GDPR Compliance

Data Controller

violet-glade is the data controller responsible for processing your personal data. We are committed to protecting your privacy in compliance with the UK General Data Protection Regulation and Data Protection Act 2018.

Legal Basis for Processing

We process personal data based on the following lawful grounds:

• Contract performance when providing our educational services
• Legitimate interests in operating and improving our business
• Legal obligations including safeguarding requirements
• Consent where explicitly provided for specific purposes

Your GDPR Rights

You have the following rights regarding your personal data:

Right to Access

You may request a copy of the personal data we hold about you. We will provide this within one month of your request.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request corrections.

Right to Erasure

You may request deletion of your personal data in certain circumstances, subject to legal retention requirements.

Right to Restrict Processing

You can request that we limit how we use your personal data in specific situations.

Right to Data Portability

You may request your personal data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

We do not use automated decision making or profiling that produces legal effects concerning you.

How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month. If your request is complex or numerous, we may extend this period by two months and will inform you accordingly.

Data Protection Officer

For questions about data protection or to lodge a complaint, contact our Data Protection Officer at [email protected].

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. Visit ico.org.uk for more information.

International Data Transfers

We do not transfer personal data outside the United Kingdom. All data is processed and stored within UK jurisdiction.

Data Breach Notification

In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify you and the ICO within 72 hours of becoming aware of the breach.