Your data protection rights under the General Data Protection Regulation
Last updated: January 2024
Cloud-field is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we comply with data protection legislation and outlines your rights.
Cloud-field is the data controller responsible for your personal data. Our contact details are:
Cloud-field
47 Dale Street
Liverpool, L2 2HJ
United Kingdom
Email: [email protected]
We process your personal data based on the following legal grounds:
When you enrol in a course, we process your data as necessary to fulfil our contract with you, including:
We may process data for our legitimate business interests, provided these do not override your rights:
Where required, we obtain your explicit consent before processing, such as for:
We may process data to comply with legal requirements, such as maintaining financial records.
You have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond within one month of receiving your request.
You have the right to request that we correct any inaccurate personal data or complete any incomplete data we hold about you.
You have the right to request that we delete your personal data in certain circumstances, including:
You have the right to request that we limit how we use your data in certain situations, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making.
To exercise any of your rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond to your request within one month, though this may be extended by two months for complex requests.
We implement appropriate technical and organisational measures to protect your personal data, including:
We retain personal data only for as long as necessary for the purposes for which it was collected. Typical retention periods include:
Your data is primarily stored and processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place as required by UK GDPR.
For our youth programmes, we collect data about children with the consent of their parent or guardian. Parents have the right to review, update, or request deletion of their child's data.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and, where required, inform affected individuals without undue delay.
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.