GDPR Information

Your data protection rights under UK GDPR

Understanding Your Data Protection Rights

The UK General Data Protection Regulation (UK GDPR) gives you specific rights regarding your personal data. This page explains these rights and how to exercise them with opal-willow Educational Services Ltd.

What is Personal Data?

Personal data is any information that relates to an identified or identifiable individual. This includes obvious identifiers like your name and email address, as well as online identifiers like IP addresses and cookie data.

Data Controller Information

For the purposes of UK GDPR, the data controller is:

opal-willow Educational Services Ltd
42 Kingsland Road
London E2 8DA
United Kingdom
Email: [email protected]

Your GDPR Rights

1. Right to Be Informed

You have the right to know how your personal data is collected and used. This information is provided in our Privacy Policy, which explains what data we collect, why we collect it, how we use it, and who we share it with.

2. Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a "subject access request." We will provide this information within one month of receiving your request.

How to request: Email [email protected] with "Subject Access Request" in the subject line. Include sufficient information to verify your identity.

3. Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it. We will respond to rectification requests within one month.

How to request: Contact us with details of the inaccurate information and the correct information.

4. Right to Erasure

Also known as the "right to be forgotten," this allows you to request deletion of your personal data in certain circumstances, including:

  • The data is no longer necessary for the purpose it was collected
  • You withdraw consent and there is no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed

Note that this right is not absolute. We may need to retain certain data for legal or regulatory reasons.

5. Right to Restrict Processing

You can request that we restrict how we process your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.

When processing is restricted, we can store the data but not use it without your consent, except for legal claims or protecting another person's rights.

6. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can also request that we transfer this data directly to another organisation where technically feasible.

This right applies when processing is based on consent or contract performance and is carried out by automated means.

7. Right to Object

You can object to processing of your personal data where we rely on legitimate interests as the legal basis. We must stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

You have an absolute right to object to processing for direct marketing purposes. If you object, we will stop processing your data for that purpose.

8. Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.

We do not currently use automated decision-making or profiling that would fall under this category.

How to Exercise Your Rights

To exercise any of your GDPR rights:

  1. Send an email to [email protected]
  2. Include "GDPR Request" or the specific right you're exercising in the subject line
  3. Provide sufficient information to verify your identity
  4. Clearly state which right you wish to exercise and any relevant details

We will respond to your request within one month. In complex cases, we may extend this by two additional months, but we'll inform you of any extension within the first month.

Verification Process

To protect your privacy, we must verify your identity before responding to GDPR requests. We may ask for additional information to confirm you are the person whose data is being requested.

No Fee Required

We do not charge a fee for exercising your GDPR rights. However, if your request is clearly unfounded, repetitive, or excessive, we may charge a reasonable fee or refuse to respond.

Complaints and Concerns

If you are not satisfied with how we have handled your personal data or responded to your rights request, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom

Helpline: 0303 123 1113
Website: ico.org.uk
Email: [email protected]

We encourage you to contact us first so we can try to resolve any concerns directly.

Data Breach Notification

In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also report the breach to the ICO within 72 hours of becoming aware of it, where required by law.

International Data Transfers

Your personal data is primarily stored and processed in the United Kingdom. If we transfer data internationally, we ensure appropriate safeguards are in place, such as:

  • Adequacy decisions recognising equivalent data protection standards
  • Standard contractual clauses approved by the UK authorities
  • Binding corporate rules

Children's Data

Our services are not intended for individuals under 18. We do not knowingly collect or process personal data from children. If we become aware that we have collected data from a child without appropriate consent, we will delete it promptly.

Updates to This Information

We may update this GDPR information page to reflect changes in law or our practices. Please check back periodically for updates. The date of the last update is shown at the top of this page.

Further Information

For comprehensive information about how we collect, use, and protect your personal data, please review our Privacy Policy. For questions not answered here, contact us at [email protected].