Our Commitment to Data Protection
equinox-gain is fully committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take data protection seriously and have implemented comprehensive measures to ensure your personal information is handled responsibly.
Data Controller Information
equinox-gain acts as the data controller for personal information collected through our website and services. Our contact details are:
equinox-gain
45 Park Row
Leeds, LS1 5JL
United Kingdom
Email: [email protected]
Your Rights Under UK GDPR
The UK GDPR provides you with the following rights regarding your personal data:
Right to Be Informed
You have the right to know how your data is being collected and used. We provide this information through our Privacy Policy and this GDPR compliance page.
Right of Access
You can request a copy of all personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond within one month of receiving your request.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. We will make corrections within one month of your request.
Right to Erasure
Also known as the "right to be forgotten", you may request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose.
Right to Restrict Processing
You can request that we limit how we use your personal data while we verify accuracy or investigate concerns you have raised.
Right to Data Portability
Where technically feasible, you can request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
Right to Object
You have the right to object to processing of your personal data for direct marketing purposes. We will immediately stop such processing upon receiving your objection.
Rights Related to Automated Decision Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
Exercising Your Rights
To exercise any of your data protection rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We aim to respond to all legitimate requests within one month.
There is no fee for exercising your rights unless your request is clearly unfounded, repetitive, or excessive, in which case we may charge a reasonable fee or refuse to comply.
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Contractual Necessity: To deliver our educational programmes and services
- Legitimate Interests: To improve our services, send relevant communications, and ensure security
- Consent: For marketing communications and cookies (where applicable)
- Legal Obligation: To comply with tax, accounting, and regulatory requirements
Special Category Data
We may collect limited special category data relating to children's educational needs where necessary to deliver appropriate services. This processing is carried out with explicit parental consent and for the purpose of providing our educational programmes.
International Data Transfers
We primarily store and process data within the United Kingdom. If any data is transferred outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and, where required, inform affected individuals without undue delay.
Data Protection Impact Assessments
We conduct Data Protection Impact Assessments (DPIAs) for any processing activities that may result in high risk to individuals, including any new programmes or services involving children's data.
Staff Training
All staff members receive training on data protection principles and are required to handle personal data in accordance with this policy and applicable law.
Complaints
If you are dissatisfied with how we have handled your personal data, please contact us first so we can try to resolve your concerns. If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Policy Updates
This GDPR compliance information is reviewed regularly and updated as necessary to reflect changes in our practices or legal requirements. The latest version will always be available on our website.