qualityculture Data Protection Policy
qualityculture Data Protection Policy
qualityculture Limited needs to gather and use certain information about individuals. These can be enquirers, customers, suppliers, business contacts, employees and other people we have a relationship with or may need to contact.
This policy describes how this personal data will be collected, handled and stored to meet our standards and comply with the law.
Who are we?
What Personal Data do we collect?
If you are making an enquiry through our contact forms on our websites, we will collect all information that you provide which will be, at minimum, your name and email address and, at most, your contact telephone number and postal address as well. If you make an enquiry via telephone we will ask to collect, again at minimum, your name and email address. We may also ask to collect your telephone number to ensure that contact is able to be maintained.
We collect your name, gender, date of birth and email address if you are being registered for an ILM qualification. Please read the ILM Data Policy.
How we use your personal data
For all enquiries we will send you our newsletter via email periodically which contains articles on Leadership, NLP and Coaching and dates of future events. You may unsubscribe from this at any time.
If you choose to book an NLP course with us we will use your email address for invoicing, as required; confirmation of booking; joining instructions; pre; and post course support, including marked certification tests and feedback. Also, if not previously collected, we will take your telephone number to ensure we maintain contact for support purposes prior, during and after your course. If your employer is paying for your course it will be necessary to collect your employer’s name, postal address and relevant email address only for invoicing purposes. If you are paying for the course yourself, we will record your personal postal address only for invoicing, payment and delivery of course materials. These records will be kept for the minimum statutory period required by HMRC Revenue and Customs. Where you are paying by credit card we either take full payment via Worldpay online or will take a deposit in the same manner and send you a Future Pay link to set up a secure payment plan via Worldpay. We do not keep any records of debit or credit cards.
For ILM qualifications we register you onto the ILM walled garden. We keep a tracker for each cohort’s assignment results which we then send to the ILM External verifier for sampling of your assignments if required. We may send copies of your mark sheet to your company if required. We will use your name to provide a certificate.
We will send your assignments to our marker(s)
We will also send you our newsletter periodically which contains articles on leadership, NLP and coaching and dates of future events.
How long we keep your data for
We will keep your data for the minimum statutory period and as long as you wish to receive our newsletter.
Where we store your data and how is it protected?
We take reasonable steps to protect your personal data from loss or destruction. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
Under the GDPR, you have various rights with respect to our use of your personal data:
Right to Access
You have the right to request a copy of the personal data that we hold about you by contacting us at the email address given below. Please include with your request information that will enable us to verify your identity. We will respond within 1 month of request. Please note that there are exceptions to this right. We may be unable to make all information available to you if, for example, making the information available to you would reveal personal data about another person, if we are legally prevented from disclosing such information, or if there is no basis for your request, or if it is excessive.
Right to rectification
We aim to keep your personal data accurate and complete. We encourage you to contact us using the contact details provided below to let us know if any of your personal data is not accurate or changes, so that we can keep your personal data up-to-date.
Right to erasure
You have the right to request the deletion of your personal data where, for example, the personal data are no longer necessary for the purposes for which they were collected, where you withdraw your consent to processing, where there is no overriding legitimate interest for us to continue to process your personal data, or your personal data has been unlawfully processed. If you would like to request that your personal data is erased, please contact us using the contact details provided below.
Right to object
In certain circumstances, you have the right to object to the processing of your personal data where, for example, your personal data is being processed on the basis of legitimate interests and there is no overriding legitimate interest for us to continue to process your personal data, or if your data is being processed for direct marketing purposes. If you would like to object to the processing of your personal data, please contact us using the contact details provided below.
Right to restrict processing
In certain circumstances, you have the right to request that we restrict the further processing of your personal data. This right arises where, for example, you have queried the accuracy of the personal data we hold about you and we are verifying the information, you have objected to processing based on legitimate interests and we are considering whether there are any overriding legitimate interests, or the processing is unlawful and you elect that processing is restricted rather than deleted. Please contact us using the contact details provided below.
Right to data portability
In certain circumstances, you have the right to request that some of your personal data is provided to you, or to another data controller, in a commonly used, machine-readable format. This right arises where you have provided your personal data to us, the processing is based on consent or the performance of a contract, and processing is carried out by automated means. If you would like to request make such request, please contact us using the contact details provided below.
Please note that the GDPR sets out exceptions to these rights. If we are unable to comply with your request due to an exception we will explain this to you in our response.
If you believe that your data protection rights may have been breached, and we have been unable to resolve your concern, you may lodge a complaint the applicable supervisory authority or to seek a remedy through the courts. Please visit https://ico.org.uk/concerns/ for more information on how to report a concern to the UK Information Commissioner’s Office.
Changes to our Policy
Any changes we may make to our Policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our Policy.