This content is advertising in nature

GDPR Compliance

Last updated: September 1, 2026

Our Commitment to Data Protection

The General Data Protection Regulation (GDPR) establishes comprehensive data protection standards for individuals in the European Economic Area and the United Kingdom. We are committed to full compliance with these regulations in all aspects of our data handling practices.

Data Controller Information

For the purposes of GDPR, the data controller responsible for your personal information is:

cascade-lemur
42 Kingsway Avenue
Holborn, London
WC2B 6TE
United Kingdom
Email: [email protected]

Legal Bases for Data Processing

We process personal data only when we have a valid legal basis. The specific basis depends on the purpose of processing:

  • Consent: When you submit contact forms or subscribe to communications, you provide explicit consent for us to process your information for the stated purpose.
  • Contract Performance: When you enroll in a course, processing your data is necessary to deliver the educational services you have contracted for.
  • Legitimate Interests: We process certain data to improve our website, understand visitor behavior, and maintain security. These legitimate business interests are balanced against your rights and freedoms.
  • Legal Obligation: Some data processing is required to comply with laws and regulations applicable to our operations.

Your GDPR Rights

Under GDPR, you have comprehensive rights regarding your personal data:

Right of Access

You have the right to request confirmation of whether we process your personal data and to receive a copy of that data along with information about how it is processed.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction or completion of that information.

Right to Erasure

Also known as the "right to be forgotten," you may request deletion of your personal data when it is no longer necessary for the purposes it was collected, when you withdraw consent, or when there is no overriding legitimate reason for continued processing.

Right to Restriction of Processing

You may request that we limit how we use your data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

Where technically feasible, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision-Making

We do not currently employ automated decision-making or profiling that produces legal effects or similarly significant consequences. Should this change, you would have the right to human intervention, to express your point of view, and to contest any automated decision.

How to Exercise Your Rights

To exercise any of the rights described above, please contact us at [email protected] with your specific request. We will respond within one month of receiving your request, though this period may be extended by two additional months in complex cases.

We may need to verify your identity before fulfilling certain requests to protect your data from unauthorized access.

Data Security Measures

We implement technical and organizational security measures appropriate to the risks associated with processing personal data, including:

  • Encryption of data in transit and at rest where appropriate
  • Access controls limiting data access to authorized personnel only
  • Regular security assessments and updates to our systems
  • Staff training on data protection principles and practices
  • Incident response procedures for potential data breaches

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach presents a high risk to your rights, we will also notify you directly without undue delay.

International Data Transfers

Your personal data is primarily processed and stored within the United Kingdom. Should we need to transfer data outside the UK or EEA, we will ensure appropriate safeguards are in place, such as standard contractual clauses approved by regulatory authorities.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods vary depending on the nature of the data and the purpose of processing:

  • Contact form inquiries: 2 years
  • Enrollment and course records: 7 years
  • Website analytics data: 26 months
  • Marketing communications: Until consent is withdrawn

Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete that information promptly.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority. In the United Kingdom, the relevant authority is:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

Updates to This Information

We review our GDPR compliance practices regularly and update this information as necessary. The date at the top of this document indicates when it was last revised.

Contact Information

For questions about GDPR compliance, to exercise your rights, or to reach our data protection officer, please contact us at [email protected].