GDPR Compliance

Last updated: January 2024

About the UK GDPR

The UK General Data Protection Regulation (UK GDPR) is the UK's data protection framework, retained from EU law following Brexit. It gives you control over your personal data and places obligations on organisations that process your information.

Tidalthorn is committed to complying with the UK GDPR and protecting your personal data. This page explains your rights and how we fulfil our obligations.

Data Controller

Tidalthorn is the data controller for personal data collected through our website and services. This means we determine how and why your personal data is processed.

Contact details:
Tidalthorn
47 Buchanan Street
Glasgow G1 3HL
United Kingdom
Email: [email protected]

Your Individual Rights

The UK GDPR provides the following rights for individuals:

1. The Right to Be Informed

You have the right to be informed about the collection and use of your personal data. Our Privacy Policy and this GDPR page provide this information.

2. The Right of Access

You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond within one month of receiving your request.

3. The Right to Rectification

You have the right to have inaccurate personal data corrected or completed if it is incomplete. We will respond within one month.

4. The Right to Erasure

Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, such as:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent (where consent was the legal basis)
• You object to processing and there are no overriding legitimate grounds
• The data was processed unlawfully

5. The Right to Restrict Processing

You can request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

6. The Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.

7. The Right to Object

You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.

8. Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making processes.

How to Exercise Your Rights

To exercise any of your rights under the UK GDPR, please contact us at:

Email: [email protected]

Or write to us at:
Tidalthorn
47 Buchanan Street
Glasgow G1 3HL
United Kingdom

We will respond to your request within one month. In complex cases, we may extend this by a further two months, but we will inform you if this is necessary.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you submit an enquiry form, you consent to us processing your data to respond to your enquiry
• Contract: When you enrol in a course, processing is necessary to deliver the service
• Legitimate Interests: We may process data for our legitimate business interests, such as improving our services, provided this does not override your rights

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

Data Breaches

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours. If the breach is likely to result in high risk to your rights and freedoms, we will also notify you directly.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk

Changes to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.