Privacy Policy

Last updated: October 2024

Introduction

calm-star is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect information when you use our website or engage with our services.

By using our website or submitting information through our forms, you acknowledge that you have read and understood this Privacy Policy.

Information We Collect

We collect information that you provide directly to us, including:

• Name and contact details when you submit an enquiry form
• Email address for communication purposes
• Course preferences and interests you indicate
• Any additional information you choose to provide in message fields

We also automatically collect certain technical information when you visit our website:

• Browser type and version
• Device type and operating system
• Pages visited and time spent on our website
• Referring website address
• IP address (anonymised where possible)

How We Use Your Information

We use the information we collect for the following purposes:

• Responding to your enquiries about our courses
• Providing information about programmes that match your interests
• Processing course enrolments and managing student records
• Improving our website and services based on usage patterns
• Complying with legal obligations

Legal Basis for Processing

We process your personal data under the following legal bases as defined by the UK General Data Protection Regulation:

• Consent: When you submit an enquiry form, you consent to us contacting you about our services
• Contractual necessity: When processing is required to fulfil our obligations to enrolled students
• Legitimate interests: For improving our services and website functionality
• Legal obligation: When required by law to retain or disclose information

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Enquiry data: 24 months from last contact
• Student records: 7 years after course completion (for certification verification)
• Website analytics: 26 months

Data Sharing

We do not sell your personal information to third parties. We may share your data with:

• Service providers who assist with our operations (e.g., email hosting, website analytics)
• Professional advisers when required (e.g., accountants, legal counsel)
• Authorities when required by law

All third-party service providers are bound by data processing agreements that ensure appropriate protection of your information.

Your Rights

Under UK data protection law, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Request limitation of processing in certain circumstances
• Portability: Request transfer of your data to another organisation
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, please contact us using the details below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

International Transfers

Your data is primarily processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK data protection requirements.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting a notice on our website. The date at the top of this policy indicates when it was last revised.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

calm-star
47 Chancery Lane
London WC2A 1PL
United Kingdom

Email: [email protected]

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.