Our commitment to protecting your data under UK GDPR
Last updated: January 2024
moon-sequoia is committed to ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take our data protection responsibilities seriously and have implemented appropriate measures to safeguard your personal information.
moon-sequoia acts as the data controller for personal information collected through our website and services. As the data controller, we determine the purposes and means of processing personal data.
Contact details:
moon-sequoia
47 Deansgate
Manchester, M3 2BW
United Kingdom
Email: [email protected]
We process personal data only when we have a valid lawful basis. The lawful bases we rely on include:
When you enrol in a course, we process your data to fulfil our contractual obligations, including:
We may process data based on our legitimate business interests, provided these interests do not override your rights. Examples include:
Where required, we obtain your explicit consent before processing. You may withdraw consent at any time by contacting us.
We process data when necessary to comply with applicable laws and regulations.
As a data subject, you have the following rights:
You have the right to know how we collect and use your personal data. This notice, along with our Privacy Policy, fulfils this requirement.
You may request a copy of the personal data we hold about you. We will respond to such requests within one month.
If any personal data we hold is inaccurate or incomplete, you have the right to request correction.
In certain circumstances, you may request deletion of your personal data. This right is not absolute and depends on the legal basis for processing.
You may request that we limit how we use your data in specific situations.
Where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
You may object to processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making.
We implement technical and organisational measures to protect personal data, including:
We primarily store and process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as:
In the event of a personal data breach, we have procedures to:
To exercise any of your rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond within one month, though this may be extended by two months for complex requests.
If you believe we have not handled your data appropriately, you may:
ICO Contact:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
We review our GDPR compliance regularly and may update this notice accordingly. Material changes will be communicated through our website.