GDPR Compliance

Our Commitment to Data Protection

grove-bear is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take your privacy seriously and have implemented measures to ensure your personal data is handled lawfully, fairly, and transparently.

Data Controller Information

For the purposes of data protection legislation, grove-bear acts as the data controller for personal information collected through this website and our educational services.

Address: 47 College Green, Bristol, BS1 5TH, United Kingdom

Email: [email protected]

Principles We Follow

We adhere to the following data protection principles:

• Lawfulness, fairness, and transparency in processing
• Purpose limitation: collecting data only for specified purposes
• Data minimisation: collecting only what is necessary
• Accuracy: keeping data up to date
• Storage limitation: retaining data only as long as necessary
• Integrity and confidentiality: ensuring appropriate security
• Accountability: demonstrating compliance

Your Data Subject Rights

Under UK GDPR, you have the following rights:

Right of Access: You can request a copy of the personal data we hold about you. We will respond within one month of receiving your request.

Right to Rectification: You can request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure: In certain circumstances, you can request deletion of your personal data. This applies when data is no longer necessary, you withdraw consent, or data has been unlawfully processed.

Right to Restrict Processing: You can request that we limit how we use your data in certain circumstances.

Right to Data Portability: Where processing is based on consent or contract, you can request your data in a commonly used, machine-readable format.

Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making: You have rights concerning decisions made solely by automated means that significantly affect you.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request. There is no fee for most requests, though we may charge a reasonable fee for repetitive or unfounded requests.

Lawful Bases for Processing

We rely on the following lawful bases for processing personal data:

• Consent: When you submit enquiry forms or subscribe to communications
• Contract: When processing is necessary to fulfil a course enrolment
• Legitimate Interests: For improving our services and website functionality
• Legal Obligation: When required by law to retain certain records

Data Breach Procedures

In the event of a personal data breach that poses a risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. If the breach is likely to result in a high risk to you, we will also notify you directly.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113

Updates to This Notice

We review our data protection practices regularly and may update this notice accordingly. The current version will always be available on this page.