Last updated: January 2024
Introduction
mauve-petal ("we", "our", "us") is committed to protecting and respecting your privacy. This policy explains how we collect and process personal data when you use our website or services.
We are the data controller for the personal information we process, unless otherwise stated. Our contact details are provided at the end of this policy.
Information We Collect
We may collect and process the following categories of personal data:
- Contact Information: Name, email address, and postal address when you submit enquiry forms or enrol in courses.
- Course-Related Data: Information about courses you've expressed interest in or enrolled for, attendance records, and progress assessments.
- Payment Information: Bank account or card details processed securely for course fees. We do not store full payment card numbers.
- Technical Data: IP address, browser type, device information, and pages visited when you access our website.
- Communication Records: Contents of emails and messages you send us.
How We Use Your Information
We use personal data for the following purposes:
- To respond to your enquiries and provide information about our courses
- To process enrolments and manage your participation in programmes
- To collect course fees and maintain financial records
- To send course materials, updates, and administrative communications
- To improve our website and services based on usage patterns
- To comply with legal obligations and protect our legitimate interests
Legal Basis for Processing
We process your personal data on the following legal grounds:
- Contract: Processing necessary to fulfil our agreement when you enrol in a course
- Legitimate Interests: Processing for our business purposes where this does not override your rights
- Consent: Where you have given specific consent for particular processing activities
- Legal Obligation: Processing required to comply with UK law
Data Sharing
We do not sell your personal information. We may share data with:
- Payment processors to handle course fee transactions
- IT service providers who help maintain our systems
- Professional advisers such as accountants or lawyers when necessary
- Regulatory authorities if required by law
All third parties are required to handle your data securely and in accordance with applicable data protection laws.
Data Retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected. Specifically:
- Enquiry data: 2 years from last contact
- Enrolment and course records: 6 years after course completion
- Financial records: 7 years as required by accounting regulations
- Marketing preferences: Until you withdraw consent
Your Rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data in certain circumstances
- Object to processing based on legitimate interests
- Request restriction of processing
- Data portability where technically feasible
- Withdraw consent at any time where processing is based on consent
To exercise these rights, please contact us using the details below.
Cookies
Our website uses cookies. Please see our separate Cookie Policy for detailed information.
Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure.
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.
Contact Us
For questions about this policy or your personal data:
mauve-petal
47 Queens Road
Bristol BS8 1QS
United Kingdom
Email: [email protected]
Complaints
If you have concerns about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.