GDPR

Introduction and Scope

1.1. U-Educate is committed to protecting the personal data of individuals and ensuring compliance with the General Data Protection Regulation (GDPR) and related UK data protection laws.

1.2. This policy outlines how U-Educate collects, processes, stores, and protects personal data and the rights of individuals regarding their data.

 

Data Controller Information

2.1. U-Educate, with registered address 24 The Courtyard, Gorsey Lane, Coleshill, B46 1JA is the data controller responsible for the collection, processing, and storage of personal data.

2.2. For any questions or concerns related to data protection, please contact Adam Gray or Christian Brown

 

Personal Data Collection

3.1. U-Educate collects personal data necessary for the provision of its services and operations, such as student records, contact information, and any other relevant data.

3.2. Personal data may be collected through various channels, including online forms, applications, and direct communication.

 

Lawful Basis for Processing

4.1. U-Educate processes personal data on the following lawful bases:

  1. Consent: When individuals provide their explicit consent for specific processing activities.
  2. Contractual Necessity: When processing is necessary for the performance of a contract or to take steps before entering into a contract.
  3. Legal Obligations: When processing is necessary to comply with legal obligations imposed on U-Educate.
  4. Legitimate Interests: When processing is necessary for the legitimate interests pursued by U-Educate, except where overridden by the individual’s interests or fundamental rights.

 

Data Subject Rights

5.1. Individuals have the following rights under the GDPR:

  1. Right to Access: The right to request access to personal data held by U-Educate.

 

  1. Right to Rectification: The right to request the correction of inaccurate or incomplete personal data.
  2. Right to Erasure: The right to request the deletion of personal data under specific circumstances.
  3. Right to Restriction of Processing: The right to request the restriction of processing of personal data in certain situations.
  4. Right to Object: The right to object to the processing of personal data, unless U-Educate demonstrates compelling legitimate grounds.
  5. Right to Data Portability: The right to receive personal data in a structured, commonly used, and machine-readable format.

5.2. Individuals can exercise their rights by submitting a written request to Adam Gray or Christian Brown

 

Data Processing and Retention

6.1. U-Educate processes personal data only for specified purposes and in accordance with the lawful bases outlined in section 4.

6.2. Personal data is retained for as long as necessary to fulfil the purposes for which it was collected or as required by applicable laws and regulations.

6.3. Once personal data is no longer needed, it will be securely and permanently deleted.

 

Data Security

7.1. U-Educate employs appropriate technical and organisational measures to safeguard personal data against unauthorised access, loss, or alteration.

7.2. Regular security assessments, staff training, and confidentiality agreements are in place to ensure data protection.

7.3. In the event of a data breach, U-educate has procedures in place to detect, investigate, and report breaches, as required by law.

 

International Data Transfers

8.1. U-Educate may transfer personal data to countries outside the UK or the European Economic Area (EEA) when necessary, ensuring appropriate safeguards are in place to protect the data.

 

Complaints and Concerns

9.1. Individuals have the right to lodge complaints or raise concerns about U-Educate’ data protection practices.

 

9.2. Complaints should be addressed to Adam Gray or Christian Brown.

9.3. Individuals also have the right to lodge complaints with the Information Commissioner’s Office (ICO) or any other relevant supervisory authority.

 

Policy Review

10.1. This GDPR UK Policy is regularly reviewed to ensure compliance with applicable data protection laws.

10.2. Any updates or amendments to this policy will be communicated to relevant stakeholders.