Privacy Policy - heath-leopard

Last updated: January 2024

Introduction

Heath-leopard ("we", "our", or "us") is committed to protecting the privacy of individuals who visit our website and use our educational services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage with our services.

Information We Collect

Personal Information You Provide

When you interact with our website or services, we may collect personal information that you voluntarily provide, including:

Name and contact details (email address, postal address)
Information about programme preferences and enrolment requests
Communications you send to us via forms or email
Payment information when processed through secure third-party providers

Information Collected Automatically

When you access our website, certain information may be collected automatically:

Browser type and version
Operating system
Pages visited and time spent on pages
Referring website addresses
IP address (anonymised where possible)

How We Use Your Information

We use the information we collect for the following purposes:

To process enrolment requests and manage programme participation
To respond to enquiries and provide customer support
To send administrative communications about your enrolment
To improve our website and services based on usage patterns
To comply with legal obligations

Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data based on:

Contractual necessity: To fulfil our obligations when you enrol in programmes
Legitimate interests: To improve services and respond to enquiries
Consent: Where you have provided explicit consent for specific purposes
Legal obligation: To comply with applicable laws and regulations

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information with:

Service providers who assist in operating our website and delivering services
Professional advisers where necessary for legal or compliance purposes
Authorities when required by law or to protect rights and safety

Data Retention

We retain personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Enrolment records are typically retained for seven years following programme completion for administrative and legal purposes.

Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right of access: Request copies of your personal data
Right to rectification: Request correction of inaccurate data
Right to erasure: Request deletion of your data in certain circumstances
Right to restrict processing: Request limitation of how we use your data
Right to data portability: Request transfer of your data to another organisation
Right to object: Object to certain types of processing

To exercise any of these rights, please contact us using the details provided below.

Data Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Children's Privacy

Our youth programmes involve processing data of children aged 8-17. We obtain parental or guardian consent before collecting personal information from children. Parents and guardians may review, update, or request deletion of their child's information by contacting us.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the updated policy on this page with a revised "last updated" date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Heath-leopard
42 George Street
Edinburgh, EH2 2LR
Email: [email protected]

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.