GDPR Compliance

Last updated: January 2024

Our Commitment to Data Protection

We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we comply with these regulations and your rights as a data subject.

Data Controller

For the purposes of data protection legislation, calm-ibis acts as the data controller for personal information collected through this website and our educational services.

Contact address:
42 Castle Street
Liverpool, L2 7LA
United Kingdom

Lawful Basis for Processing

We only process personal data when we have a lawful basis to do so. The legal bases we rely on include:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for the performance of a contract with you, such as course enrolment
• Legitimate Interests: Where processing is necessary for our legitimate interests, provided these do not override your rights
• Legal Obligation: Where processing is necessary to comply with the law

Your Rights Under GDPR

The UK GDPR provides you with the following rights:

Right to Access

You have the right to request a copy of the personal information we hold about you. We will respond to your request within one month.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure

In certain circumstances, you have the right to request deletion of your personal data. This right applies where the data is no longer necessary for its original purpose, or where you withdraw consent.

Right to Restrict Processing

You may request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

Where we process your data based on consent or contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not currently use automated decision-making or profiling that produces legal effects concerning you.

Data Security Measures

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data where appropriate
• Regular security assessments
• Access controls limiting who can view personal data
• Staff training on data protection practices

International Transfers

We primarily store and process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Data Breach Procedures

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and, where required, inform affected individuals without undue delay.

Exercising Your Rights

To exercise any of your rights, or if you have questions about our data protection practices, please contact us:

Email: [email protected]

Address: 42 Castle Street, Liverpool, L2 7LA, United Kingdom

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113