GDPR Information

Our Commitment to GDPR Compliance

Grove-lumen is committed to protecting your personal data in accordance with the General Data Protection Regulation. This page provides specific information about how we comply with GDPR requirements.

Data Controller Information

For the purposes of GDPR, the data controller is:

Grove-lumen
42 Deansgate Avenue
Manchester, M3 2FF
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process your personal data under the following lawful bases as defined by GDPR:

• Consent: When you voluntarily provide information through our enrollment forms
• Contract: Processing necessary to deliver the courses you have enrolled in
• Legitimate Interests: Operating our business and improving our services, provided your rights are not overridden
• Legal Obligation: Compliance with laws and regulations applicable to educational services

Your Rights Under GDPR

You have comprehensive rights regarding your personal data:

Right to Access

You can request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal information we hold about you.

Right to Erasure

Under certain conditions, you can request deletion of your personal data. This right is not absolute and may be limited by legal retention requirements.

Right to Restrict Processing

You can request that we limit how we use your personal data in specific circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Exercising Your Rights

To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month, though this period may be extended in complex cases.

Data Protection Officer

For questions specifically related to data protection, you may contact our designated representative at [email protected].

International Data Transfers

We primarily process data within the United Kingdom. If data is transferred internationally, we ensure appropriate safeguards are in place as required by GDPR.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours as required by law.

Right to Lodge a Complaint

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office, the UK supervisory authority for data protection.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk

Updates to GDPR Information

We review and update our GDPR compliance procedures regularly. Any changes to how we handle your data will be reflected on this page.