About us:

We, as a business, are committed to ethical and responsible ways of working and take your data protection seriously. This privacy notice tells you about how we process your data and what you can expect from us when you use us or one of our services.

 

We are registered as a Data Controller for personal information we process, unless otherwise stated. Please use the details below to contact us should you need to. To view our registration as Data Controllers – click here

​

Our trading name is Eight Academy and our registered company is EightUK Ltd. We are qualified and hold several professional registrations and the relevant insurance to be able to perform our services – we will provide a copy to you directly when you engage in our services.

​

General Data Protection Regulations (GDPR):

Under General Data Protection Regulations (GDPR) you have rights that we would like to ensure you know about. These rights are dependent on our reason for processing your information:

 

Right to access: You have the right to request any copies of personal information. This right will always apply, however there may be some exemptions which means that you may not always receive all the information we process inline with GDPR.

 

Right to erasure: You have the right to ‘be forgotten’ and for your data to be erased in certain situations. This right can be exercised only in the following circumstances:

​

• If we no longer need your data for the original reason that we collected or used it for

• You initially consented that we could use your data but have now withdrawn your consent

• You have objected to the use of your data, and your interests outweigh those of our business

• You have objected to the use of your data for direct marketing purposes

• Your data has been collected or used unlawfully

• Your data was collected from you as a child for online services

​

Requests for data to be deleted can be made directly to us either verbally or in writing. Please follow up with any verbal request so we can better understand your concern and what you would like to happen. You can click here for a template should you wish to submit this request in writing

​

There may be a reasonable fee associated with your request if it is excessive. There are some situations where your data cannot be deleted. If an exemption applies or the request is manifestly unfounded, we will contact you to explain this in writing within one month.

In certain circumstances we may need extra time to consider your request and this could take up to an extra two months, however we will let you know about this within one month and explain why this might be the case.

​

Please note: We will always ask for proof of identity for any data requests to ensure that you are the right person. The one month will begin from when we receive this information.

​

If you would like to speak with us about how your request is being handled please contact us on the details in the contact section below.

​

Right to restricting of processing: You have the right to restrict the processing of your personal data. We will not use your personal data for any other reason than which we obtained it (without your explicit consent).

​

Right to object to processing: You have the right to object to processing at any time. However, this only applies under certain circumstances as advised by the ICO. If you object to your personal data being processed for direct marketing, we will hold your details on our ‘marketing suppression list’ and your name checked against any direct marketing lists to ensure we don’t use your data for direct marketing.

​

If you would like to object to processing, please inform us; explaining why you believe that we should stop processing your data in this way. The request can be made verbally or in writing. You can click here for a template should you wish to submit this request in writing.

​

Right to data portability: Information you have given us can be transferred from one organisation to another or given to you on your request. This right applies if we are processing information based on your consent or in talks about entering a contact and the processing is automatic. This request is free and we have one month to respond to this request.

Please use the contact details below to speak with us about any of the above

 

Lawful basis for processing: We collect data so that we can provide you with an exceptional level of service. We also need this information so that we can contact and respond to you. The lawful basis we rely on to process your personal data is your consent under article 6 (1) (a) of the GDPR.

 

Please view our retention policy.

​

Spam: In line with the Privacy and Electronic Communications (EC Directive) Regulations 2003, we never send bulk unsolicited emails. This is also known as spam.

​

Accessing our website and Cookies: We use cookies on our website. These are small text files placed on your computer by websites that you visit, including ours.  

​

You can refuse cookies by clicking on the relevant option on our site, however this may affect your user experience and our website efficiency. You may need to refresh your page for your settings to take effect. You can also change your settings via your web browser or computer settings.

​

We use cookies to provide the services and features offered on our website, and to improve your user experience.

​

Collecting your Data: We obtain your data either directly from you or from a third party if we are asked to work with you through your organisation, with your explicit permission. We will contact you to let you know that we are processing your personal information.

Sharing your Data: We will not share your information with any third party for the purposes of direct marketing.

We may use data processors who are third parties who provide elements of services for us. We will have agreements or contacts in place with our data processors – please also view their privacy policies:

​

Strengthscope

Third parties cannot do anything with your personal data unless we have instructed them to do it. They will not share any of your data with any organisation apart from us. They will hold it securely and retain it for the period stated in their privacy policy, which is in line with the period for which we need it.

​

Please note: In some circumstances we are legally obliged to share information. For example, under a court order or where we cooperate with other European supervisory authorities in handling complaints or investigations. We might also share information with other regulatory bodies in order to further their, or our, objectives. In any scenario, we’ll satisfy ourselves that we have a lawful basis on which to share the information and document our decision making and satisfy ourselves we have a legal basis on which to share the information.

 

Storing your Data:  Your data will be stored securely and can only be accessed via a two-step authentication process. All our computers are protected by a firewall and are not accessed by anyone outside the organisation.

​

Internal Policies: We have data breach policies and notification processes in place and all our colleagues are trained annually on General Data Protection Regulations.

​

External Websites: Where we may provide links to external websites, other organisations or useful information, this privacy notice does not cover how that organisation processes any of your personal information. Please do read their privacy notices as they may vary from ours.

 

Contact details:

​

There are many ways you can contact us, including phone, email, via the website and post:

​

Phone: 07426777075

Email: Sarah@eightacademy.co.uk

Our registered office address is: 6 Viewpoint Office Village, Babbage Road, Stevenage, Hertfordshire, England, SG1 2EQ

 

For general contact please use this page of our website.

 

Please note: We keep our privacy notice up to date and will let you know about any changes when they happen.

​

​​