GDPR Compliance

Our Commitment to Data Protection

maple-manta is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: To fulfill our obligations when you enroll in our courses
• Consent: When you provide explicit consent for specific purposes, such as marketing communications
• Legitimate interests: To improve our services and operate our business effectively
• Legal obligation: To comply with applicable laws and regulations

Data Controller Information

maple-manta is the data controller responsible for your personal information. Our contact details are:

Email: [email protected]
Address: 42 Wellington Street, Leeds LS1 4AB, United Kingdom

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal information we hold about you.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Course enrollment and delivery: Duration of the course plus 2 years for record-keeping
• Marketing communications: Until you withdraw consent or 3 years of inactivity
• Legal and regulatory requirements: As required by applicable law

International Data Transfers

We primarily store and process your data within the United Kingdom. If we transfer your data outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication procedures
• Regular security assessments and updates
• Staff training on data protection

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request. We may request additional information to verify your identity before processing your request.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: www.ico.org.uk
Phone: 0303 123 1113

Changes to This Policy

We may update this GDPR compliance statement from time to time. Any changes will be posted on this page with an updated revision date.