GDPR Compliance

Our Commitment to GDPR

stellar-reef is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of your personal data seriously and have implemented appropriate measures to ensure compliance with data protection legislation.

Data Controller

stellar-reef acts as the data controller for personal information collected through our website and course registration processes. We determine the purposes and means of processing personal data in accordance with applicable data protection laws.

Lawful Basis for Processing

We process personal data only when we have a valid lawful basis to do so. The lawful bases we rely upon include:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Contract: Where processing is necessary for the performance of a contract with you
• Legitimate Interest: Where processing is necessary for our legitimate interests, provided these do not override your fundamental rights
• Legal Obligation: Where processing is necessary for compliance with legal requirements

Your Data Protection Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data. We may charge a small administrative fee for this service if requests are excessive or unfounded.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or incomplete.

Right to Erasure

You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions.

Right to Object

You have the right to object to our processing of your personal data under certain conditions, particularly where we rely on legitimate interests as our lawful basis.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

Exercising Your Rights

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month, though this period may be extended by two further months for complex requests. We will inform you of any such extension within one month of receiving your request.

Data Security Measures

We have implemented appropriate technical and organisational measures to protect personal data, including:

• Secure storage of personal information
• Access controls limiting who can view personal data
• Regular review of data protection practices
• Staff training on data protection requirements

Data Breach Procedures

In the event of a personal data breach that is likely to result in a risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify affected individuals without undue delay.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data infringes data protection laws. The relevant supervisory authority in the United Kingdom is the Information Commissioner's Office (ICO).

Contact Information

For any questions or concerns regarding our GDPR compliance or to exercise your data protection rights, please contact:

stellar-reef
42 Commerce Street
Liverpool, L1 6DS
[email protected]

Last updated: January 2024