1. What’s the purpose of this document?

The purpose of this document is to inform you of exactly what information about you that we collect, store and process. To generalise we do not store any information about you that does not help us provide the services you have purchased from us. We are committed to being transparent and open and this document will outline exactly what is stored and how it is used.

2. What do we mean by “personal information?”

“personal information” means any information that identifies you, things like your name or email address.

Any information that falls outside of this is “non-personal information.”

If we store your personal information with information that is non-personal, we will consider the combination as personal information. If we remove all personal information from a set of data then the remaining is non-personal information.

3. Your data

3.1 What We Collect

We collect personally identifiable information in order to provide you with a service and identify that you are the owner of the provided service. The following is the set of personally identifiable information we collect from you and the legal and practical justification for its collection

Data Process Basis for Processing
Email Address Contacting you Legitimate Interest – Relationship management. We will use your email address to send you information regarding the product.
Full name Contacting you Legitimate interest – Relationship management. We will use your name to send you information regarding the product
Password Security Legitimate interest – This is used to protect us and our users from malicious or fraudulent actions against the site, or your account.

3.2 What we do not collect

Special category data. Special category data is personal data which the GDPR says is more sensitive, and so needs more protection. We do not collect any special categories of personal Data. For your reference these special categories are:

• race
• ethnic origin
• politics
• religion
• trade union membership
• genetics
• biometrics (where used for ID purposes);
• health
• sex life
• sexual orientation

3.3 How your data is collected

Your information is collected via a form that you complete on registration with the website.

3.4 How your data is used

3.4.1 To provide you with the requested service

We use your data to contact you and give you access to the requested product and associated information, we also use it to confirm the correct certification is provided to you.

3.4.2 Third parties

We supply your email address to Teachable in order to provide access to your product. Teachable comply with the General Data Protection Regulations as detailed on their privacy policy here:

http://blog.teachable.com/gdpr

3.4.3 Marketing

We will provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
We may use your identity and contact data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing).

You will receive marketing communications from us if you have purchased goods or services from us, taken advantage of a free hosting offer, in each case, you have not opted out of receiving that marketing.

3.5 Third party processors

We do not supply your personal information to third party processors.

4. Your rights

The right to be informed – You will the be informed about the collection and use of your personal data.

The right of access – You will have access your personal data and supplementary information.

The right to rectification –  You can have inaccurate personal data rectified, or completed if it is incomplete.

The right to erasure – You can have personal data erased when that erasure does not conflict with our legal obligations or security requirements.

The right to restrict processing – You have the right to request the restriction or suppression of your personal data.

The right to data portability – You can always obtain and reuse your personal data for your own purposes across different services

The right to object – You have the right to object to data processing based on legitimate interests, direct marketing (including profiling); and processing for purposes of scientific/historical research and statistics. Please note that object to data processing may make it impossible for us to provide you with a service.

You have rights in relation to automated decision making and profiling.

For further reference please see the ICO document here

https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/