Blue Octopus Learning referred to in this policy as we, us, our.
The person who is accessing our website and whose data is processed is referred to in this policy as you and your.
2.1 Our site is owned and operated by Blue Octopus Learning, a business structure that is a sole trader
2.2 Registered address: 5 Wood Lane Close, Sonning Common, RG4 9SP
2.3 Email address: firstname.lastname@example.org
2.4 Telephone number: 07852911104
3. What does this policy cover?
4. Your personal data
Personal data is defined by the Data Protection Act 2018 and the UK General Data Protection Regulation (the “UK GDPR”) which is collectively known as, “the Data Protection Legislation” and defines personal data as any information that relates to an identifiable individual, directly or indirectly, through an identifier.
Any information pertaining to an identified or recognisable individual is considered personal data, and that person is referred to as the data subject. Your name, contact information, feedback, the services you received, as well as less evident information such as identification numbers, electronic location data, IP addresses, operating systems, and online identifiers, are all examples of the information that could be included.
5. Your rights in relation to data
Under the Data Protection Legislation, you have the following rights, which are able to do requests without charge. They are as follows:
a) The right to access – this is the right to obtain from us confirmation of whether personal data concerning you is being processed, and, where that is the case, access to that personal data and various other information and/or rights about the personal data we hold about you.
b) The right to rectification – this is the right to obtain from us, without any undue delay, the putting right of inaccurate personal data concerning you.
c) The right to erasure – this is the right for you to request, in certain circumstances, for us to delete or otherwise dispose of any of your personal data relating to you.
d) The right to restrict – this means that you can request that, in certain circumstances, we restrict (i.e., prevent) the processing of your personal data.
e) The right to data portability - this means that, in certain circumstances, if you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that personal data to re-use with another data controller.
f) The right to object – in certain circumstances, you can object to us using your personal data for a particular purpose or purposes, such as direct marketing.
g) The right not to be subjected to automated decision-making – you have the right not to be subject to a decision based solely on automated processing and profiling. We do not use your personal data in this way.
h) The right to withdraw consent. This means that, if we are relying on your consent as the legal basis for using your personal data, you are free to withdraw that consent at any time.
For more information about our use of your personal data or exercising your rights as outlined above, please do not hesitate to contact us using the details provided in Clause 10.
Keeping your personal data accurate and up-to-date is crucial. If any of the personal data we hold about you changes, kindly keep us informed as long as we have that data.
6. What data is collected and how
When you use our website, certain information is collected automatically, such as your IP address, the type of browser you are using, and other non-personal data about your device, such as operating system type or version, and display resolution.
If you choose to contact us via email, we may collect your name, your email address, and any other information which you provide. For the purposes of the Data Protection Legislation, we are the data controller responsible for such personal data.
Under the Data Protection Legislation, we may use your information as it is necessary for the purposes of our legitimate interests, as allowed under Article 6(1)(f) of the GDPR. The legitimate interests are the proper operation and functionality of our website.
We may also use your personal information for marketing purposes, which may involve getting in touch with you by phone, email, text message, or letter to share information, news, and offers about our products/services, with your consent and/or where permitted by law. You will always have the option to opt out as we constantly work to completely uphold your rights and adhere to our commitments under the Data Protection Legislation and the Privacy and Electronic Communications (EC Directive) Regulations 2003.
7. Keeping your data secure
If any personal data is collected, it will be stored and processed securely and not for longer than necessary for the original purpose of collection. We will always comply with our legal obligations and protect your rights under Data Protection Legislation. More information on security can be found in Clause 7.
We have stated above the personal data collected from you. However, please note that if you contact us and we obtain your personal details from your email, we may use them to respond to your email. The other technical data referred to above is necessary for the technical operation of our Site.
We will not share your personal data with any third parties for any purposes except for storage on email or web hosting servers.
8. Transferring your data
We will only store your personal data in the UK. This means that it will be fully protected under the Data Protection Legislation.
9. Sharing your data with others
We will only share your personal data with third parties in the following circumstances:
ii. In some limited circumstances, we may be required to disclose your personal data to the government, law enforcement and regulatory bodies and agencies in order to comply with our own legal and regulatory obligations.
Occasionally, it may be necessary to share data for statistical purposes.
Any personal data that is transferred to a third party will be handled safely, securely, and in accordance with your rights, our obligations, and the third party's legal obligations. We will take reasonable steps to ensure that the information and data are anonymised before sharing it with any third party.
10. How can I access my personal data?
You have the right to request details of any personal data that we hold about you, which is also known as a "subject access request". Please contact us using the details provided at the top of this Policy if you wish to make such a request.
All subject access requests should be made in writing and sent to the email or postal addresses shown at the top of this Policy.
There is not normally any charge for a subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.
Upon receiving your subject access request, we will respond within one month. While we aim to provide a complete response, including a copy of your personal data within this time, it may take up to three months from the date of receiving your request if it is complex. We will keep you informed of our progress.
11. About cookies
You can typically prevent the download and deletion of cookies in your browser. The process for doing so may vary by browser, so please consult your browser provider's website for instructions. Please note that if you block or delete cookies, it may negatively affect your ability to access our website and services. This could result in limited access to our website's features or a complete inability to access our member services.