Our Privacy Policy

Your use of this website and any subsequent use of our services is based on your acceptance of the following information relating to data protection and our use of your personal information.

This privacy policy sets out how BrightLife Learning Ltd uses and protects any information that you provide to us when you use this website or our services.

BrightLife Learning is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be personally identified, then you can be assured that it will only be used in accordance with this privacy policy statement.

What is personal data and how does UK law affect how we use it?

Personal data is information relating to you as a living, identifiable individual. We refer to this as “your personal data”.

The UK-GDPR and Data Protection Act 2018, (DPA 2018) requires us as a data controller for your data to:

  • Process your data in a lawful, fair and transparent way.

  • Only collect your data for explicit and legitimate purposes.

  • Only collect data that is relevant and limited to the purpose(s) we have told you about.

  • Ensure that your data is accurate and up to date.

  • Ensure that your data is only kept for as long as is necessary and for the purpose(s) we have told you about.

  • Ensure that appropriate security measures are used to protect your data.

When we may collect data about you?

We may collect personal information from you when you:

·      Subscribe to our mailing list(s).

·      Contact us via telephone or email.

·      Make an enquiry regarding our workshops or other products.

·      Request of share information through our website.

·      Book onto one of our workshops or activities. 

What information do we collect?

The personal information we collect may include but is not limited to the following:

·      Your first name(s) and surname.

·      Your email address.

·      You address and / or your postcode.

·      Your telephone number(s).

·      Other details that you may provide to us.

In the case of a young person under 18 (referred to as a “child” for this purpose), we collect only the following:

·      First name and surname.

·      School year number.

·      A contact telephone number for a parent, guardian or other responsible person.

How do we use this information?

Your information will only be used by us for the following purposes:

·      To send you our email newsletters, updates, products and offers.

·      To process your information requests.

·      To process your workshop bookings.

·      To collect payments for workshop bookings or other products we might supply.

·      Display any testimonials you might provide to us on our website.

·      Maintain our administrative records.

·      To obtain and hold parental consent where were we are required to do so by law.  

In the case of a young person under 18, we will use their personal information only the following purposes:

·      To maintain a record of attendance at our workshops and activities.

·      To be able to contact the parent, guardian or other responsible person should we need to do so, for example in the event of sudden illness or late/non-collection at the end of a workshop or other activity.

·      To supply certificates of completion or achievement. 

Lawful basis on which we process your personal information

The UK-GDPR and DPA 2018 require that we provide you with information about the lawful basis on which we process your personal data, and for what purpose(s).

The lawful basis for processing your personal data is contained within Article 6 of the UK-GDPR which states:

Processing shall be lawful only if and to the extent that at least one of the following applies:

  1. The data subject has given consent to the processing of his or her personal data for one or more specific purposes.

  2. Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

  3. Processing is necessary for compliance with a legal obligation to which the controller is subject.

  4. Processing is necessary in order to protect the vital interests of the data subject or of another natural person.

  5. Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

  6. Processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, except where such interests are overridden by the interests or fundamental rights andfreedoms of the data subject which require protection of personal data and, where the data subject is a child.

Sharing your personal information

We do not (and will not) sell your data to any commercial third party. We will only share your information if we are required to do so by law.

By law, we might be required to share your data with UK agencies with duties relating to the prevention and detection of crime, apprehension and law enforcement, when required to do so or where it is considered appropriate in the circumstances and with proper consideration of your rights and freedoms (in cases where the law places a duty on us to report).

Where we are required to share information as described above, we will share only the minimum of information necessary to fulfil the purpose.

Data retention

We retain your personal information for only as long as necessary to fulfil the purpose(s) for which we collected it, including for the purpose of satisfying any legal, accounting, regulatory, disciplinary or reporting purposes.

Data security

We adopt data collection, storage and processing practices and security measures to protect against unauthorised access, alteration, disclosure or destruction of your personal information, transaction information and data stored with respect to our website.

Data that we have collected is held on protected devices, including where it is held as part of a back-up version. 

Attendance registers will normally be held in electronic form and will held on protected devices.

Paper-based attendance registers, where used, will be held secure at all times and will not be left in unlocked rooms, in vehicles or other locations.

Cookies

We use cookies to help our site run effectively and provide the best experience for you as our site visitor. 

Cookies are small text files that a web page can save on your computer and read at a later date. We use cookies only where necessary for the purposes of the technical operation of our website, integration of mailing lists and other functions of our website.

Full details of the cookies that we use are available via this link.

 

V1.1 - 1st September 2022.