. If we transfer personal data outside the UK, we ensure appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.
Some of our courses are designed for young people. Where we collect data from individuals under 16, we require parental or guardian consent. Parents and guardians may exercise data protection rights on behalf of their children.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
This GDPR compliance statement provides an overview of how we handle personal data. For complete details on our data processing practices, please refer to our Privacy Policy. We are committed to transparency and will update this page as regulations or our practices evolve.