GDPR Information

Overview

The UK General Data Protection Regulation (UK GDPR) gives you specific rights regarding your personal data. This page explains those rights and how to exercise them.

Data Controller

teal-dusk is the data controller responsible for your personal data. We are based at:

42 Byres Road
Glasgow G11 5RD
United Kingdom
Email: [email protected]

Your Rights Under UK GDPR

Right to Access

You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request. We will provide this information within one month of receiving your request.

Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. We will make corrections within one month of being informed.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances, including:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restrict Processing

You can request that we limit how we use your personal data if:

• You contest the accuracy of the data
• Processing is unlawful but you don't want the data erased
• We no longer need the data but you need it for legal claims
• You have objected to processing pending verification of our legitimate grounds

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.

Right to Object

You can object to processing of your personal data where we rely on legitimate interests as our legal basis. We must stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision Making

We do not use automated decision making or profiling that produces legal effects or similarly significant effects on individuals.

How to Exercise Your Rights

To exercise any of these rights, send a written request to [email protected] or write to us at the address above. Please include:

• Your full name
• Contact details
• Description of your request
• Proof of identity (if requested)

We will respond within one month. If your request is complex, we may extend this by two additional months and will inform you of the extension.

Data Processing Activities

We process personal data for the following purposes:

• Course booking and administration
• Communication regarding services
• Responding to enquiries
• Legal and regulatory compliance

Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected. Course booking data is retained for seven years to comply with accounting regulations. Marketing communications are retained until you withdraw consent.

Data Security Measures

We implement appropriate technical and organizational measures, including:

• Encryption of data in transit and at rest
• Access controls limiting who can view personal data
• Regular security assessments
• Staff training on data protection

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach.

Complaints

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

International Data Transfers

We do not transfer personal data outside the United Kingdom. All data is stored and processed within the UK.

Changes to This Information

We may update this GDPR information periodically. Any changes will be posted on this page with an updated date.