Your data protection rights under UK GDPR
brilliant-circuit is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take your privacy seriously and are transparent about how we collect, process, and protect your personal data.
brilliant-circuit is the data controller responsible for your personal data. Our contact details are:
brilliant-circuit
47 Chancery Lane
London WC2A 1PL
Email: [email protected]
We process your personal data under the following lawful bases:
We process personal data necessary to provide our educational services when you enrol your child in our programmes. This includes contact details, payment information, and information about your child necessary for their participation.
We may process data for our legitimate business interests, such as improving our services, communicating about programmes you may be interested in, and ensuring the security of our operations. We always balance these interests against your rights and freedoms.
Where required, we obtain your explicit consent before processing personal data. This includes consent for marketing communications and consent to process children's data. You may withdraw consent at any time.
We process certain data to comply with legal requirements, such as financial record-keeping and safeguarding obligations.
You have the right to request a copy of the personal data we hold about you. We will respond to your request within one month.
You have the right to request correction of any inaccurate personal data we hold about you.
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
You have the right to request restriction of processing of your personal data in certain circumstances.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
You have the right to object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making processes.
As an organisation that provides services to children, we take additional care when processing children's data:
We implement appropriate technical and organisational measures to ensure security of personal data, including:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will:
We primarily store and process data within the United Kingdom. If we transfer data internationally, we ensure appropriate safeguards are in place as required by UK GDPR.
To exercise any of your rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond within one month, though this may be extended by two months for complex requests.
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.